9213a1ebcc
Get the display name of the Matrix user on the consent screens
2025-12-02 17:51:23 +01:00
87c897c51a
Add configuration for session limiting
2025-11-06 10:12:14 +00:00
b54a657c32
data model: Add personal sessions with mpt_ prefix
2025-10-07 16:08:43 +01:00
377ef1d390
Inject the version in the app state
2025-10-03 11:41:22 +02:00
576b5c6e73
Remove unnecessary crate-level comment
2025-08-18 16:48:04 +02:00
a75ca69ed0
move Clock/MockClock/SystemClock/BoxClock/BoxRng to mas-data-model : format
2025-07-31 12:35:56 +02:00
d65b70d0dc
move Clock/MockClock/SystemClock/BoxClock/BoxRng to mas-data-model : correct documentation
2025-07-31 12:34:01 +02:00
c314802fcd
move Clock/MockClock/SystemClock/BoxClock/BoxRng to mas-data-model
2025-07-31 11:17:33 +02:00
c7b57f7d4c
fix rust style
2025-07-21 09:52:24 +02:00
3774850c94
use of UpstreamOAuthProviderLocalpartPreference
2025-07-21 09:52:24 +02:00
98912f4ada
allow importing existing users when the localpart matches in upstream OAuth 2.0 logins
2025-07-21 09:52:24 +02:00
e28ffccc3a
Backchannel logout behavior settings on upstream providers
2025-07-04 16:27:10 +02:00
3d96dc9d47
Update license headers to match the actual license
2025-06-12 10:32:16 +02:00
ccb971d3d3
Data model and repository for user registration tokens
2025-06-03 17:42:52 +02:00
6a37fdfe30
Merge branch 'main' into quenting/dynamic-policy-data
2025-03-14 10:16:16 +01:00
aa3af157a3
storage: store dynamic policy data in the database
2025-02-25 12:26:22 +01:00
9cdc3b9f37
Allow compat session devices to have spaces
2025-02-19 17:55:18 +01:00
935400d87b
Experimental feature to timeout inactive sessions
2025-02-12 17:31:21 +01:00
dbb53160b6
Data model and storage layer for storing user registrations
2025-01-14 16:30:43 +01:00
0513f198d8
Rip out the email verification codes
...
This considers all user_emails as confirmed, and removes the verification code.
It will be replaced by a new email authentication code flow
2025-01-14 15:46:45 +01:00
75526ff0c4
storage: new email authentication codes
2025-01-13 17:00:30 +01:00
6efe8bf45a
Allow setting the response_mode on upstream OAuth 2.0 providers
2024-11-22 08:48:00 +01:00
ab4f438464
Support Sign in with Apple
2024-11-22 08:48:00 +01:00
c017dd0840
Implement login_hint
2024-11-18 11:42:43 +01:00
ed4b6c42a7
Remove (C)
2024-09-10 14:28:55 +02:00
f6bb100c0a
License headers change
2024-09-05 13:25:42 +02:00
43582e7eca
Data model and repository for the user recovery flow
2024-06-28 15:59:21 +02:00
a3beeb2398
Render reCAPTCHA challenge on the registration form
2024-05-15 09:38:10 +02:00
10d7ca95ae
Update copyright headers
2024-04-30 13:33:47 +02:00
f0899f17bd
Move the SiteConfig to the data-model crate
2024-04-30 13:33:47 +02:00
1cb48b8026
Add a manage register-user utility to the CLI
2024-04-30 12:15:10 +02:00
f3cbd3b315
Parse User Agents on the backend side ( #2388 )
...
* Parse user agents on the server side
* Parse and expose user agents on the backend
* Use the parsed user agent in the device consent page
* Fix the device icon tests
* Fix clippy warnings
* Box stuff to avoid large enum variants
* Ignore a clippy warning
* Fix the requester boxing
2024-02-23 16:47:48 +01:00
ae05cbc1f1
Setup the data model for the device code grant
2024-02-02 18:01:51 +01:00
a0f5f3c642
Enable clippy lints on a workspace level
...
This enables a lot more lints than before in some crates, so this fixed a lot of warnings as well.
2023-12-05 17:20:42 +01:00
364093f12f
Allow overriding usptream OAuth2 providers endpoints
...
Also have a way to disable OIDC discovery when all the endpoints are known.
2023-11-17 16:18:39 +01:00
6ded397977
Use minijinja templates to map OIDC claims to user attributes
2023-11-08 12:05:58 +01:00
ae3213fe87
Make the email verification state more configurable on upstream OAuth 2.0 registration
...
This also marks the email as primary
2023-08-31 14:20:06 +02:00
d9a12de8a3
Save the authentication method on each authorization
...
This will help us logging out of the upstream.
2023-08-28 17:14:59 +02:00
de13d3ef19
CLI tool to sync the upstream IDPs with the config
2023-06-26 17:24:56 +02:00
c183830489
Ground work to import upstream OIDC claims on registration.
2023-06-26 17:24:56 +02:00
83cb9158a0
Fix clippy errors
2023-03-14 10:47:35 +01:00
9f0c9f1466
storage: cleanup access/refresh token lookups
2023-01-11 12:14:52 +01:00
920869b583
storage: do less joins in compat sessions
2023-01-10 18:49:35 +01:00
35787aa072
data-model: have more structs use a state machine
2023-01-09 18:02:32 +01:00
39cd9a2578
data-model: don't embed the client in the auth grant
2023-01-09 10:49:51 +01:00
533cabe005
Use the new password manager
2022-12-14 16:04:36 +01:00
12ce2a3d04
data-model: simplify the authorization grants and sessions
2022-12-08 15:29:15 +01:00
bedcf44741
WIP: upstream OIDC provider support
2022-12-05 19:39:51 +01:00
c1ed726dc8
Enable the clippy::str_to_string lint
2022-08-08 10:06:20 +02:00
649e5cd645
Move the PKCE validation logic to oauth2-types
2022-08-03 13:57:31 +02:00
Quentin Gliech