Commit Graph

6317 Commits

Author SHA1 Message Date
Hugh Nimmo-Smith fd62b80df8 Lint 2025-12-03 11:50:52 +00:00
Hugh Nimmo-Smith ca9cedcfda Stabilisation of supported MSC4191 account management actions
- Support the stable names and the unstable names
- Advertise both the stable names and the unstable names

This means that MAS supports either names. We can remove the unstable names once the is enough client adoption of the stable names.

n.b. this does not change the oauth2-types crate as not used by MAS.
2025-12-03 10:43:39 +00:00
Quentin Gliech ee4d1304ab Add more options to deal with localpart conflicts on upstream OAuth 2.0 logins (#5295) 2025-12-03 10:39:05 +01:00
Olivier 'reivilibre 3a342b6165 Add experimental and preliminary policy-driven session limiting when logging in compatibility sessions. (#5287) 2025-12-02 15:50:04 +00:00
Olivier 'reivilibre c0f2d3aef9 Update templates/pages/compat_login_policy_violation.html
Co-authored-by: Quentin Gliech <quenting@element.io>
2025-12-02 15:25:04 +00:00
Olivier 'reivilibre 38897c9bab build(deps): bump convert_case from 0.8.0 to 0.9.0 (#5275) 2025-12-01 17:30:27 +00:00
Olivier 'reivilibre 4b40dd716b build(deps): bump actions/checkout from 5 to 6 (#5277) 2025-12-01 16:56:19 +00:00
Olivier 'reivilibre 16d6b730e9 build(deps): bump docker/bake-action from 6.9.0 to 6.10.0 (#5292) 2025-12-01 16:55:47 +00:00
Olivier 'reivilibre 617c2640e0 build(deps): bump valibot from 1.1.0 to 1.2.0 in /frontend (#5291) 2025-12-01 16:55:01 +00:00
Olivier 'reivilibre 4675c6a9eb build(deps): bump EmbarkStudios/cargo-deny-action from 2.0.13 to 2.0.14 (#5288) 2025-12-01 16:54:42 +00:00
Olivier 'reivilibre 541450bad3 build(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 (#5283) 2025-12-01 16:19:10 +00:00
Olivier 'reivilibre 3298c4173f build(deps-dev): bump msw-storybook-addon from 2.0.5 to 2.0.6 in /frontend (#5279) 2025-12-01 16:19:00 +00:00
Olivier 'reivilibre 40516a9161 build(deps-dev): bump @biomejs/biome from 2.3.2 to 2.3.7 in /frontend (#5280) 2025-12-01 16:18:49 +00:00
Olivier 'reivilibre 8efd370a58 build(deps-dev): bump the graphql-codegen group in /frontend with 2 updates (#5278) 2025-12-01 16:18:09 +00:00
dependabot[bot] c29db4c81f build(deps-dev): bump the graphql-codegen group
Bumps the graphql-codegen group in /frontend with 2 updates: [@graphql-codegen/cli](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/graphql-codegen-cli) and [@graphql-codegen/client-preset](https://github.com/dotansimha/graphql-code-generator/tree/HEAD/packages/presets/client).


Updates `@graphql-codegen/cli` from 6.0.2 to 6.1.0
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/graphql-codegen-cli/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/cli@6.1.0/packages/graphql-codegen-cli)

Updates `@graphql-codegen/client-preset` from 5.1.3 to 5.2.0
- [Release notes](https://github.com/dotansimha/graphql-code-generator/releases)
- [Changelog](https://github.com/dotansimha/graphql-code-generator/blob/master/packages/presets/client/CHANGELOG.md)
- [Commits](https://github.com/dotansimha/graphql-code-generator/commits/@graphql-codegen/client-preset@5.2.0/packages/presets/client)

---
updated-dependencies:
- dependency-name: "@graphql-codegen/cli"
  dependency-version: 6.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: graphql-codegen
- dependency-name: "@graphql-codegen/client-preset"
  dependency-version: 5.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: graphql-codegen
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-01 15:53:04 +00:00
Olivier 'reivilibre 6abe9ac5e2 Revert "Add 'IF NOT EXISTS' to all 'CREATE INDEX CONCURRENTLY' statements to avoid deadlocks (#5297)" (#5299) 2025-12-01 12:22:54 +00:00
Olivier 'reivilibre be0444a2f0 Revert "Add 'IF NOT EXISTS' to all 'CREATE INDEX CONCURRENTLY' statements to avoid deadlocks (#5297)"
This reverts commit 1de9148f53, reversing
changes made to 82906a83e8.
2025-12-01 12:14:31 +00:00
Olivier 'reivilibre 1de9148f53 Add 'IF NOT EXISTS' to all 'CREATE INDEX CONCURRENTLY' statements to avoid deadlocks (#5297) 2025-12-01 12:06:51 +00:00
Olivier 'reivilibre 673cfa004c (delint: Is this a less messy rule?) 2025-12-01 11:51:51 +00:00
Olivier 'reivilibre 8f523e3959 Comment on why we special-case 'only violation is too-many-sessions' 2025-12-01 11:47:59 +00:00
Olivier 'reivilibre d21922f10f Expose Violations directly to the compat policy violation template 2025-12-01 11:47:59 +00:00
Olivier 'reivilibre 9c7c157744 Remove is_interactive and carry on with login types 2025-12-01 11:47:59 +00:00
Quentin Gliech 7bfeef9ef5 Typos and error message rewording
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-12-01 11:03:04 +01:00
Quentin Gliech 8384a5af4c Merge branch 'main' into quenting/upstream-oauth/better-conflict-options 2025-11-28 18:10:22 +01:00
Ben Banfield-Zanin be900cfb78 Add 'IF NOT EXISTS' to all 'CREATE INDEX CONCURRENTLY' statements to avoid deadlocks 2025-11-28 15:18:53 +00:00
Quentin Gliech c5ba1f610d Check for the new on_conflict options & update docs 2025-11-28 16:10:07 +01:00
Quentin Gliech 82906a83e8 Allow linking upstream accounts to matching users without confirmation (#5293) 2025-11-28 14:43:42 +01:00
Olivier 'reivilibre 0ff619f665 We don't know if there's a device ID 2025-11-28 12:42:48 +00:00
Olivier 'reivilibre 68107af042 We can't show a cancel button, so don't show one 2025-11-28 12:42:48 +00:00
Quentin Gliech f0d84a4b47 Document the new conflict options 2025-11-28 11:57:46 +01:00
Quentin Gliech 9650dc11d6 Add tests for the new on_conflict options 2025-11-28 11:55:34 +01:00
Quentin Gliech ffb86f6558 Add more options to deal with localpart conflicts on upstream OAuth 2.0 logins 2025-11-28 10:53:28 +01:00
Quentin Gliech 7587637943 Add Shibboleth sample configuration to SSO documentation (#5294) 2025-11-27 18:02:28 +01:00
copilot-swe-agent[bot] b2fb289c37 Add complete Shibboleth metadata file example
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com>
2025-11-27 16:48:00 +00:00
Quentin Gliech 7ce1be1fa0 Apply suggestions from code review
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-11-27 17:23:10 +01:00
copilot-swe-agent[bot] af15767135 Remove deprecated set_email_verification option from docs
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com>
2025-11-27 15:47:37 +00:00
Olivier 'reivilibre 8ad9c097cb Fix documentation of --usage-limit and --unlimited parameters on issue-user-registration-token command. (#5285) 2025-11-27 15:47:16 +00:00
copilot-swe-agent[bot] fc7e2e3f57 Remove unnecessary userinfo_endpoint from Shibboleth config
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com>
2025-11-27 15:38:21 +00:00
copilot-swe-agent[bot] 0d10e148a7 Add Shibboleth sample configuration to SSO documentation
Co-authored-by: sandhose <1549952+sandhose@users.noreply.github.com>
2025-11-27 15:31:20 +00:00
copilot-swe-agent[bot] 275a374d5a Initial plan 2025-11-27 15:26:55 +00:00
Quentin Gliech 93b9b174e2 Remove unused login_link.html template 2025-11-27 16:18:18 +01:00
Quentin Gliech c58033a740 Allow linking upstream accounts to matching users without confirmation
This reworks the link flow to handle many edge cases better. One major
functionality change is that when we had a new upstream account with no
user linked, but the localpart matching an existing user, if
`on_conflict` was set to `add`, we prompt the user to link the existing
account. This prompt is now skipped and the user is linked automatically.
2025-11-27 16:18:17 +01:00
Quentin Gliech 4b6c1db5a2 Unify registrations for local passwords and upstream OAuth registrations (#5281) 2025-11-27 16:13:03 +01:00
Quentin Gliech 61ee8dae87 Fix test name 2025-11-27 16:05:13 +01:00
Quentin Gliech 4c3d2bae88 Create the new index CONCURRENTLY 2025-11-27 16:04:23 +01:00
dependabot[bot] d902b7535f build(deps): bump docker/bake-action from 6.9.0 to 6.10.0
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 6.9.0 to 6.10.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/v6.9.0...v6.10.0)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-version: 6.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-27 13:12:26 +00:00
Olivier 'reivilibre bbad15a0b1 Modify example Nginx compatibility-layer location block to also forward /_synapse/mas to Synapse (#5240) 2025-11-27 12:32:26 +00:00
Olivier 'reivilibre 723a948c87 Update docs/setup/reverse-proxy.md 2025-11-27 12:31:48 +00:00
dependabot[bot] 86c58d74b5 build(deps): bump valibot from 1.1.0 to 1.2.0 in /frontend
Bumps [valibot](https://github.com/open-circle/valibot) from 1.1.0 to 1.2.0.
- [Release notes](https://github.com/open-circle/valibot/releases)
- [Commits](https://github.com/open-circle/valibot/compare/v1.1.0...v1.2.0)

---
updated-dependencies:
- dependency-name: valibot
  dependency-version: 1.2.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-11-26 19:43:42 +00:00
matrixbot 8c2a85ece1 Automatic merge back to main (#5290) 2025-11-26 20:13:37 +01:00