Hugh Nimmo-Smith 357f83c96a Rate limit device code link attempts ...

Add a dedicated `device_code_link` rate limiter for device authorization user code verification.

This is to help mitigate the User Code Brute Forcing attack as described by [RFC 8628 section 5.1](https://datatracker.ietf.org/doc/html/rfc8628#section-5.1)

Proposed default is 1 per minute and burst of 10. This can be overridden by the server admin.

2026-09-11 13:17:56 +01:00

..

axum-utils

Fix the lints introduced by clippy 1.98

2026-09-10 15:53:23 +02:00

cli

Fix the lints introduced by clippy 1.98

2026-09-10 15:53:23 +02:00

config

Rate limit device code link attempts

2026-09-11 13:17:56 +01:00

context

Format log timestamps in the local timezone

2026-08-21 23:14:37 +03:00

data-model

remove AuthorizationGrantStage branch. remove browser_session_id from Exchanged state

2026-07-22 11:30:42 +02:00

email

Comment what .message_id(None) means using lettre

2026-02-17 11:50:32 +01:00

handlers

Rate limit device code link attempts

2026-09-11 13:17:56 +01:00

http

Do not customize the TLS configuration of the HTTP client

2026-06-30 12:18:47 +02:00

i18n

i18n: port the translator to the icu4x 2.0 API

2026-07-01 17:07:49 +02:00

i18n-scan

Adapt to minijinja 2.21, bump minijinja-contrib in lockstep

2026-07-03 17:09:37 +02:00

iana

Remove unused lint ignores

2026-05-21 16:44:20 -05:00

iana-codegen

#[allow -> #[expect

2026-05-21 16:37:47 -05:00

jose

Remove unused lint ignores

2026-05-21 16:44:20 -05:00

keystore

#[allow -> #[expect

2026-05-21 16:37:47 -05:00

listener

#[allow -> #[expect

2026-05-21 16:37:47 -05:00

matrix

Add support for locking to the mock homeserver and use in tests

2026-03-17 11:44:14 +00:00

matrix-synapse

Fix clippy lints for Rust 1.96.0

2026-06-16 15:38:22 +02:00

oauth2-types

Clean up the tests for allowed characters in scope

2026-07-28 18:08:14 +02:00

oidc-client

Fix flaky fail_verify_id_token_wrong_auth_time test

2026-09-03 16:09:44 +02:00

policy

#[allow -> #[expect

2026-05-21 16:37:47 -05:00

router

Remove the GraphQL playground

2026-08-07 12:26:42 +02:00

spa

Emit a modulepreload for dynamically imported chunks in include_asset

2026-08-07 17:59:27 +02:00

storage

Add a human_account_name filter to the upstream OAuth link repository

2026-07-27 16:09:00 +02:00

storage-pg

Add a trigram index on upstream_oauth_links.human_account_name

2026-07-27 16:09:01 +02:00

syn2mas

Migrate all the ULID generations to use the extension trait

2026-06-22 14:46:55 +02:00

tasks

Port the remaining icu4x call sites to 2.0

2026-07-01 17:07:49 +02:00

templates

Merge main into quenting/react-captcha

2026-09-08 12:38:14 +02:00

tower

Better exception comment

2026-05-21 16:45:56 -05:00