watcha-synapse

Commit Graph

Author	SHA1	Message	Date
Patrick Cloke	76f9c701c3	Always require users to re-authenticate for dangerous operations. (#10184 ) Dangerous actions means deactivating an account, modifying an account password, or adding a 3PID. Other actions (deleting devices, uploading keys) can re-use the same UI auth session if ui_auth.session_timeout is configured.	3 years ago
Lukas Lihotzki	2c240213f4	Fix requestOpenIdToken response: integer expires_in (#10175 ) `expires_in` must be an integer according to the OpenAPI spec: https://github.com/matrix-org/matrix-doc/blob/master/data/api/client-server/definitions/openid_token.yaml#L32 True division (`/`) returns a float instead (`"expires_in": 3600.0`). Floor division (`//`) returns an integer, so the response is spec compliant. Signed-off-by: Lukas Lihotzki <lukas@lihotzki.de>	3 years ago
Patrick Cloke	9e5ab6dd58	Remove the experimental flag for knocking and use stable prefixes / endpoints. (#10167 ) * Room version 7 for knocking. * Stable prefixes and endpoints (both client and federation) for knocking. * Removes the experimental configuration flag.	3 years ago
Sorunome	d936371b69	Implement knock feature (#6739 ) This PR aims to implement the knock feature as proposed in https://github.com/matrix-org/matrix-doc/pull/2403 Signed-off-by: Sorunome mail@sorunome.de Signed-off-by: Andrew Morgan andrewm@element.io	4 years ago
Patrick Cloke	11846dff8c	Limit the number of in-flight /keys/query requests from a single device. (#10144 )	4 years ago
Patrick Cloke	9e4610cc27	Correct type hints for parse_string(s)_from_args. (#10137 )	4 years ago
Dirk Klimpel	d558292548	Add missing type hints to the admin API servlets (#10105 )	4 years ago
Travis Ralston	5325f0308c	r0.6.1 support: /rooms/:roomId/aliases endpoint (#9224 ) [MSC2432](https://github.com/matrix-org/matrix-doc/pull/2432) added this endpoint originally but it has since been included in the spec for nearly a year. This is progress towards https://github.com/matrix-org/synapse/issues/8334	4 years ago
Dirk Klimpel	0284d2a297	Add new admin APIs to remove media by media ID from quarantine. (#10044 ) Related to: #6681, #5956, #10040 Signed-off-by: Dirk Klimpel dirk@klimpel.org	4 years ago
Erik Johnston	fc3d2dc269	Rewrite the KeyRing (#10035 )	4 years ago
Erik Johnston	5eed6348ce	Move some more endpoints off master (#10084 )	4 years ago
Callum Brown	8fb9af570f	Make reason and score optional for report_event (#10077 ) Implements MSC2414: https://github.com/matrix-org/matrix-doc/pull/2414 See #8551 Signed-off-by: Callum Brown <callum@calcuode.com>	4 years ago
Patrick Cloke	f42e4c4eb9	Remove the experimental spaces enabled flag. (#10063 ) In lieu of just always enabling the unstable spaces endpoint and unstable room version.	4 years ago
Dirk Klimpel	65e6c64d83	Add an admin API for unprotecting local media from quarantine (#10040 ) Signed-off-by: Dirk Klimpel dirk@klimpel.org	4 years ago
Jerin J Titus	057ce7b754	Remove tls_fingerprints option (#9280 ) Signed-off-by: Jerin J Titus <72017981+jerinjtitus@users.noreply.github.com>	4 years ago
Michael Telatynski	e8ac9ac8ca	Fix /upload 500'ing when presented a very large image (#10029 ) * Fix /upload 500'ing when presented a very large image Catch DecompressionBombError and re-raise as ThumbnailErrors * Set PIL's MAX_IMAGE_PIXELS to match homeserver.yaml to get it to bomb out quicker, to load less into memory in the case of super large images * Add changelog entry for 10029	4 years ago
Andrew Morgan	4d6e5a5e99	Use a database table to hold the users that should have full presence sent to them, instead of something in-memory (#9823 )	4 years ago
Patrick Cloke	f4833e0c06	Support fetching the spaces summary via GET over federation. (#9947 ) Per changes in MSC2946, the C-S and S-S APIs for spaces summary should use GET requests. Until this is stable, the POST endpoints still exist. This does not switch federation requests to use the GET version yet since it is newly added and already deployed servers might not support it. When switching to the stable endpoint we should switch to GET requests.	4 years ago
Erik Johnston	eba431c539	Revert "Leave out optional keys from /sync (#9919 )" (#9940 ) This reverts commit `e9eb3549d3`.	4 years ago
DeepBlueV7.X	e9eb3549d3	Leave out optional keys from /sync (#9919 ) This leaves out all optional keys from /sync. This should be fine for all clients tested against conduit already, but it may break some clients, as such we should check, that at least most of them don't break horribly and maybe back out some of the individual changes. (We can probably always leave out groups for example, while the others may cause more issues.) Signed-off-by: Nicolas Werner <nicolas.werner@hotmail.de>	4 years ago
ThibF	0085dc5abc	Delete room endpoint (#9889 ) Support the delete of a room through DELETE request and mark previous request as deprecated through documentation. Signed-off-by: Thibault Ferrante <thibault.ferrante@pm.me>	4 years ago
Andrew Morgan	fe604a022a	Remove various bits of compatibility code for Python <3.6 (#9879 ) I went through and removed a bunch of cruft that was lying around for compatibility with old Python versions. This PR also will now prevent Synapse from starting unless you're running Python 3.6+.	4 years ago
Richard van der Hoff	3ff2251754	Improved validation for received requests (#9817 ) * Simplify `start_listening` callpath * Correctly check the size of uploaded files	4 years ago
Erik Johnston	a15c003e5b	Make DomainSpecificString an attrs class (#9875 )	4 years ago
Erik Johnston	9d25a0ae65	Split presence out of master (#9820 )	4 years ago
Erik Johnston	177dae2704	Limit length of accepted email addresses (#9855 )	4 years ago
Patrick Cloke	683d6f75af	Rename handler and config modules which end in handler/config. (#9816 )	4 years ago
Jonathan de Jong	495b214f4f	Fix (final) Bugbear violations (#9838 )	4 years ago
Andrew Morgan	71f0623de9	Port "Allow users to click account renewal links multiple times without hitting an 'Invalid Token' page #74" from synapse-dinsic (#9832 ) This attempts to be a direct port of https://github.com/matrix-org/synapse-dinsic/pull/74 to mainline. There was some fiddling required to deal with the changes that have been made to mainline since (mainly dealing with the split of `RegistrationWorkerStore` from `RegistrationStore`, and the changes made to `self.make_request` in test code).	4 years ago
Richard van der Hoff	5a153772c1	remove `HomeServer.get_config` (#9815 ) Every single time I want to access the config object, I have to remember whether or not we use `get_config`. Let's just get rid of it.	4 years ago
rkfg	c9a2b5d402	More robust handling of the Content-Type header for thumbnail generation (#9788 ) Signed-off-by: Sergey Shpikin <rkfg@rkfg.me>	4 years ago
Jonathan de Jong	4b965c862d	Remove redundant "coding: utf-8" lines (#9786 ) Part of #9744 Removes all redundant `# -- coding: utf-8 --` lines from files, as python 3 automatically reads source code as utf-8 now. `Signed-off-by: Jonathan de Jong <jonathan@automatia.nl>`	4 years ago
Dirk Klimpel	1fc97ee876	Add an admin API to manage ratelimit for a specific user (#9648 )	4 years ago
Will Hunt	e300ef64b1	Require AppserviceRegistrationType (#9548 ) This change ensures that the appservice registration behaviour follows the spec. We decided to do this for Dendrite, so it made sense to also make a PR for synapse to correct the behaviour.	4 years ago
Dirk Klimpel	48a1f4db31	Remove old admin API `GET /_synapse/admin/v1/users/<user_id>` (#9401 ) Related: #8334 Deprecated in: #9429 - Synapse 1.28.0 (2021-02-25) `GET /_synapse/admin/v1/users/<user_id>` has no - unit tests - documentation API in v2 is available (#5925 - 12/2019, v1.7.0). API is misleading. It expects `user_id` and returns a list of all users. Signed-off-by: Dirk Klimpel dirk@klimpel.org	4 years ago
Patrick Cloke	44bb881096	Add type hints to expiring cache. (#9730 )	4 years ago
Dirk Klimpel	bb0fe02a52	Add `order_by` to list user admin API (#9691 )	4 years ago
Erik Johnston	963f4309fe	Make RateLimiter class check for ratelimit overrides (#9711 ) This should fix a class of bug where we forget to check if e.g. the appservice shouldn't be ratelimited. We also check the `ratelimit_override` table to check if the user has ratelimiting disabled. That table is really only meant to override the event sender ratelimiting, so we don't use any values from it (as they might not make sense for different rate limits), but we do infer that if ratelimiting is disabled for the user we should disabled all ratelimits. Fixes #9663	4 years ago
Erik Johnston	b5efcb577e	Make it possible to use dmypy (#9692 ) Running `dmypy run` will do a `mypy` check while spinning up a daemon that makes rerunning `dmypy run` a lot faster. `dmypy` doesn't support `follow_imports = silent` and has `local_partial_types` enabled, so this PR enables those options and fixes the issues that were newly raised. Note that `local_partial_types` will be enabled by default in upcoming mypy releases.	4 years ago
Patrick Cloke	7e8dc9934e	Add a type hints for service notices to the HomeServer object. (#9675 )	4 years ago
Patrick Cloke	b7748d3c00	Import HomeServer from the proper module. (#9665 )	4 years ago
Brendan Abolivier	b6ed4f55ac	Incorporate review	4 years ago
Richard van der Hoff	066068f034	fix mypy	4 years ago
Patrick Cloke	9b0e3009fa	Fix type-hints from bad merge.	4 years ago
Richard van der Hoff	004234f03a	Initial spaces summary API (#9643 ) This is very bare-bones for now: federation will come soon, while pagination is descoped for now but will come later.	4 years ago
Dirk Klimpel	8dd2ea65a9	Consistently check whether a password may be set for a user. (#9636 )	4 years ago
Brendan Abolivier	405aeb0b2c	Implement MSC3026: busy presence state	4 years ago
Patrick Cloke	cc324d53fe	Fix up types for the typing handler. (#9638 ) By splitting this to two separate methods the callers know what methods they can expect on the handler.	4 years ago
Dirk Klimpel	8000cf1315	Return m.change_password.enabled=false if local database is disabled (#9588 ) Instead of if the user does not have a password hash. This allows a SSO user to add a password to their account, but only if the local password database is configured.	4 years ago
Richard van der Hoff	dd69110d95	Add support for stable MSC2858 API (#9617 ) The stable format uses different brand identifiers, so we need to support two identifiers for each IdP.	4 years ago

1 2 3 4 5 ...

2056 Commits (756fd513dfaebddd28bf783eafa95b4505ce8745)