Devon HudsonandClaude Opus 5.5 059bc0bb0f Skip the registration rate limit for invite registrations ...

The registration rate limit is keyed on the client IP only, three per
hour by default, so a team invited together from behind one NAT could
only accept three invites an hour. An invite registers only the one
username it pins, and is minted by an admin client for one address, so
it can't be used to register in bulk. The email authentication rate
limits still apply to it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01CZdGaj9bJcn5QeeUw8YXoF

2026-10-13 15:30:54 +02:00

..

axum-utils

Upgrade to rand 0.10 and the next RustCrypto generation

2026-10-09 15:42:26 +02:00

cli

Add --username, --email and --passwordless to manage issue-user-registration-token

2026-10-13 15:30:54 +02:00

config

Add a usernameAvailable GraphQL query for anonymous lookups

2026-10-13 15:30:54 +02:00

context

Format log timestamps in the local timezone

2026-08-21 23:14:37 +03:00

data-model

Hide the upstream providers on an invite registration

2026-10-13 15:30:54 +02:00

email

Comment what .message_id(None) means using lettre

2026-02-17 11:50:32 +01:00

handlers

Skip the registration rate limit for invite registrations

2026-10-13 15:30:54 +02:00

http

Do not customize the TLS configuration of the HTTP client

2026-06-30 12:18:47 +02:00

i18n

i18n: port the translator to the icu4x 2.0 API

2026-07-01 17:07:49 +02:00

i18n-scan

Adapt to minijinja 2.21, bump minijinja-contrib in lockstep

2026-07-03 17:09:37 +02:00

iana

Remove unused lint ignores

2026-05-21 16:44:20 -05:00

iana-codegen

#[allow -> #[expect

2026-05-21 16:37:47 -05:00

jose

Upgrade to rand 0.10 and the next RustCrypto generation

2026-10-09 15:42:26 +02:00

keystore

Upgrade to rand 0.10 and the next RustCrypto generation

2026-10-09 15:42:26 +02:00

listener

#[allow -> #[expect

2026-05-21 16:37:47 -05:00

matrix

Add a usernameAvailable GraphQL query for anonymous lookups

2026-10-13 15:30:54 +02:00

matrix-synapse

Fix clippy lints for Rust 1.96.0

2026-06-16 15:38:22 +02:00

oauth2-types

Clean up the tests for allowed characters in scope

2026-07-28 18:08:14 +02:00

oidc-client

Upgrade to rand 0.10 and the next RustCrypto generation

2026-10-09 15:42:26 +02:00

policy

Show the reason on the policy violation page for admin scopes and disallowed clients

2026-09-22 17:06:11 +02:00

router

Expose the invite URL and the pinned username and email in the admin API

2026-10-13 15:30:54 +02:00

spa

Emit a modulepreload for dynamically imported chunks in include_asset

2026-08-07 17:59:27 +02:00

storage

Add a passwordless flag to registration tokens

2026-10-13 15:30:54 +02:00

storage-pg

Add a passwordless flag to registration tokens

2026-10-13 15:30:54 +02:00

syn2mas

Upgrade to rand 0.10 and the next RustCrypto generation

2026-10-09 15:42:26 +02:00

tasks

Upgrade to rand 0.10 and the next RustCrypto generation

2026-10-09 15:42:26 +02:00

templates

Enforce a registration token's pins when attaching it and when finishing

2026-10-13 15:30:54 +02:00

tower

Better exception comment

2026-05-21 16:45:56 -05:00