91 Commits (1dd24f63f8bd4aee75ddf53f40606e4d828e3753)

Author	SHA1	Message	Date
Erik Johnston	f21e24ffc2	Add ability for access tokens to belong to one user but grant access to another user. (#8616) ... We do it this way round so that only the "owner" can delete the access token (i.e. `/logout/all` by the "owner" also deletes that token, but `/logout/all` by the "target user" doesn't). A future PR will add an API for creating such a token. When the target user and authenticated entity are different the `Processed request` log line will be logged with a: `{@admin:server as @bob:server} ...`. I'm not convinced by that format (especially since it adds spaces in there, making it harder to use `cut -d ' '` to chop off the start of log lines). Suggestions welcome.	4 years ago
Patrick Cloke	c9c0ad5e20	Remove the deprecated Handlers object (#8494) ... All handlers now available via get_*_handler() methods on the HomeServer.	4 years ago
Patrick Cloke	c619253db8	Stop sub-classing object (#8249)	4 years ago
Patrick Cloke	e00816ad98	Do not yield on awaitables in tests. (#8193)	4 years ago
Will Hunt	2df82ae451	Do not apply ratelimiting on joins to appservices (#8139) ... Add new method ratelimiter.can_requester_do_action and ensure that appservices are exempt from being ratelimited. Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com> Co-authored-by: Erik Johnston <erik@matrix.org>	4 years ago
Will Hunt	cbbf9126cb	Do not apply ratelimiting on joins to appservices (#8139) ... Add new method ratelimiter.can_requester_do_action and ensure that appservices are exempt from being ratelimited. Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com> Co-authored-by: Erik Johnston <erik@matrix.org>	4 years ago
Patrick Cloke	d4a7829b12	Convert synapse.api to async/await (#8031)	4 years ago
Andrew Morgan	f4e6495b5d	Performance improvements and refactor of Ratelimiter (#7595) ... While working on https://github.com/matrix-org/synapse/issues/5665 I found myself digging into the `Ratelimiter` class and seeing that it was both: * Rather undocumented, and * causing a *lot* of config checks This PR attempts to refactor and comment the `Ratelimiter` class, as well as encourage config file accesses to only be done at instantiation. Best to be reviewed commit-by-commit.	5 years ago
Andrew Morgan	aee9130a83	Stop Auth methods from polling the config on every req. (#7420)	5 years ago
Patrick Cloke	eed7c5b89e	Convert auth handler to async/await (#7261)	5 years ago
Richard van der Hoff	799001f2c0	Add a `make_event_from_dict` method (#6858) ... ... and use it in places where it's trivial to do so. This will make it easier to pass room versions into the FrozenEvent constructors.	5 years ago
Brendan Abolivier	8822b33111	Update copyrights	5 years ago
Brendan Abolivier	988d8d6507	Incorporate review	5 years ago
Brendan Abolivier	c6dbca2422	Incorporate review	5 years ago
Brendan Abolivier	dcc069a2e2	Lint	5 years ago
Brendan Abolivier	e7943f660a	Add unit tests	5 years ago
Jason Robinson	6d847d8ce6	Ensure support users can be registered even if MAU limit is reached ... This allows support users to be created even on MAU limits via the admin API. Support users are excluded from MAU after creation, so it makes sense to exclude them in creation - except if the whole host is in disabled state. Signed-off-by: Jason Robinson <jasonr@matrix.org>	5 years ago
Richard van der Hoff	5f158ec039	Implement access token expiry (#5660) ... Record how long an access token is valid for, and raise a soft-logout once it expires.	5 years ago
Richard van der Hoff	0a4001eba1	Clean up exception handling for access_tokens (#5656) ... First of all, let's get rid of `TOKEN_NOT_FOUND_HTTP_STATUS`. It was a hack we did at one point when it was possible to return either a 403 or a 401 if the creds were missing. We always return a 401 in these cases now (thankfully), so it's not needed. Let's also stop abusing `AuthError` for these cases. Honestly they have nothing that relates them to the other places that `AuthError` is used, other than the fact that they are loosely under the 'Auth' banner. It makes no sense for them to share exception classes. Instead, let's add a couple of new exception classes: `InvalidClientTokenError` and `MissingClientTokenError`, for the `M_UNKNOWN_TOKEN` and `M_MISSING_TOKEN` cases respectively - and an `InvalidClientCredentialsError` base class for the two of them.	5 years ago
Richard van der Hoff	1890cfcf82	Inline issue_access_token (#5659) ... this is only used in one place, so it's clearer if we inline it and reduce the API surface. Also, fixes a buglet where we would create an access token even if we were about to block the user (we would never return the AT, so the user could never use it, but it was still created and added to the db.)	5 years ago
Richard van der Hoff	953dbb7980	Remove access-token support from RegistrationStore.register (#5642) ... The 'token' param is no longer used anywhere except the tests, so let's kill that off too.	5 years ago
Amber Brown	32e7c9e7f2	Run Black. (#5482)	6 years ago
Amber Brown	b36c82576e	Run Black on the tests again (#5170)	6 years ago
Richard van der Hoff	0dbfae03f9	Enforce hs_disabled_message correctly ... Fixes a bug where hs_disabled_message was not enforced for 3pid-based requests if there was no server_notices_mxid configured.	6 years ago
Brendan Abolivier	a4c3a361b7	Add rate-limiting on registration (#4735) ... * Rate-limiting for registration * Add unit test for registration rate limiting * Add config parameters for rate limiting on auth endpoints * Doc * Fix doc of rate limiting function Co-Authored-By: babolivier <contact@brendanabolivier.com> * Incorporate review * Fix config parsing * Fix linting errors * Set default config for auth rate limiting * Fix tests * Add changelog * Advance reactor instead of mocked clock * Move parameters to registration specific config and give them more sensible default values * Remove unused config options * Don't mock the rate limiter un MAU tests * Rename _register_with_store into register_with_store * Make CI happy * Remove unused import * Update sample config * Fix ratelimiting test for py2 * Add non-guest test	6 years ago
Richard van der Hoff	566947ff34	Skip macaroon check for access tokens in the db	6 years ago
Neil Johnson	d2f7c4e6b1	create support user (#4141) ... Allow for the creation of a support user. A support user can access the server, join rooms, interact with other users, but does not appear in the user directory nor does it contribute to monthly active user limits.	6 years ago
Richard van der Hoff	7e07d25ed6	Allow backslashes in event field filters ... Fixes a bug introduced in https://github.com/matrix-org/synapse/pull/1783 which meant that single backslashes were not allowed in event field filters. The intention here is to allow single-backslashes, but disallow double-backslashes.	6 years ago
Amber Brown	52ec6e9dfa	Port tests/ to Python 3 (#3808)	6 years ago
Neil Johnson	ea068d6f3c	fix bug where preserved threepid user comes to sign up and server is mau blocked	6 years ago
Erik Johnston	05077e06fa	Change admin_uri to admin_contact in config and errors	6 years ago
Neil Johnson	e07970165f	rename error code	6 years ago
Neil Johnson	ba1fbf7d5b	special case server_notices_mxid	6 years ago
Neil Johnson	13ad9930c8	add new error type ResourceLimit	6 years ago
Neil Johnson	b8429c7c81	update error codes for resource limiting	6 years ago
Neil Johnson	ab035bdeac	replace admin_email with admin_uri for greater flexibility	6 years ago
Neil Johnson	f4b49152e2	support admin_email config and pass through into blocking errors, return AuthError in all cases	6 years ago
Neil Johnson	ce7de9ae6b	Revert "support admin_email config and pass through into blocking errors, return AuthError in all cases" ... This reverts commit 0d43f991a1.	6 years ago
Neil Johnson	0d43f991a1	support admin_email config and pass through into blocking errors, return AuthError in all cases	6 years ago
Amber Brown	99dd975dae	Run tests under PostgreSQL (#3423)	6 years ago
black	8b3d9b6b19	Run black.	6 years ago
Neil Johnson	42c6823827	disable HS from config	6 years ago
Neil Johnson	d08296f9f2	remove unused import	6 years ago
Neil Johnson	886be75ad1	bug fixes	6 years ago
Neil Johnson	74b1d46ad9	do mau checks based on monthly_active_users table	6 years ago
Amber Brown	da7785147d	Python 3: Convert some unicode/bytes uses (#3569)	6 years ago
Amber Brown	49af402019	run isort	6 years ago
Matthew Hodgson	f82cf3c7df	add test	7 years ago
Matthew Hodgson	e72234f6bd	fix tests	7 years ago
pik	566641a0b5	use jsonschema.FormatChecker for RoomID and UserID strings ... * use a valid filter in rest/client/v2_alpha test Signed-off-by: pik <alexander.maznev@gmail.com>	8 years ago