2271 Commits (77e56deffcf685ca5d0a264059f0c326e53e99af)

Author	SHA1	Message	Date
Patrick Cloke	3af0672350	Improve tests for structured logging. (#8916)	4 years ago
Dirk Klimpel	0a34cdfc66	Add number of local devices to Room Details Admin API (#8886)	4 years ago
Erik Johnston	1d55c7b567	Don't ratelimit autojoining of rooms (#8921) ... Fixes #8866	4 years ago
Patrick Cloke	344ab0b53a	Default to blacklisting reserved IP ranges and add a whitelist. (#8870) ... This defaults `ip_range_blacklist` to reserved IP ranges and also adds an `ip_range_whitelist` setting to override it.	4 years ago
Patrick Cloke	6ff34e00d9	Skip the SAML tests if xmlsec1 isn't available. (#8905)	4 years ago
Richard van der Hoff	3ce2f303f1	Consistently use room_id from federation request body (#8776) ... * Consistently use room_id from federation request body Some federation APIs have a redundant `room_id` path param (see https://github.com/matrix-org/matrix-doc/issues/2330). We should make sure we consistently use either the path param or the body param, and the body param is easier. * Kill off some references to "context" Once upon a time, "rooms" were known as "contexts". I think this kills of the last references to "contexts".	4 years ago
Aaron Raimist	cd9e72b185	Add X-Robots-Tag header to stop crawlers from indexing media (#8887) ... Fixes / related to: https://github.com/matrix-org/synapse/issues/6533 This should do essentially the same thing as a robots.txt file telling robots to not index the media repo. https://developers.google.com/search/reference/robots_meta_tag Signed-off-by: Aaron Raimist <aaron@raim.ist>	4 years ago
Will Hunt	ff1f0ee094	Call set_avatar_url with target_user, not user_id (#8872) ... * Call set_avatar_url with target_user, not user_id Fixes https://github.com/matrix-org/synapse/issues/8871 * Create 8872.bugfix * Update synapse/rest/admin/users.py Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com> * Testing * Update changelog.d/8872.bugfix Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>	4 years ago
Patrick Cloke	1f3748f033	Do not raise a 500 exception when previewing empty media. (#8883)	4 years ago
Patrick Cloke	96358cb424	Add authentication to replication endpoints. (#8853) ... Authentication is done by checking a shared secret provided in the Synapse configuration file.	4 years ago
Erik Johnston	df4b1e9c74	Pass room_id to get_auth_chain_difference (#8879) ... This is so that we can choose which algorithm to use based on the room ID.	4 years ago
Patrick Cloke	b774c555d8	Add additional validation to pusher URLs. (#8865) ... Pusher URLs now must end in `/_matrix/push/v1/notify` per the specification.	4 years ago
Patrick Cloke	22c6c19f91	Fix a regression that mapping providers should be able to redirect users. (#8878) ... This was broken in #8801.	4 years ago
Richard van der Hoff	cf3b8156be	Fix errorcode for disabled registration (#8867) ... The spec says we should return `M_FORBIDDEN` when someone tries to register and registration is disabled.	4 years ago
Richard van der Hoff	f347f0cd58	remove unused FakeResponse (#8864)	4 years ago
Richard van der Hoff	0bac276890	UIA: offer only available auth flows ... During user-interactive auth, do not offer password auth to users with no password, nor SSO auth to users with no SSO. Fixes #7559.	4 years ago
Richard van der Hoff	b751624ff8	remove unused DeferredMockCallable	4 years ago
Richard van der Hoff	c834f1d67a	remove unused `resource_for_federation` ... This is now only used in `test_typing`, so move it there.	4 years ago
Richard van der Hoff	76469898ee	Factor out FakeResponse from test_oidc	4 years ago
Richard van der Hoff	90cf1eec44	Remove redundant mocking	4 years ago
Richard van der Hoff	7ea85302f3	fix up various test cases ... A few test cases were relying on being able to mount non-client servlets on the test resource. it's better to give them their own Resources.	4 years ago
Patrick Cloke	30fba62108	Apply an IP range blacklist to push and key revocation requests. (#8821) ... Replaces the `federation_ip_range_blacklist` configuration setting with an `ip_range_blacklist` setting with wider scope. It now applies to: * Federation * Identity servers * Push notifications * Checking key validitity for third-party invite events The old `federation_ip_range_blacklist` setting is still honored if present, but with reduced scope (it only applies to federation and identity servers).	4 years ago
Erik Johnston	c5b6abd53d	Correctly handle unpersisted events when calculating auth chain difference. (#8827) ... We do state res with unpersisted events when calculating the new current state of the room, so that should be the only thing impacted. I don't think this is tooooo big of a deal as: 1. the next time a state event happens in the room the current state should correct itself; 2. in the common case all the unpersisted events' auth events will be pulled in by other state, so will still return the correct result (or one which is sufficiently close to not affect the result); and 3. we mostly use the state at an event to do important operations, which isn't affected by this.	4 years ago
Richard van der Hoff	693516e756	Add `create_resource_dict` method to HomeserverTestCase ... Rather than using a single JsonResource, construct a resource tree, as we do in the prod code, and allow testcases to add extra resources by overriding `create_resource_dict`.	4 years ago
Patrick Cloke	8388384a64	Fix a regression when grandfathering SAML users. (#8855) ... This was broken in #8801 when abstracting code shared with OIDC. After this change both SAML and OIDC have a concept of grandfathering users, but with different implementations.	4 years ago
Patrick Cloke	c21bdc813f	Add basic SAML tests for mapping users. (#8800)	4 years ago
Richard van der Hoff	d3ed93504b	Create a `PasswordProvider` wrapper object (#8849) ... The idea here is to abstract out all the conditional code which tests which methods a given password provider has, to provide a consistent interface.	4 years ago
Andrew Morgan	edb3d3f827	Allow specifying room version in 'RestHelper.create_room_as' and add typing (#8854) ... This PR adds a `room_version` argument to the `RestHelper`'s `create_room_as` function for tests. I plan to use this for testing knocking, which currently uses an unstable room version.	4 years ago
Richard van der Hoff	4d9496559d	Support "identifier" dicts in UIA (#8848) ... The spec requires synapse to support `identifier` dicts for `m.login.password` user-interactive auth, which it did not (instead, it required an undocumented `user` parameter.) To fix this properly, we need to pull the code that interprets `identifier` into `AuthHandler.validate_login` so that it can be called from the UIA code. Fixes #5665.	4 years ago
Richard van der Hoff	89f7930730	Don't offer password login when it is disabled (#8835) ... Fix a minor bug where we would offer "m.login.password" login if a custom auth provider supported it, even if password login was disabled.	4 years ago
Richard van der Hoff	ddc4343683	Add some tests for `password_auth_providers` (#8819) ... These things seemed to be completely untested, so I added a load of tests for them.	4 years ago
Richard van der Hoff	09ac0569fe	Fix broken testcase (#8851) ... This test was broken by #8565. It doesn't need to set set `self.clock` here anyway - that is done by `setUp`.	4 years ago
Andrew Morgan	17fa58bdd1	Add a config option to change whether unread push notification counts are per-message or per-room (#8820) ... This PR adds a new config option to the `push` section of the homeserver config, `group_unread_count_by_room`. By default Synapse will group push notifications by room (so if you have 1000 unread messages, if they lie in 55 rooms, you'll see an unread count on your phone of 55). However, it is also useful to be able to send out the true count of unread messages if desired. If `group_unread_count_by_room` is set to `false`, then with the above example, one would see an unread count of 1000 (email anyone?).	4 years ago
Jonathan de Jong	ca60822b34	Simplify the way the `HomeServer` object caches its internal attributes. (#8565) ... Changes `@cache_in_self` to use underscore-prefixed attributes.	4 years ago
Dirk Klimpel	3f0ff53158	Remove deprecated `/_matrix/client/*/admin` endpoints (#8785) ... These are now only available via `/_synapse/admin/v1`.	4 years ago
Patrick Cloke	4fd222ad70	Support trying multiple localparts for OpenID Connect. (#8801) ... Abstracts the SAML and OpenID Connect code which attempts to regenerate the localpart of a matrix ID if it is already in use.	4 years ago
Patrick Cloke	79bfe966e0	Improve error checking for OIDC/SAML mapping providers (#8774) ... Checks that the localpart returned by mapping providers for SAML and OIDC are valid before registering new users. Extends the OIDC tests for existing users and invalid data.	4 years ago
Richard van der Hoff	950bb0305f	Consistently use room_id from federation request body (#8776) ... * Consistently use room_id from federation request body Some federation APIs have a redundant `room_id` path param (see https://github.com/matrix-org/matrix-doc/issues/2330). We should make sure we consistently use either the path param or the body param, and the body param is easier. * Kill off some references to "context" Once upon a time, "rooms" were known as "contexts". I think this kills of the last references to "contexts".	4 years ago
Erik Johnston	03e392f787	Fix tests on develop (#8777) ... This was broken due to #8617 and #8761.	4 years ago
Patrick Cloke	ee382025b0	Abstract shared SSO code. (#8765) ... De-duplicates code between the SAML and OIDC implementations.	4 years ago
Erik Johnston	f737368a26	Add admin API for logging in as a user (#8617)	4 years ago
Richard van der Hoff	acfe3b3065	Remove redundant `HomeserverTestCase.render`	4 years ago
Richard van der Hoff	be8fa65d0b	Remove redundant calls to `render()`	4 years ago
Richard van der Hoff	129ae841e5	Make `make_request` actually render the request ... remove the stubbing out of `request.process`, so that `requestReceived` also renders the request via the appropriate resource. Replace render() with a stub for now.	4 years ago
Richard van der Hoff	1f41422c98	Fix the URL in the URL preview tests ... the preview resource is mointed at preview_url, not url_preview	4 years ago
Richard van der Hoff	f125895475	Move `wait_until_result` into `FakeChannel` (#8758) ... FakeChannel has everything we need, and this more accurately models the real flow.	4 years ago
Richard van der Hoff	c3e3552ec4	fixup test	4 years ago
Richard van der Hoff	791d7cd6f0	Rename `create_test_json_resource` to `create_test_resource` (#8759) ... The root resource isn't necessarily a JsonResource, so rename this method accordingly, and update a couple of test classes to use the method rather than directly manipulating self.resource.	4 years ago
Richard van der Hoff	ebc405446e	Add a `custom_headers` param to `make_request` (#8760) ... Some tests want to set some custom HTTP request headers, so provide a way to do that before calling requestReceived().	4 years ago
Richard van der Hoff	cfd895a22e	use global make_request() directly where we have a custom Resource ... Where we want to render a request against a specific Resource, call the global make_request() function rather than the one in HomeserverTestCase, allowing us to pass in an appropriate `Site`.	4 years ago