42 Commits (7dcf984075cbc36e0c9bbd199bf4e4de99523224)

Author	SHA1	Message	Date
Richard van der Hoff	cea9750d11	Associate a request_name with each verify request, for logging ... Also: * rename VerifyKeyRequest->VerifyJsonRequest * calculate key_ids on VerifyJsonRequest construction * refactor things to pass around VerifyJsonRequests instead of 4-tuples	6 years ago
Richard van der Hoff	14f13babb0	Add a test room version where we enforce key validity (#5348)	6 years ago
Richard van der Hoff	fec2dcb1a5	Enforce validity period on server_keys for fed requests. (#5321) ... When handling incoming federation requests, make sure that we have an up-to-date copy of the signing key. We do not yet enforce the validity period for event signatures.	6 years ago
Richard van der Hoff	837d7f85a9	more logging improvements	6 years ago
Richard van der Hoff	fd8fb32bdd	remove extraneous exception logging	6 years ago
Richard van der Hoff	7ca638c761	Clarify logging when PDU signature checking fails	6 years ago
Richard van der Hoff	54a87a7b08	Collect room-version variations into one place (#4969) ... Collect all the things that make room-versions different to one another into one place, so that it's easier to define new room versions.	6 years ago
Erik Johnston	0b24d58e05	No vdh tests!	6 years ago
Erik Johnston	a1b0e1879b	Enable room version v3	6 years ago
Erik Johnston	ff2f65d737	Update comment	6 years ago
Erik Johnston	840068bd78	Only check event ID domain for signatures for V1 events ... In future version events won't have an event ID, so we won't be able to do this check.	6 years ago
Erik Johnston	a50cf929c1	Require event format version to parse or create events	6 years ago
Erik Johnston	be6a7e47fa	Revert "Require event format version to parse or create events"	6 years ago
Erik Johnston	f431ff3fb8	Require event format version to parse or create events	6 years ago
Erik Johnston	6a41d2a187	Add room_version param to get_pdu ... When we add new event format we'll need to know the event format or room version when parsing events.	6 years ago
Erik Johnston	89a76d1889	Fix handling of redacted events from federation ... If we receive an event that doesn't pass their content hash check (e.g. due to already being redacted) then we hit a bug which causes an exception to be raised, which then promplty stops the event (and request) from being processed. This effects all sorts of federation APIs, including joining rooms with a redacted state event.	6 years ago
Richard van der Hoff	cd7ef43872	clearer logging when things fail, too	6 years ago
Richard van der Hoff	804dd41e18	Check that signatures on events are valid ... We should check that both the sender's server, and the server which created the event_id (which may be different from whatever the remote server has told us the origin is), have signed the event.	6 years ago
Krombel	3366b9c534	rename assert_params_in_request to assert_params_in_dict ... the method "assert_params_in_request" does handle dicts and not requests. A request body has to be parsed to json before this method can be used	6 years ago
Amber Brown	49af402019	run isort	6 years ago
Richard van der Hoff	33f469ba19	Apply some limits to depth to counter abuse ... * When creating a new event, cap its depth to 2^63 - 1 * When receiving events, reject any without a sensible depth As per https://docs.google.com/document/d/1I3fi2S-XnpO45qrpCsowZv8P8dHcNZ4fsBsbOW7KABI	7 years ago
Erik Johnston	e05bf34117	Move property setting from ReplicationLayer to FederationBase	7 years ago
Richard van der Hoff	bd91857028	Check missing fields in event_from_pdu_json ... Return a 400 rather than a 500 when somebody messes up their send_join	7 years ago
Richard van der Hoff	3079f80d4a	Factor out `event_from_pdu_json` ... turns out we have two copies of this, and neither needs to be an instance method	7 years ago
David Baker	6cd5fcd536	Make the spam checker a module	7 years ago
Richard van der Hoff	6de74ea6d7	Fix logcontexts in _check_sigs_and_hashes	7 years ago
Richard van der Hoff	fcf2c0fd1a	Remove redundant `preserve_fn` ... preserve_fn is a no-op unless the wrapped function returns a Deferred. verify_json_objects_for_server returns a list, so this is doing nothing.	7 years ago
Richard van der Hoff	5ed109d59f	PoC for filtering spammy events (#2456) ... Demonstration of how you might add some hooks to filter out spammy events.	7 years ago
Erik Johnston	9219139351	Preserve some logcontexts	8 years ago
Erik Johnston	d41a1a91d3	Linearize fetching of gaps on incoming events ... This potentially stops the server from doing multiple requests for the same data.	9 years ago
Matthew Hodgson	6c28ac260c	copyrights	9 years ago
Erik Johnston	b5f55a1d85	Implement bulk verify_signed_json API	10 years ago
Erik Johnston	d3ded420b1	Rephrase log line	10 years ago
Erik Johnston	22716774d5	Don't about JSON when warning about content tampering	10 years ago
Erik Johnston	5b1631a4a9	Add a timeout param to get_event	10 years ago
Erik Johnston	95dedb866f	Unwrap defer.gatherResults failures	10 years ago
Erik Johnston	789251afa7	Fix logging	10 years ago
Erik Johnston	58d848adc0	Parrellize fetching of events	10 years ago
Erik Johnston	963256638d	Correctly handle all the places that can throw exceptions	10 years ago
Erik Johnston	3c39f42a05	New line	10 years ago
Erik Johnston	9bace3a367	Actually, the old prune_event function was non-deterministic, so no point keeping it around :(	10 years ago
Erik Johnston	7b810e136e	Add new FederationBase	10 years ago