1417 Commits (45df38e61bb876208d032cf3480230cecff6cdd8)

Author	SHA1	Message	Date
Richard van der Hoff	cc2d650ef7	Relax requirement for a content-type on .well-known (#4511)	6 years ago
Neil Johnson	f03b3a7a3a	support change_password in capabilities end-point	6 years ago
Amber Brown	6bd4374636	Do not generate self-signed TLS certificates by default. (#4509)	6 years ago
Richard van der Hoff	99e36d5e24	Implement MSC1708 (.well-known lookups for server routing) (#4489)	6 years ago
Neil Johnson	4eeb2fb215	isort	6 years ago
Richard van der Hoff	5488cadaae	Enable configuring test log level via env var (#4506) ... I got fed up with always adding '@unittest.DEBUG' every time I needed to debug a test.	6 years ago
Neil Johnson	a124025dab	enforce auth for capabilities endpoint	6 years ago
Erik Johnston	aee39f7de8	Fix test to use valid event format	6 years ago
Erik Johnston	554ca58ea1	Make add_hashes_and_signatures operate on dicts	6 years ago
Richard van der Hoff	f2b553d656	Use SimpleResolverComplexifier in tests (#4497) ... two reasons for this. One, it saves a bunch of boilerplate. Two, it squashes unicode to IDNA-in-a-`str` (even on python 3) in a way that it turns out we rely on to give consistent behaviour between python 2 and 3.	6 years ago
Amber Brown	7072fe3084	Fix UPSERTs on SQLite 3.24+ (#4477)	6 years ago
Richard van der Hoff	0fd5b3b53e	Handle IP literals explicitly ... We don't want to be doing .well-known lookups on these guys.	6 years ago
Richard van der Hoff	d840019192	Fix idna and ipv6 literal handling in MatrixFederationAgent (#4487) ... Turns out that the library does a better job of parsing URIs than our reinvented wheel. Who knew. There are two things going on here. The first is that, unlike parse_server_name, URI.fromBytes will strip off square brackets from IPv6 literals, which means that it is valid input to ClientTLSOptionsFactory and HostnameEndpoint. The second is that we stay in `bytes` throughout (except for the argument to ClientTLSOptionsFactory), which avoids the weirdness of (sometimes) ending up with idna-encoded values being held in `unicode` variables. TBH it probably would have been ok but it made the tests fragile.	6 years ago
Erik Johnston	ae2a957dba	Pass through room version to event auth	6 years ago
Richard van der Hoff	8520bc3109	Fix Host header sent by MatrixFederationAgent (#4468) ... Move the Host header logic down here so that (a) it is used if we reuse the agent elsewhere, and (b) we can mess about with it with .well-known.	6 years ago
Neil Johnson	95f871fc0d	Support room version capabilities in CS API (MSC1804)	6 years ago
Erik Johnston	9770ed91c2	Fix tests	6 years ago
Erik Johnston	be6a7e47fa	Revert "Require event format version to parse or create events"	6 years ago
Richard van der Hoff	afd69a0920	Look up the right SRV record	6 years ago
Richard van der Hoff	e1c8440e0c	lots more tests for MatrixFederationAgent	6 years ago
Amber Brown	58f6c48183	Use native UPSERTs where possible (#4306)	6 years ago
Richard van der Hoff	97fd29c019	Don't send IP addresses as SNI (#4452) ... The problem here is that we have cut-and-pasted an impl from Twisted, and then failed to maintain it. It was fixed in Twisted in https://github.com/twisted/twisted/pull/1047/files; let's do the same here.	6 years ago
Erik Johnston	e79ba9eb34	Fix tests	6 years ago
Richard van der Hoff	6b574f3df7	fix python2 test failure	6 years ago
Jason Robinson	6f680241bd	Fix flake8 issues ... Signed-off-by: Jason Robinson <jasonr@matrix.org>	6 years ago
Jason Robinson	1838ef1ac3	Fix openid tests after rebase ... Signed-off-by: Jason Robinson <jasonr@matrix.org>	6 years ago
Jason Robinson	a47fac9af6	Fix sorting of imports in tests. Remove an unnecessary mock ... Signed-off-by: Jason Robinson <jasonr@matrix.org>	6 years ago
Jason Robinson	5336e49b39	Add tests for the openid lister for SynapseHomeServer ... Check all possible variants of openid and federation listener on/off possibilities. Signed-off-by: Jason Robinson <jasonr@matrix.org>	6 years ago
Jason Robinson	6d25599098	Add tests for the openid lister for FederationReaderServer ... Check all possible variants of openid and federation listener on/off possibilities. Signed-off-by: Jason Robinson <jasonr@matrix.org>	6 years ago
Jason Robinson	ab97b6e33c	Fix a test docstring in frontend proxy tests ... Signed-off-by: Jason Robinson <jasonr@matrix.org>	6 years ago
Richard van der Hoff	d02c4532c0	Add a test for MatrixFederationAgent	6 years ago
Richard van der Hoff	7021784d46	put resolve_service in an object ... this makes it easier to stub things out for tests.	6 years ago
Richard van der Hoff	53a327b4d5	Require that service_name be a byte string ... it is only ever a bytes now, so let's enforce that.	6 years ago
Richard van der Hoff	7871146667	Make MatrixFederationClient use MatrixFederationAgent ... ... instead of the matrix_federation_endpoint	6 years ago
Neil Johnson	d619b113ed	Fix None guard in config.server.is_threepid_reserved	6 years ago
Richard van der Hoff	33a55289cb	Refactor and bugfix for resove_service (#4427)	6 years ago
Amber Brown	23b0813599	Require ECDH key exchange & remove dh_params (#4429) ... * remove dh_params and set better cipher string	6 years ago
Richard van der Hoff	de6888e7ce	Remove redundant WrappedConnection (#4409) ... * Remove redundant WrappedConnection The matrix federation client uses an HTTP connection pool, which times out its idle HTTP connections, so there is no need for any of this business.	6 years ago
Richard van der Hoff	676cf2ee26	Fix incorrect logcontexts after a Deferred was cancelled (#4407)	6 years ago
Richard van der Hoff	566947ff34	Skip macaroon check for access tokens in the db	6 years ago
Amber Brown	7960c26fda	Fix adding new rows instead of updating them if one of the key values is a NULL in upserts. (#4369)	6 years ago
Erik Johnston	b970cb0e96	Refactor request sending to have better excpetions (#4358) ... * Correctly retry and back off if we get a HTTPerror response * Refactor request sending to have better excpetions MatrixFederationHttpClient blindly reraised exceptions to the caller without differentiating "expected" failures (e.g. connection timeouts etc) versus more severe problems (e.g. programming errors). This commit adds a RequestSendFailed exception that is raised when "expected" failures happen, allowing the TransactionQueue to log them as warnings while allowing us to log other exceptions as actual exceptions.	6 years ago
Amber Brown	d7843f47b6	Remove v1 only REST APIs now we don't ship matrix console (#4334)	6 years ago
Richard van der Hoff	f85676cc93	Return well_known in /login response (#4319) ... ... as per MSC1730.	6 years ago
Amber Brown	ea6abf6724	Fix IP URL previews on Python 3 (#4215)	6 years ago
Maarten de Vries	48b7ff7a35	Fix test_metrics.py compatibility prometheus_client 0.5 ... prometheus_client 0.5 has a named-tuple Sample type with more member than the old plain tuple had. This commit makes sure the unit test detects this and changes the way it reads the sample. Signed-off-by: Maarten de Vries <maarten@de-vri.es>	6 years ago
Neil Johnson	d2f7c4e6b1	create support user (#4141) ... Allow for the creation of a support user. A support user can access the server, join rooms, interact with other users, but does not appear in the user directory nor does it contribute to monthly active user limits.	6 years ago
Richard van der Hoff	30da50a5b8	Initialise user displayname from SAML2 data (#4272) ... When we register a new user from SAML2 data, initialise their displayname correctly.	6 years ago
Richard van der Hoff	c7401a697f	Implement SAML2 authentication (#4267) ... This implements both a SAML2 metadata endpoint (at `/_matrix/saml2/metadata.xml`), and a SAML2 response receiver (at `/_matrix/saml2/authn_response`). If the SAML2 response matches what's been configured, we complete the SSO login flow by redirecting to the client url (aka `RelayState` in SAML2 jargon) with a login token. What we don't yet have is anything to build a SAML2 request and redirect the user to the identity provider. That is left as an exercise for the reader.	6 years ago
Richard van der Hoff	c588b9b9e4	Factor SSO success handling out of CAS login (#4264) ... This is mostly factoring out the post-CAS-login code to somewhere we can reuse it for other SSO flows, but it also fixes the userid mapping while we're at it.	6 years ago