1365 Commits (97174780ce726962ca1beb3788b62f16e9fad270)

Author	SHA1	Message	Date
Erik Johnston	a766c41d25	Bump bleach version so that tests can run on old deps.	6 years ago
Erik Johnston	10383e6e6f	Change password reset links to /_matrix.	6 years ago
Richard van der Hoff	db74c4fc6c	fix ci on py2, again	6 years ago
Richard van der Hoff	19780a521e	fix CI on python 2.7	6 years ago
Richard van der Hoff	e016681221	Tests for SSL certs for federation connections ... Add some tests for bad certificates for federation and .well-known connections	6 years ago
Erik Johnston	43badd2cd4	Fix key verification when key stored with null valid_until_ms ... Some keys are stored in the synapse database with a null valid_until_ms which caused an exception to be thrown when using that key. We fix this by treating nulls as zeroes, i.e. they keys will match verification requests with a minimum_valid_until_ms of zero (i.e. don't validate ts) but will not match requests with a non-zero minimum_valid_until_ms. Fixes #5391.	6 years ago
Andrew Morgan	2d1d7b7e6f	Prevent multiple device list updates from breaking a batch send (#5156) ... fixes #5153	6 years ago
Neil Johnson	a11865016e	Set default room version to v4. (#5379) ... Set default room version to v4.	6 years ago
Andrew Morgan	3719680ee4	Add ability to perform password reset via email without trusting the identity server (#5377) ... Sends password reset emails from the homeserver instead of proxying to the identity server. This is now the default behaviour for security reasons. If you wish to continue proxying password reset requests to the identity server you must now enable the email.trust_identity_server_for_password_resets option. This PR is a culmination of 3 smaller PRs which have each been separately reviewed: * #5308 * #5345 * #5368	6 years ago
Richard van der Hoff	9fbb20a531	Stop hardcoding trust of old matrix.org key (#5374) ... There are a few changes going on here: * We make checking the signature on a key server response optional: if no verify_keys are specified, we trust to TLS to validate the connection. * We change the default config so that it does not require responses to be signed by the old key. * We replace the old 'perspectives' config with 'trusted_key_servers', which is also formatted slightly differently. * We emit a warning to the logs every time we trust a key server response signed by the old key.	6 years ago
Erik Johnston	75538813fc	Fix background updates to handle redactions/rejections (#5352) ... * Fix background updates to handle redactions/rejections In background updates based on current state delta stream we need to handle that we may not have all the events (or at least that `get_events` may raise an exception).	6 years ago
Richard van der Hoff	e2dfb922e1	Validate federation server TLS certificates by default.	6 years ago
Richard van der Hoff	cea9750d11	Associate a request_name with each verify request, for logging ... Also: * rename VerifyKeyRequest->VerifyJsonRequest * calculate key_ids on VerifyJsonRequest construction * refactor things to pass around VerifyJsonRequests instead of 4-tuples	6 years ago
Richard van der Hoff	def5ea4062	Don't bomb out on direct key fetches as soon as one fails	6 years ago
Richard van der Hoff	fec2dcb1a5	Enforce validity period on server_keys for fed requests. (#5321) ... When handling incoming federation requests, make sure that we have an up-to-date copy of the signing key. We do not yet enforce the validity period for event signatures.	6 years ago
Amber Brown	be452fc9ac	more fix	6 years ago
Amber Brown	7f81b967ca	fix schemas	6 years ago
Amber Brown	2889b05554	Unify v1 and v2 REST client APIs (#5226)	6 years ago
Richard van der Hoff	93003aa172	add some tests	6 years ago
Brendan Abolivier	4d794dae21	Move delta from +10% to -10%	6 years ago
Brendan Abolivier	847b9dcd1c	Make max_delta equal to period * 10%	6 years ago
Erik Johnston	6574d4ad0a	Add test	6 years ago
Amber Brown	46c8f7a517	Implement the SHHS complexity API (#5216)	6 years ago
Erik Johnston	d7add713a8	Add test	6 years ago
Brendan Abolivier	7e1c7cc274	Typo	6 years ago
Brendan Abolivier	52839886d6	Allow configuring a range for the account validity startup job ... When enabling the account validity feature, Synapse will look at startup for registered account without an expiration date, and will set one equals to 'now + validity_period' for them. On large servers, it can mean that a large number of users will have the same expiration date, which means that they will all be sent a renewal email at the same time, which isn't ideal. In order to mitigate this, this PR allows server admins to define a 'max_delta' so that the expiration date is a random value in the [now + validity_period ; now + validity_period + max_delta] range. This allows renewal emails to be progressively sent over a configured period instead of being sent all in one big batch.	6 years ago
Richard van der Hoff	fa1b293da2	Simplification to Keyring.wait_for_previous_lookups. (#5250) ... The list of server names was redundant, since it was equivalent to the keys on the server_to_deferred map. This reduces the number of large lists being passed around, and has the benefit of deduplicating the entries in `wait_on`.	6 years ago
Richard van der Hoff	753b1270da	Require sig from origin server on perspectives responses	6 years ago
Andrew Morgan	6368150a74	Add config option for setting homeserver's default room version (#5223) ... Replaces DEFAULT_ROOM_VERSION constant with a method that first checks the config, then returns a hardcoded value if the option is not present. That hardcoded value is now located in the server.py config file.	6 years ago
Richard van der Hoff	895b79ac2e	Factor out KeyFetchers from KeyRing ... Rather than have three methods which have to have the same interface, factor out a separate interface which is provided by three implementations. I find it easier to grok the code this way.	6 years ago
Richard van der Hoff	b75537beaf	Store key validity time in the storage layer ... This is a first step to checking that the key is valid at the required moment. The idea here is that, rather than passing VerifyKey objects in and out of the storage layer, we instead pass FetchKeyResult objects, which simply wrap the VerifyKey and add a valid_until_ts field.	6 years ago
Richard van der Hoff	2e052110ee	Rewrite store_server_verify_key to store several keys at once (#5234) ... Storing server keys hammered the database a bit. This replaces the implementation which stored a single key, with one which can do many updates at once.	6 years ago
Amber Brown	4a30e4acb4	Room Statistics (#4338)	6 years ago
Erik Johnston	c7ec06e8a6	Block attempts to annotate the same event twice	6 years ago
Erik Johnston	1dff859d6a	Rename relation types to match MSC	6 years ago
Erik Johnston	2ac9c965dd	Fixup comments	6 years ago
Erik Johnston	935af0da38	Correctly update aggregation counts after redaction	6 years ago
ReidAnderson	3787133c9e	Limit UserIds to a length that fits in a state key (#5198)	6 years ago
Brendan Abolivier	ad5b4074e1	Add startup background job for account validity ... If account validity is enabled in the server's configuration, this job will run at startup as a background job and will stick an expiration date to any registered account missing one.	6 years ago
Erik Johnston	d4ca533d70	Make tests use different user for each reaction it sends ... As users aren't allowed to react with the same emoji more than once.	6 years ago
Erik Johnston	d46aab3fa8	Add basic editing support	6 years ago
Brendan Abolivier	8f9ce1a8a2	Lint	6 years ago
Brendan Abolivier	cc8c139a39	Lint	6 years ago
Brendan Abolivier	efdc55db75	Forgot copyright	6 years ago
Brendan Abolivier	54a582ed44	Add test case	6 years ago
Erik Johnston	95f3fcda3c	Check that event is visible in new APIs	6 years ago
Erik Johnston	a0603523d2	Add aggregations API	6 years ago
Amber Brown	f1e5b41388	Make all the rate limiting options more consistent (#5181)	6 years ago
Erik Johnston	b50641e357	Add simple pagination API	6 years ago
Erik Johnston	efe3c7977a	Add simple send_relation API and track in DB	6 years ago