61 Commits (304a1376c2fbe6758b7b0c1987d16fcea5205528)

Author	SHA1	Message	Date
Brendan Abolivier	4d794dae21	Move delta from +10% to -10%	6 years ago
Brendan Abolivier	0c2362861e	Gah python	6 years ago
Brendan Abolivier	847b9dcd1c	Make max_delta equal to period * 10%	6 years ago
Brendan Abolivier	52839886d6	Allow configuring a range for the account validity startup job ... When enabling the account validity feature, Synapse will look at startup for registered account without an expiration date, and will set one equals to 'now + validity_period' for them. On large servers, it can mean that a large number of users will have the same expiration date, which means that they will all be sent a renewal email at the same time, which isn't ideal. In order to mitigate this, this PR allows server admins to define a 'max_delta' so that the expiration date is a random value in the [now + validity_period ; now + validity_period + max_delta] range. This allows renewal emails to be progressively sent over a configured period instead of being sent all in one big batch.	6 years ago
Brendan Abolivier	384122efa8	Doc	6 years ago
Brendan Abolivier	20f0617e87	Send out emails with links to extend an account's validity period	6 years ago
Brendan Abolivier	747aa9f8ca	Add account expiration feature	6 years ago
Brendan Abolivier	8e85493b0c	Add config option to block users from looking up 3PIDs (#5010)	6 years ago
Richard van der Hoff	fd463b4f5d	Comment out most options in the generated config. (#4863) ... Make it so that most options in the config are optional, and commented out in the generated config. The reasons this is a good thing are as follows: * If we decide that we should change the default for an option, we can do so, and only those admins that have deliberately chosen to override that option will be stuck on the old setting. * It moves us towards a point where we can get rid of the super-surprising feature of synapse where the default settings for the config come from the generated yaml. * It makes setting up a test config for unit testing an order of magnitude easier (see forthcoming PR). * It makes the generated config more consistent, and hopefully easier for users to understand.	6 years ago
Aaron Raimist	8ea1b41a0e	Clarify what registration_shared_secret allows for (#2885) (#4844) ... * Clarify what registration_shared_secret allows for (#2885) Signed-off-by: Aaron Raimist <aaron@raim.ist> * Add changelog Signed-off-by: Aaron Raimist <aaron@raim.ist>	6 years ago
Brendan Abolivier	067ce795c0	Move settings from registration to ratelimiting in config file	6 years ago
Brendan Abolivier	a4c3a361b7	Add rate-limiting on registration (#4735) ... * Rate-limiting for registration * Add unit test for registration rate limiting * Add config parameters for rate limiting on auth endpoints * Doc * Fix doc of rate limiting function Co-Authored-By: babolivier <contact@brendanabolivier.com> * Incorporate review * Fix config parsing * Fix linting errors * Set default config for auth rate limiting * Fix tests * Add changelog * Advance reactor instead of mocked clock * Move parameters to registration specific config and give them more sensible default values * Remove unused config options * Don't mock the rate limiter un MAU tests * Rename _register_with_store into register_with_store * Make CI happy * Remove unused import * Update sample config * Fix ratelimiting test for py2 * Add non-guest test	6 years ago
Richard van der Hoff	5f9bdf90fe	Attempt to make default config more consistent ... The general idea here is that config examples should just have a hash and no extraneous whitespace, both to make it easier for people who don't understand yaml, and to make the examples stand out from the comments.	6 years ago
Richard van der Hoff	4a3f138832	Fix quoting for allowed_local_3pids example config (#4476) ... If you use double-quotes here, you have to escape your backslashes. It's much easier with single-quotes. (Note that the existing double-backslashes are already interpreted by python's """ parsing.)	6 years ago
Neil Johnson	1b53cc3cb4	fix line length	6 years ago
Neil Johnson	5349262302	Config option to disable requesting MSISDN on registration	6 years ago
Richard van der Hoff	9c2af7b2c5	Add a script to generate a clean config file (#4315)	6 years ago
Richard van der Hoff	e8d98466b0	Implement .well-known handling (#4262) ... Sometimes it's useful for synapse to generate its own .well-known file.	6 years ago
Neil Johnson	78ba0e7ab8	Remove riot.im from the list of trusted Identity Servers in the default configuration (#4207)	6 years ago
Neil Johnson	9ec2186586	isort	6 years ago
Neil Johnson	a67d8ace9b	remove errant exception and style	6 years ago
Neil Johnson	c6584f4b5f	clean up config error logic and imports	6 years ago
Neil Johnson	a2bfb778c8	improve auto room join logic, comments and tests	6 years ago
Matthew Hodgson	8f646f2d04	fix UTs	6 years ago
Matthew Hodgson	07340cdaca	untested stab at autocreating autojoin rooms	6 years ago
Amber Brown	49af402019	run isort	6 years ago
Matthew Hodgson	38f952b9bc	spell out not to massively increase bcrypt rounds	7 years ago
Matthew Hodgson	447f4f0d5f	rewrite based on PR feedback: ... * [ ] split config options into allowed_local_3pids and registrations_require_3pid * [ ] simplify and comment logic for picking registration flows * [ ] fix docstring and move check_3pid_allowed into a new util module * [ ] use check_3pid_allowed everywhere @erikjohnston PTAL	7 years ago
Matthew Hodgson	28a6ccb49c	add registrations_require_3pid ... lets homeservers specify a whitelist for 3PIDs that users are allowed to associate with. Typically useful for stopping people from registering with non-work emails	7 years ago
David Baker	a9c2e930ac	pep8	7 years ago
David Baker	c05e6015cc	Add config option to auto-join new users to rooms ... New users who register on the server will be dumped into all rooms in auto_join_rooms in the config.	7 years ago
Matthew Hodgson	7c551ec445	trust a hypothetical future riot.im IS	8 years ago
Richard van der Hoff	1c4f05db41	Stop putting a time caveat on access tokens ... The 'time' caveat on the access tokens was something of a lie, since we weren't enforcing it; more pertinently its presence stops us ever adding useful time caveats. Let's move in the right direction by not lying in our caveats.	8 years ago
Negi Fazeli	40aa6e8349	Create user with expiry ... - Add unittests for client, api and handler Signed-off-by: Negar Fazeli <negar.fazeli@ericsson.com>	9 years ago
Erik Johnston	590fbbef03	Add config to create guest account on 3pid invite ... Currently, when a 3pid invite request is sent to an identity server, it includes a provisioned guest access token. This allows the link in the, say, invite email to include the guest access token ensuring that the same account is used each time the link is clicked. This flow has a number of flaws, including when using different servers or servers that have guest access disabled. For now, we keep this implementation but hide it behind a config option until a better flow is implemented.	9 years ago
Erik Johnston	f078ecbc8f	Derive macaroon_secret_key from signing key. ... Unfortunately, there are people that are running synapse without a `macaroon_sercret_key` set. Mandating they set one is a good solution, except that breaking auto upgrades is annoying.	9 years ago
Daniel Wagner-Hall	6a9f1209df	Error if macaroon key is missing from config ... Currently we store all access tokens in the DB, and fall back to that check if we can't validate the macaroon, so our fallback works here, but for guests, their macaroons don't get persisted, so we don't get to find them in the database. Each restart, we generate a new ephemeral key, so guests lose access after each server restart. I tried to fix up the config stuff to be less insane, but gave up, so instead I bolt on yet another piece of custom one-off insanity. Also, add some basic tests for config generation and loading.	9 years ago
Daniel Wagner-Hall	5054806ec1	Rename config field to reflect yaml name	9 years ago
Mark Haines	0fcafbece8	Add config option for setting the trusted id servers, disabling checking the ID server in integration tests	9 years ago
Matthew Hodgson	6c28ac260c	copyrights	9 years ago
Daniel Wagner-Hall	f522f50a08	Allow guests to register and call /events?room_id= ... This follows the same flows-based flow as regular registration, but as the only implemented flow has no requirements, it auto-succeeds. In the future, other flows (e.g. captcha) may be required, so clients should treat this like the regular registration flow choices.	9 years ago
Mark Haines	f2f031fd57	Add config for how many bcrypt rounds to use for password hashes ... By default we leave it at the default value of 12. But now we can reduce it for preparing users for loadtests or running integration tests.	9 years ago
Daniel Wagner-Hall	7213588083	Implement configurable stats reporting ... SYN-287 This requires that HS owners either opt in or out of stats reporting. When --generate-config is passed, --report-stats must be specified If an already-generated config is used, and doesn't have the report_stats key, it is requested to be set.	9 years ago
Daniel Wagner-Hall	2d3462714e	Issue macaroons as opaque auth tokens ... This just replaces random bytes with macaroons. The macaroons are not inspected by the client or server. In particular, they claim to have an expiry time, but nothing verifies that they have not expired. Follow-up commits will actually enforce the expiration, and allow for token refresh. See https://bit.ly/matrix-auth for more information	9 years ago
Erik Johnston	36b3b75b21	Registration should be disabled by default	10 years ago
Mark Haines	46a65c282f	Allow generate-config to run against an existing config file to generate default keys	10 years ago
Mark Haines	265f30bd3f	Allow --enable-registration to be passed on the commandline	10 years ago
Mark Haines	c9e62927f2	Use disable_registration keys if they are present	10 years ago
Mark Haines	d624e2a638	Manually generate the default config yaml, remove most of the commandline arguments for synapse anticipating that people will use the yaml instead. Simpify implementing config options by not requiring the classes to hit the super class	10 years ago
Mark Haines	bdcb23ca25	Fix spelling	10 years ago