967 Commits (7adcb20fc02d614b4a2b03b128b279f25633e2bd)

Author	SHA1	Message	Date
Jerin J Titus	057ce7b754	Remove tls_fingerprints option (#9280) ... Signed-off-by: Jerin J Titus <72017981+jerinjtitus@users.noreply.github.com>	4 years ago
Patrick Cloke	316f89e87f	Enable experimental spaces by default. (#10011) ... The previous spaces_enabled flag now defaults to true and is exposed in the sample config.	4 years ago
Dirk Klimpel	387c297489	Add missing entry to the table of contents of room admin API (#10043)	4 years ago
Javier Junquera Sánchez	141b073c7b	Update user_directory.md (#10016) ... Signed-off-by: Javier Junquera Sánchez <javier@junquera.io>	4 years ago
Savyasachee Jha	5bba1b4905	Hardened systemd unit files (#9803) ... Signed-off-by: Savyasachee Jha savya.jha@hawkradius.com	4 years ago
Andrew Morgan	4d6e5a5e99	Use a database table to hold the users that should have full presence sent to them, instead of something in-memory (#9823)	4 years ago
Richard van der Hoff	6660912226	Update postgres docs (#9989)	4 years ago
Richard van der Hoff	c14f99be46	Support enabling opentracing by user (#9978) ... Add a config option which allows enabling opentracing by user id, eg for debugging requests made by a test user.	4 years ago
Andrew Morgan	976216959b	Update minimum supported version in postgres.md (#9988)	4 years ago
Patrick Cloke	d19bccdbec	Update SSO mapping providers documentation about unique IDs. (#9980)	4 years ago
Patrick Cloke	28c6841102	Send the `m.room.create` stripped event with invites (support MSC1772). (#9966) ... MSC1772 specifies the m.room.create event should be sent as part of the invite_state. This was done optionally behind an experimental flag, but is now done by default due to MSC1772 being approved.	4 years ago
Aaron Raimist	dc6366a9bd	Add config option to hide device names over federation (#9945) ... Now that cross signing exists there is much less of a need for other people to look at devices and verify them individually. This PR adds a config option to allow you to prevent device display names from being shared with other servers. Signed-off-by: Aaron Raimist <aaron@raim.ist>	4 years ago
Erik Johnston	1fb9a2d0bf	Limit how often GC happens by time. (#9902) ... Synapse can be quite memory intensive, and unless care is taken to tune the GC thresholds it can end up thrashing, causing noticable performance problems for large servers. We fix this by limiting how often we GC a given generation, regardless of current counts/thresholds. This does not help with the reverse problem where the thresholds are set too high, but that should only happen in situations where they've been manually configured. Adds a `gc_min_seconds_between` config option to override the defaults. Fixes #9890.	4 years ago
Andrew Morgan	b85821aca2	Add port parameter to the sample config for psycopg2 args (#9911) ... Adds the `port` option with the default value to the sample config file.	4 years ago
ThibF	0085dc5abc	Delete room endpoint (#9889) ... Support the delete of a room through DELETE request and mark previous request as deprecated through documentation. Signed-off-by: Thibault Ferrante <thibault.ferrante@pm.me>	4 years ago
Patrick Cloke	683d6f75af	Rename handler and config modules which end in handler/config. (#9816)	4 years ago
Andrew Morgan	71f0623de9	Port "Allow users to click account renewal links multiple times without hitting an 'Invalid Token' page #74" from synapse-dinsic (#9832) ... This attempts to be a direct port of https://github.com/matrix-org/synapse-dinsic/pull/74 to mainline. There was some fiddling required to deal with the changes that have been made to mainline since (mainly dealing with the split of `RegistrationWorkerStore` from `RegistrationStore`, and the changes made to `self.make_request` in test code).	4 years ago
Dirk Klimpel	1fc97ee876	Add an admin API to manage ratelimit for a specific user (#9648)	4 years ago
Andrew Morgan	04819239ba	Add a Synapse Module for configuring presence update routing (#9491) ... At the moment, if you'd like to share presence between local or remote users, those users must be sharing a room together. This isn't always the most convenient or useful situation though. This PR adds a module to Synapse that will allow deployments to set up extra logic on where presence updates should be routed. The module must implement two methods, `get_users_for_states` and `get_interested_users`. These methods are given presence updates or user IDs and must return information that Synapse will use to grant passing presence updates around. A method is additionally added to `ModuleApi` which allows triggering a set of users to receive the current, online presence information for all users they are considered interested in. This is the equivalent of that user receiving presence information during an initial sync. The goal of this module is to be fairly generic and useful for a variety of applications, with hard requirements being: * Sending state for a specific set or all known users to a defined set of local and remote users. * The ability to trigger an initial sync for specific users, so they receive all current state.	4 years ago
Erik Johnston	a888cbdd31	Add deprecation policy doc (#9723) ... Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com>	4 years ago
Dirk Klimpel	bb0fe02a52	Add `order_by` to list user admin API (#9691)	4 years ago
Denis Kasak	5ff8eb97c6	Make sample config allowed_local_3pids regex stricter. (#9719) ... The regex should be terminated so that subdomain matches of another domain are not accepted. Just ensuring that someone doesn't shoot themselves in the foot by copying our example. Signed-off-by: Denis Kasak <dkasak@termina.org.uk>	4 years ago
Richard van der Hoff	f02663c4dd	Replace `room_invite_state_types` with `room_prejoin_state` (#9700) ... `room_invite_state_types` was inconvenient as a configuration setting, because anyone that ever set it would not receive any new types that were added to the defaults. Here, we deprecate the old setting, and replace it with a couple of new settings under `room_prejoin_state`.	4 years ago
Richard van der Hoff	4bbd535450	Update the OIDC sample config (#9695) ... I've reiterated the advice about using `oidc` to migrate, since I've seen a few people caught by this. I've also removed a couple of the examples as they are duplicating the OIDC documentation, and I think they might be leading people astray.	4 years ago
Paul Tötterman	d7d4232a2d	Preserve host in example apache config (#9696) ... Fixes redirect loop Signed-off-by: Paul Tötterman <paul.totterman@iki.fi>	4 years ago
Ben Banfield-Zanin	4655d2221e	docs: fallback/web endpoint does not appear to be mounted on workers (#9679)	4 years ago
Erik Johnston	e550ab17ad	Increase default join burst ratelimiting (#9674) ... It's legitimate behaviour to try and join a bunch of rooms at once.	4 years ago
Hubbe	dd5e5dc1d6	Add SSO attribute requirements for OIDC providers (#9609) ... Allows limiting who can login using OIDC via the claims made from the IdP.	4 years ago
Andrew Morgan	847ecdd8fa	Pass SSO IdP information to spam checker's registration function (#9626) ... Fixes https://github.com/matrix-org/synapse/issues/9572 When a SSO user logs in for the first time, we create a local Matrix user for them. This goes through the register_user flow, which ends up triggering the spam checker. Spam checker modules don't currently have any way to differentiate between a user trying to sign up initially, versus an SSO user (whom has presumably already been approved elsewhere) trying to log in for the first time. This PR passes `auth_provider_id` as an argument to the `check_registration_for_spam` function. This argument will contain an ID of an SSO provider (`"saml"`, `"cas"`, etc.) if one was used, else `None`.	4 years ago
Richard van der Hoff	dd69110d95	Add support for stable MSC2858 API (#9617) ... The stable format uses different brand identifiers, so we need to support two identifiers for each IdP.	4 years ago
Richard van der Hoff	5b5bc188cf	Clean up config settings for stats (#9604) ... ... and complain if people try to turn it off.	4 years ago
Jason Robinson	17cd48fe51	Fix spam checker modules documentation example (#9580) ... Mention that parse_config must exist and note the check_media_file_for_spam method.	4 years ago
Andrew Morgan	e9df3f496b	Link to the List user's media admin API from media Admin API docs (#9571) ... Earlier [I was convinced](https://github.com/matrix-org/synapse/issues/9565) that we didn't have an Admin API for listing media uploaded by a user. Foolishly I was looking under the Media Admin API documentation, instead of the User Admin API documentation. I thought it'd be helpful to link to the latter so others don't hit the same dead end :)	4 years ago
Richard van der Hoff	eaada74075	JWT OIDC secrets for Sign in with Apple (#9549) ... Apple had to be special. They want a client secret which is generated from an EC key. Fixes #9220. Also fixes #9212 while I'm here.	4 years ago
Erik Johnston	576c91c7c1	Fixup sample config ... After 0764d0c6e5	4 years ago
Leo Bärring	0fc4eb103a	Update reverse proxy to add OpenBSD relayd example configuration. (#9508) ... Update reverse proxy to add OpenBSD relayd example configuration. Signed-off-by: Leo Bärring <leo.barring@protonmail.com>	4 years ago
Richard van der Hoff	a5daae2a5f	Update nginx reverse-proxy docs (#9512) ... Turns out nginx overwrites the Host header by default.	4 years ago
Richard van der Hoff	d8e95e5452	Add support for X-Forwarded-Proto (#9472) ... rewrite XForwardedForRequest to set `isSecure()` based on `X-Forwarded-Proto`. Also implement `getClientAddress()` while we're here.	4 years ago
Andrew Morgan	00bf80cb8e	Fix typo in spam checker documentation	4 years ago
Erik Johnston	66f4949e7f	Fix deleting pushers when using sharded pushers. (#9465)	4 years ago
Dirk Klimpel	71c9f8de6d	Add an `order_by` field to list users' media admin API. (#8978)	4 years ago
Richard van der Hoff	70ea9593ff	example systemd config: propagate reloads to units (#9463) ... It should be possible to reload `synapse.target` to have the reload propagate to all the synapse units.	4 years ago
Andrew Morgan	e22b71810e	Clean up the user directory sample config section (#9385) ... The user directory sample config section was a little messy, and didn't adhere to our [recommended config format guidelines](https://github.com/matrix-org/synapse/blob/develop/docs/code_style.md#configuration-file-format). This PR cleans that up a bit.	4 years ago
Andrew Morgan	13e9029f44	Add a config option to prioritise local users in user directory search results (#9383) ... This PR adds a homeserver config option, `user_directory.prefer_local_users`, that when enabled will show local users higher in user directory search results than remote users. This option is off by default. Note that turning this on doesn't necessarily mean that remote users will always be put below local users, but they should be assuming all other ranking factors (search query match, profile information present etc) are identical. This is useful for, say, University networks that are openly federating, but want to prioritise local students and staff in the user directory over other random users.	4 years ago
AndrewFerr	9bc74743d5	Add configs to make profile data more private (#9203) ... Add off-by-default configuration settings to: - disable putting an invitee's profile info in invite events - disable profile lookup via federation Signed-off-by: Andrew Ferrazzutti <fair@miscworks.net>	4 years ago
Rishabh Arya	e17553e185	Parse ui_auth.session_timeout as a duration (instead of treating it as ms) (#9426)	4 years ago
David Vo	bb2577f6b7	Add http2 to the nginx example config (#9390)	4 years ago
Richard van der Hoff	626afd7e89	Revert "Update workers.md" ... This reverts commit a8878960c0.	4 years ago
Dirk Klimpel	c8d9383cfb	Add the shadow-banning status to the display user admin API. (#9400)	4 years ago
Richard van der Hoff	53f1c4da81	Update workers.md	4 years ago