17 Commits (36ae8611fe98977153387308311f7d38b67e39c8)

Author	SHA1	Message	Date
Gabriel Rodríguez	9ff84bccbb	Allow customizing IdP name and icon for SAML and CAS (#16094)	1 year ago
Jacek Kuśnierz	50f0e4028b	Allow dependency errors to pass through (#13113) ... Signed-off-by: Jacek Kusnierz <jacek.kusnierz@tum.de> Co-authored-by: Brendan Abolivier <babolivier@matrix.org>	2 years ago
Shay	493c2fc44a	Remove code generating comments in configuration file (#12941)	2 years ago
Patrick Cloke	4586119f0b	Add missing type hints to config classes. (#12402)	3 years ago
David Robertson	313581e4e9	Use importlib.metadata to read requirements (#12088) ... * Pull runtime dep checks into their own module * Reimplement `check_requirements` using `importlib` I've tried to make this clearer. We start by working out which of Synapse's requirements we need to be installed here and now. I was surprised that there wasn't an easier way to see which packages were installed by a given extra. I've pulled out the error messages into functions that deal with "is this for an extra or not". And I've rearranged the loop over two different sets of requirements into one loop with a "must be instaled" flag. I hope you agree that this is clearer. * Test cases	3 years ago
Olivier Wilkinson (reivilibre)	4dd9ea8f4f	Revert "Revert accidental fast-forward merge from v1.49.0rc1" ... This reverts commit 158d73ebdd.	3 years ago
Sean Quah	158d73ebdd	Revert accidental fast-forward merge from v1.49.0rc1 ... Revert "Sort internal changes in changelog" Revert "Update CHANGES.md" Revert "1.49.0rc1" Revert "Revert "Move `glob_to_regex` and `re_word_boundary` to `matrix-python-common` (#11505) (#11527)" Revert "Refactors in `_generate_sync_entry_for_rooms` (#11515)" Revert "Correctly register shutdown handler for presence workers (#11518)" Revert "Fix `ModuleApi.looping_background_call` for non-async functions (#11524)" Revert "Fix 'delete room' admin api to work on incomplete rooms (#11523)" Revert "Correctly ignore invites from ignored users (#11511)" Revert "Fix the test breakage introduced by #11435 as a result of concurrent PRs (#11522)" Revert "Stabilise support for MSC2918 refresh tokens as they have now been merged into the Matrix specification. (#11435)" Revert "Save the OIDC session ID (sid) with the device on login (#11482)" Revert "Add admin API to get some information about federation status (#11407)" Revert "Include bundled aggregations in /sync and related fixes (#11478)" Revert "Move `glob_to_regex` and `re_word_boundary` to `matrix-python-common` (#11505)" Revert "Update backward extremity docs to make it clear that it does not indicate whether we have fetched an events' `prev_events` (#11469)" Revert "Support configuring the lifetime of non-refreshable access tokens separately to refreshable access tokens. (#11445)" Revert "Add type hints to `synapse/tests/rest/admin` (#11501)" Revert "Revert accidental commits to develop." Revert "Newsfile" Revert "Give `tests.server.setup_test_homeserver` (nominally!) the same behaviour" Revert "Move `tests.utils.setup_test_homeserver` to `tests.server`" Revert "Convert one of the `setup_test_homeserver`s to `make_test_homeserver_synchronous`" Revert "Disambiguate queries on `state_key` (#11497)" Revert "Comments on the /sync tentacles (#11494)" Revert "Clean up tests.storage.test_appservice (#11492)" Revert "Clean up `tests.storage.test_main` to remove use of legacy code. (#11493)" Revert "Clean up `tests.test_visibility` to remove legacy code. (#11495)" Revert "Minor cleanup on recently ported doc pages (#11466)" Revert "Add most of the missing type hints to `synapse.federation`. (#11483)" Revert "Avoid waiting for zombie processes in `synctl stop` (#11490)" Revert "Fix media repository failing when media store path contains symlinks (#11446)" Revert "Add type annotations to `tests.storage.test_appservice`. (#11488)" Revert "`scripts-dev/sign_json`: support for signing events (#11486)" Revert "Add MSC3030 experimental client and federation API endpoints to get the closest event to a given timestamp (#9445)" Revert "Port wiki pages to documentation website (#11402)" Revert "Add a license header and comment. (#11479)" Revert "Clean-up get_version_string (#11468)" Revert "Link background update controller docs to summary (#11475)" Revert "Additional type hints for config module. (#11465)" Revert "Register the login redirect endpoint for v3. (#11451)" Revert "Update openid.md" Revert "Remove mention of OIDC certification from Dex (#11470)" Revert "Add a note about huge pages to our Postgres doc (#11467)" Revert "Don't start Synapse master process if `worker_app` is set (#11416)" Revert "Expose worker & homeserver as entrypoints in `setup.py` (#11449)" Revert "Bundle relations of relations into the `/relations` result. (#11284)" Revert "Fix `LruCache` corruption bug with a `size_callback` that can return 0 (#11454)" Revert "Eliminate a few `Any`s in `LruCache` type hints (#11453)" Revert "Remove unnecessary `json.dumps` from `tests.rest.admin` (#11461)" Revert "Merge branch 'master' into develop" This reverts commit 26b5d2320f. This reverts commit bce4220f38. This reverts commit 966b5d0fa0. This reverts commit 088d748f2c. This reverts commit 14d593f72d. This reverts commit 2a3ec6facf. This reverts commit eccc49d755. This reverts commit b1ecd19c5d. This reverts commit 9c55dedc8c. This reverts commit 2d42e586a8. This reverts commit 2f053f3f82. This reverts commit a15a893df8. This reverts commit 8b4b153c9e. This reverts commit 494ebd7347. This reverts commit a77c369897. This reverts commit 4eb77965cd. This reverts commit 637df95de6. This reverts commit e5f426cd54. This reverts commit 8cd68b8102. This reverts commit 6cae125e20. This reverts commit 7be88fbf48. This reverts commit b3fd99b74a. This reverts commit f7ec6e7d9e. This reverts commit 5640992d17. This reverts commit d26808dd85. This reverts commit f91624a595. This reverts commit 16d39a5490. This reverts commit 8a4c296987. This reverts commit 49e1356ee3. This reverts commit d2279f471b. This reverts commit b50e39df57. This reverts commit 858d80bf0f. This reverts commit 435f044807. This reverts commit f61462e1be. This reverts commit a6f1a3abec. This reverts commit 84dc50e160. This reverts commit ed635d3285. This reverts commit 7b62791e00. This reverts commit 153194c771. This reverts commit f44d729d4c. This reverts commit a265fbd397. This reverts commit b9fef1a7cd. This reverts commit b0eb64ff7b. This reverts commit f1795463bf. This reverts commit 70cbb1a5e3. This reverts commit 42bf020463. This reverts commit 379f2650cf. This reverts commit 7ff22d6da4. This reverts commit 5a0b652d36. This reverts commit 432a174bc1. This reverts commit b14f8a1baf, reversing changes made to e713855dca.	3 years ago
Patrick Cloke	f44d729d4c	Additional type hints for config module. (#11465) ... This adds some misc. type hints to helper methods used in the `synapse.config` module.	3 years ago
Richard van der Hoff	86a497efaa	Default value for `public_baseurl` (#11210) ... We might as well use a default value for `public_baseurl` based on `server_name` - in many cases, it will be correct.	3 years ago
Patrick Cloke	f4b1a9a527	Require direct references to configuration variables. (#10985) ... This removes the magic allowing accessing configurable variables directly from the config object. It is now required that a specific configuration class is used (e.g. `config.foo` must be replaced with `config.server.foo`).	3 years ago
Patrick Cloke	7adcb20fc0	Add missing type hints to synapse.util (#9982)	4 years ago
Patrick Cloke	683d6f75af	Rename handler and config modules which end in handler/config. (#9816)	4 years ago
Jonathan de Jong	4b965c862d	Remove redundant "coding: utf-8" lines (#9786) ... Part of #9744 Removes all redundant `# -*- coding: utf-8 -*-` lines from files, as python 3 automatically reads source code as utf-8 now. `Signed-off-by: Jonathan de Jong <jonathan@automatia.nl>`	4 years ago
Jonathan de Jong	27d2820c33	Enable flake8-bugbear, but disable most checks. (#9499) ... * Adds B00 to ignored checks. * Fixes remaining issues.	4 years ago
Patrick Cloke	e40d88cff3	Backout changes for automatically calculating the public baseurl. (#9313) ... This breaks some people's configurations (if their Client-Server API is not accessed via port 443).	4 years ago
Patrick Cloke	6dade80048	Combine the CAS & SAML implementations for required attributes. (#9326)	4 years ago
Richard van der Hoff	8f75bf1df7	Put SAML callback URI under /_synapse/client. (#9289)	4 years ago
Richard van der Hoff	fa50e4bf4d	Give `public_baseurl` a default value (#9159)	4 years ago
Richard van der Hoff	ab7a24cc6b	Better formatting for config errors from modules (#8874) ... The idea is that the parse_config method of extension modules can raise either a ConfigError or a JsonValidationError, and it will be magically turned into a legible error message. There's a few components to it: * Separating the "path" and the "message" parts of a ConfigError, so that we can fiddle with the path bit to turn it into an absolute path. * Generally improving the way ConfigErrors get printed. * Passing in the config path to load_module so that it can wrap any exceptions that get caught appropriately.	4 years ago
Ben Banfield-Zanin	53a6f5ddf0	SAML: Allow specifying the IdP entityid to use. (#8630) ... If the SAML metadata includes multiple IdPs it is necessary to specify which IdP to redirect users to for authentication.	4 years ago
Marcus Schopen	d356588339	SAML: Document allowing a clock/time difference from IdP (#8731) ... Updates the sample configuration with the pysaml2 configuration for accepting clock skew/drift between the homeserver and IdP.	4 years ago
Marcus Schopen	68fc0dcb5a	SAML: add <mdui:UIInfo> element examples (#8718) ... add some mdui:UIInfo element examples for saml2_config in homeserver.yaml	4 years ago
Patrick Cloke	8f1aefa694	Improve the sample config for SSO (OIDC, SAML, and CAS). (#8635)	4 years ago
Andrew Morgan	3f4a2a7064	Hotfix: disable autoescape by default when rendering Jinja2 templates (#8394) ... #8037 changed the default `autoescape` option when rendering Jinja2 templates from `False` to `True`. This caused some bugs, noticeably around redirect URLs being escaped in SAML2 auth confirmation templates, causing those URLs to break for users. This change returns the previous behaviour as it stood. We may want to look at each template individually and see whether autoescaping is a good idea at some point, but for now lets just fix the breakage.	4 years ago
Patrick Cloke	6605470bfb	Improve SAML error messages (#8248)	4 years ago
Patrick Cloke	db7de4d182	Fix a regression from calling read_templates. (#8252) ... Regressed in #8037.	4 years ago
Andrew Morgan	e04e465b4d	Use the default templates when a custom template file cannot be found (#8037) ... Fixes https://github.com/matrix-org/synapse/issues/6583	4 years ago
Richard van der Hoff	0cb169900e	Implement login blocking based on SAML attributes (#8052) ... Hopefully this mostly speaks for itself. I also did a bit of cleaning up of the error handling. Fixes #8047	4 years ago
Patrick Cloke	b9df7f70bb	Increase the default SAML session expirary time to 15 minutes. (#7664)	5 years ago
Richard van der Hoff	11de843626	Cleanups to the OpenID Connect integration (#7628) ... docs, default configs, comments. Nothing very significant.	5 years ago
Richard van der Hoff	1bbc9e2df6	Clean up exception handling in SAML2ResponseResource (#7614) ... * Expose `return_html_error`, and allow it to take a Jinja2 template instead of a raw string * Clean up exception handling in SAML2ResponseResource * use the existing code in `return_html_error` instead of re-implementing it (giving it a jinja2 template rather than inventing a new form of template) * do the exception-catching in the REST layer rather than in the handler layer, to make sure we catch all exceptions.	5 years ago
Lars Franke	13917232d5	Fix indention in generated config file (#7300) ... Also adjust sample_config.yaml Signed-off-by: Lars Franke <frcl@mailbox.org>	5 years ago
Brendan Abolivier	0de9f9486a	Lint	5 years ago
Brendan Abolivier	f9e98176bf	Put the file in the templates directory	5 years ago
Brendan Abolivier	900bca9707	Update wording and config	5 years ago
Brendan Abolivier	b8cfe79ffc	Move the default SAML2 error HTML to a dedicated file ... Also add some JS to it to process any error we might have in the URI (see #6893).	5 years ago
Brendan Abolivier	8f826f98ac	Rephrase default message	5 years ago
Brendan Abolivier	5ec2077bf9	Lint	5 years ago
Brendan Abolivier	6b0efe73e2	SAML2: render a comprehensible error page if something goes wrong ... If an error happened while processing a SAML AuthN response, or a client ends up doing a `GET` request to `/authn_response`, then render a customisable error page rather than a confusing error.	5 years ago
Richard van der Hoff	2b6a77fcde	Delegate remote_user_id mapping to the saml mapping provider (#6723) ... Turns out that figuring out a remote user id for the SAML user isn't quite as obvious as it seems. Factor it out to the SamlMappingProvider so that it's easy to control.	5 years ago
Andrew Morgan	4947de5a14	Allow SAML username provider plugins (#6411)	5 years ago
Andrew Morgan	409c62b27b	Add config linting script that checks for bool casing (#6203) ... Add a linting script that enforces all boolean values in the default config be lowercase. This has annoyed me for a while so I decided to fix it.	5 years ago
Amber Brown	f743108a94	Refactor HomeserverConfig so it can be typechecked (#6137)	5 years ago
Richard van der Hoff	a25b66d3f9	docstrings and comments	5 years ago
Richard van der Hoff	b74606ea22	Fix a bug with saml attribute maps. ... Fixes a bug where the default attribute maps were prioritised over user-specified ones, resulting in incorrect mappings. The problem is that if you call SPConfig.load() multiple times, it adds new attribute mappers to a list. So by calling it with the default config first, and then the user-specified config, we would always get the default mappers before the user-specified mappers. To solve this, let's merge the config dicts first, and then pass them to SPConfig.	5 years ago
Richard van der Hoff	a8ac40445c	Record mappings from saml users in an external table ... We want to assign unique mxids to saml users based on an incrementing suffix. For that to work, we need to record the allocated mxid in a separate table.	5 years ago
Richard van der Hoff	785cbd3999	Make the sample saml config closer to our standards ... It' still not great, thanks to the nested dictionaries, but it's better.	5 years ago
Richard van der Hoff	28db0ae537	cleanups	5 years ago
Richard van der Hoff	36f4953dec	Add support for tracking SAML2 sessions. ... This allows us to correctly handle `allow_unsolicited: False`.	5 years ago
Richard van der Hoff	16b52642e2	Don't load the generated config as the default. ... It's too confusing.	6 years ago