dandri/matrix-authentication-service
1
0 Fork 0
mirror of https://github.com/element-hq/matrix-authentication-service.git synced 2026-10-23 02:13:37 +00:00
Code Issues Packages Projects Releases Wiki Activity
6,110 Commits 89 Branches 115 Tags
e37456b01206e44dadbfeedeb77334be7ffeeebe
Commit Graph
6110 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
reivilibre e37456b012 Only allow C-S device scopes when the C-S API scope has been requested (#5215) 2025-11-05 15:47:03 +00:00
reivilibreandQuentin Gliech 58ffe37678 Update docs/development/contributing.md 
Co-authored-by: Quentin Gliech <quenting@element.io>
 2025-11-05 15:40:12 +00:00
Quentin Gliech 0f2b32cb3c build(deps): bump react-i18next from 16.1.4 to 16.1.5 in /frontend in the i18next group (#5192) 2025-11-05 14:41:53 +01:00
Quentin Gliech 8f1f91d1bd build(deps): bump rustls from 0.23.32 to 0.23.34 (#5193) 2025-11-05 14:41:28 +01:00
Quentin Gliech 66ae58c07c build(deps-dev): bump the vite group across 1 directory with 2 updates (#5199) 2025-11-05 14:40:59 +01:00
Quentin Gliech 1ddaac23fb build(deps): bump actions/download-artifact from 5 to 6 (#5203) 2025-11-05 14:40:43 +01:00
Quentin Gliech 12325a7bb4 build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#5204) 2025-11-05 14:40:27 +01:00
Quentin Gliech e98df7e7f6 build(deps-dev): bump knip from 5.64.2 to 5.66.4 in /frontend (#5211) 2025-11-05 14:40:11 +01:00
Quentin Gliech e75358265a build(deps-dev): bump @biomejs/biome from 2.2.5 to 2.3.2 in /frontend (#5213) 2025-11-05 14:39:57 +01:00
Quentin Gliech 517883ec83 build(deps): bump docker/metadata-action from 5.8.0 to 5.9.0 (#5220) 2025-11-05 14:38:19 +01:00
dependabot[bot] 87c62bad4c build(deps): bump docker/metadata-action from 5.8.0 to 5.9.0 
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.8.0 to 5.9.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](https://github.com/docker/metadata-action/compare/v5.8.0...v5.9.0)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 5.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-05 13:14:13 +00:00
dependabot[bot] ef8bccb0ee build(deps-dev): bump the vite group across 1 directory with 2 updates 
Bumps the vite group with 2 updates in the /frontend directory: [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `@vitejs/plugin-react` from 5.0.4 to 5.1.0
- [Release notes](https://github.com/vitejs/vite-plugin-react/releases)
- [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@5.1.0/packages/plugin-react)

Updates `vite` from 7.1.11 to 7.1.12
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/v7.1.12/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v7.1.12/packages/vite)

---
updated-dependencies:
- dependency-name: "@vitejs/plugin-react"
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vite
- dependency-name: vite
  dependency-version: 7.1.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-04 13:14:11 +00:00
dependabot[bot] 21649bd29c build(deps): bump react-i18next in /frontend in the i18next group 
Bumps the i18next group in /frontend with 1 update: [react-i18next](https://github.com/i18next/react-i18next).


Updates `react-i18next` from 16.1.4 to 16.1.5
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/react-i18next/compare/v16.1.4...v16.1.5)

---
updated-dependencies:
- dependency-name: react-i18next
  dependency-version: 16.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: i18next
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-11-04 13:14:10 +00:00
matrixbot 938970d56a Automatic merge back to main (#5218) 2025-11-04 13:43:29 +01:00
github-actions[bot] 99a5ebe380 1.6.0-rc.0 v1.6.0-rc.0 2025-11-04 12:35:57 +00:00
matrixbot 84d01d3770 Translations updates for main (#5217) 2025-11-04 13:31:00 +01:00
github-actions[bot] 83cecafcf0 Translations updates 2025-11-04 12:19:44 +00:00
Olivier 'reivilibre e2a08d2365 Only allow C-S device scopes when the C-S API scope has been requested 
It'd be weird for a client to request a device on the client-server API but yet not request any client-server API scopes to use it with.

By adding this restriction, we can then create a partial index on the oauth2_sessions table to quickly identify sessions that have C-S API scopes and use this as a proxy metric for how many sessions may have device scopes.
This in turn makes it feasible to efficiently limit the number of 'devices' a user has, or more precisely: the number of sessions with client-server API access.

We can't do the same for device scopes themselves because, other than nastiness like parsing the JSON stringification of the scope list, it's not feasible to identify device scopes within a Postgres index predicate.

Part of: #4339
 2025-10-31 15:17:39 +00:00
Olivier 'reivilibre 532e4a4794 Update tests to prepare for needing C-S API scope 2025-10-31 15:12:45 +00:00
Olivier 'reivilibre 560ebc2202 Drive-by podman Makefile fix 2025-10-31 15:07:29 +00:00
Olivier 'reivilibre b94241d946 Drive-by contributing doc update for policies makefile 2025-10-31 15:07:19 +00:00
reivilibre ab52f7e568 templates check command: Allow saving rendered samples (#5202) 2025-10-30 14:00:01 +00:00
Olivier 'reivilibre f633e4251e Merge branch 'main' into rei/templatecheck_todisk 2025-10-30 13:52:33 +00:00
Olivier 'reivilibre e5183f600b Fix comment and change delimiter to = 2025-10-30 13:51:33 +00:00
reivilibre d2309bf11c templates: Be strict about undefined variables (#5201) 2025-10-30 12:24:54 +00:00
Olivier 'reivilibre 16ec04eb95 Change the format of SampleIdentifiers and don't make a subdir per locale 2025-10-30 12:06:09 +00:00
dependabot[bot] 993ded8836 build(deps-dev): bump @biomejs/biome from 2.2.5 to 2.3.2 in /frontend 
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.2.5 to 2.3.2.
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.2/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.3.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-29 13:17:21 +00:00
Olivier 'reivilibre eeeec358c7 Downgrade to SemiStrict in production 2025-10-28 17:20:49 +00:00
Olivier 'reivilibre ea7f568d81 Clarify some more conditions in the templates 2025-10-28 16:52:18 +00:00
Olivier 'reivilibre 647c8e703a For branding: use none instead of undefined 2025-10-28 15:51:34 +00:00
dependabot[bot] 7ae758511c build(deps-dev): bump knip from 5.64.2 to 5.66.4 in /frontend 
Bumps [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) from 5.64.2 to 5.66.4.
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Changelog](https://github.com/webpro-nl/knip/blob/main/packages/knip/.release-it.json)
- [Commits](https://github.com/webpro-nl/knip/commits/5.66.4/packages/knip)

---
updated-dependencies:
- dependency-name: knip
  dependency-version: 5.66.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-28 13:17:59 +00:00
matrixbot 35d2ce8758 Automatic merge back to main (#5210) 2025-10-28 13:57:36 +01:00
github-actions[bot] dc3fdd620a 1.5.0 v1.5.0 2025-10-28 12:50:11 +00:00
matrixbot 3343334e0e Translations updates for v1.5 (#5209) 2025-10-28 13:49:11 +01:00
github-actions[bot] e2ac337c69 Translations updates 2025-10-28 12:42:38 +00:00
reivilibre aae123b889 Add mas-maintainers github team to CODEOWNERS (#5188) 2025-10-27 17:31:23 +00:00
dependabot[bot] a2f5df92e9 build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 5.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4.6.2...v5.0.0)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-27 14:08:02 +00:00
dependabot[bot] c572ff57dd build(deps): bump actions/download-artifact from 5 to 6 
Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 5 to 6.
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/download-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-27 14:07:58 +00:00
Olivier 'reivilibre 7a24a22498 Introduce SampleIdentifiers to stably track samples 
and use these in output filenames
 2025-10-24 17:14:00 +01:00
Olivier 'reivilibre 763e236a0b cli: templates check: allow rendering to --out-dir 2025-10-24 15:43:19 +01:00
Olivier 'reivilibre 72f9a1f65b template macro: generate function for all checks 2025-10-24 15:03:22 +01:00
Olivier 'reivilibre 4af582a1c4 template macro: return rendered samples 2025-10-24 14:47:02 +01:00
Olivier 'reivilibre ceaac6154c templates: Be strict about undefined variables 
We shouldn't have any reason to use undefined variables in MAS, so
silently printing as empty strings (etc) seems undesirable.

This will also be helpful for operators with custom templates, since
then they will notice their templates being broken.
 2025-10-24 14:27:35 +01:00
Olivier 'reivilibre adad55161b templates: fix reliance on lax undefined behaviour 2025-10-24 14:27:35 +01:00
matrixbot 9a5f2f5c52 Automatic merge back to main (#5197) 2025-10-24 13:36:48 +02:00
github-actions[bot] 2f94de202c 1.5.0-rc.1 v1.5.0-rc.1 2025-10-24 11:29:40 +00:00
reivilibre e934b226c6 Fix UNIQUE constraint on active personal access tokens per session (#5196) 2025-10-24 12:27:19 +01:00
Olivier 'reivilibre a01c0af73e fix up test that relied on it being broken 2025-10-23 16:02:19 +01:00
Olivier 'reivilibre f020cce619 Fix UNIQUE constraint on active personal access tokens per session 2025-10-23 15:01:39 +01:00
dependabot[bot] cef2a1ca18 build(deps): bump rustls from 0.23.32 to 0.23.34 
Bumps [rustls](https://github.com/rustls/rustls) from 0.23.32 to 0.23.34.
- [Release notes](https://github.com/rustls/rustls/releases)
- [Changelog](https://github.com/rustls/rustls/blob/main/CHANGELOG.md)
- [Commits](https://github.com/rustls/rustls/compare/v/0.23.32...v/0.23.34)

---
updated-dependencies:
- dependency-name: rustls
  dependency-version: 0.23.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2025-10-23 13:14:44 +00:00