Commit Graph

30 Commits (watcha-develop)

Author SHA1 Message Date
dlamarcheteamnet 7b6bbcac8a add allow_locked in _wrapped_get_user_by_req 2 years ago
dlamarcheteamnet 4421b4f0e5 séparation auth 2 years ago
Erik Johnston 23740eaa3d
Correctly mention previous copyright (#16820) 2 years ago
David Robertson 32a59a6495
Keep track of `user_ips` and `monthly_active_users` when delegating auth (#16672) 2 years ago
Patrick Cloke 8e1e62c9e0 Update license headers 2 years ago
Christoph 32fd9bc673
Fix possible AttributeError when account-api is called over unix socket (#16404) 3 years ago
Erik Johnston 954921736b
Refactor `get_user_by_id` (#16316) 3 years ago
Quentin Gliech 1940d990a3
Revert MSC3861 introspection cache, admin impersonation and account lock (#16258) 3 years ago
Shay 69048f7b48
Add an admin endpoint to allow authorizing server to signal token revocations (#16125) 3 years ago
Mathieu Velten 2d15e39684
MSC3861: allow impersonation by an admin using a query param (#16132) 3 years ago
Erik Johnston 6130afb862
Add response time metrics for introspection requests (#16131) 3 years ago
Shay 54a51ff6c1
Cache token introspection response from OIDC provider (#16117) 3 years ago
Mathieu Velten dac97642e4
Implements admin API to lock an user (MSC3939) (#15870) 3 years ago
Patrick Cloke c01343de43
Add stricter mypy options (#15694) 3 years ago
Quentin Gliech ceb3dd77db Enforce that an admin token also has the basic Matrix API scope 3 years ago
Quentin Gliech f739bde962 Reject tokens with multiple device scopes 3 years ago
Quentin Gliech 98afc57d59 Make OIDC scope constants 3 years ago
Quentin Gliech 14a5be9c4d Handle errors when introspecting tokens 3 years ago
Quentin Gliech 4d0231b364 Make AS tokens work & allow ASes to /register 3 years ago
Quentin Gliech c008b44b4f Add an admin token for MAS -> Synapse calls 3 years ago
Hugh Nimmo-Smith 249f4a338d Refactor config to be an experimental feature 3 years ago
Hugh Nimmo-Smith 5fe96082d0 Actually enforce guest + return www-authenticate header 3 years ago
Hugh Nimmo-Smith a1374b5c70 MSC2967: Check access token scope for use as user and add guest support 3 years ago
Hugh Nimmo-Smith d20669971a Use `name` claim as display name when registering users on the fly. 3 years ago
Quentin Gliech f9cd549f64 Record the `sub` claims as an external_id 3 years ago
Quentin Gliech 7628dbf4e9 Handle the Synapse admin scope 3 years ago
Quentin Gliech c5cf1b421d Save the scopes in the requester 3 years ago
Quentin Gliech 765244faee Initial MSC3964 support: delegation of auth to OIDC server 3 years ago
Quentin Gliech e2c8458bba Make the api.auth.Auth a Protocol 3 years ago