68 Commits (9ad448c1e56dc548d8ee22494deabe802637b58a)

Author	SHA1	Message	Date
Brendan Abolivier	a4c3a361b7	Add rate-limiting on registration (#4735) ... * Rate-limiting for registration * Add unit test for registration rate limiting * Add config parameters for rate limiting on auth endpoints * Doc * Fix doc of rate limiting function Co-Authored-By: babolivier <contact@brendanabolivier.com> * Incorporate review * Fix config parsing * Fix linting errors * Set default config for auth rate limiting * Fix tests * Add changelog * Advance reactor instead of mocked clock * Move parameters to registration specific config and give them more sensible default values * Remove unused config options * Don't mock the rate limiter un MAU tests * Rename _register_with_store into register_with_store * Make CI happy * Remove unused import * Update sample config * Fix ratelimiting test for py2 * Add non-guest test	7 years ago
Richard van der Hoff	566947ff34	Skip macaroon check for access tokens in the db	7 years ago
Neil Johnson	d2f7c4e6b1	create support user (#4141) ... Allow for the creation of a support user. A support user can access the server, join rooms, interact with other users, but does not appear in the user directory nor does it contribute to monthly active user limits.	7 years ago
Richard van der Hoff	7e07d25ed6	Allow backslashes in event field filters ... Fixes a bug introduced in https://github.com/matrix-org/synapse/pull/1783 which meant that single backslashes were not allowed in event field filters. The intention here is to allow single-backslashes, but disallow double-backslashes.	8 years ago
Amber Brown	52ec6e9dfa	Port tests/ to Python 3 (#3808)	8 years ago
Neil Johnson	ea068d6f3c	fix bug where preserved threepid user comes to sign up and server is mau blocked	8 years ago
Erik Johnston	05077e06fa	Change admin_uri to admin_contact in config and errors	8 years ago
Neil Johnson	e07970165f	rename error code	8 years ago
Neil Johnson	ba1fbf7d5b	special case server_notices_mxid	8 years ago
Neil Johnson	13ad9930c8	add new error type ResourceLimit	8 years ago
Neil Johnson	b8429c7c81	update error codes for resource limiting	8 years ago
Neil Johnson	ab035bdeac	replace admin_email with admin_uri for greater flexibility	8 years ago
Neil Johnson	f4b49152e2	support admin_email config and pass through into blocking errors, return AuthError in all cases	8 years ago
Neil Johnson	ce7de9ae6b	Revert "support admin_email config and pass through into blocking errors, return AuthError in all cases" ... This reverts commit 0d43f991a1.	8 years ago
Neil Johnson	0d43f991a1	support admin_email config and pass through into blocking errors, return AuthError in all cases	8 years ago
Amber Brown	99dd975dae	Run tests under PostgreSQL (#3423)	8 years ago
black	8b3d9b6b19	Run black.	8 years ago
Neil Johnson	42c6823827	disable HS from config	8 years ago
Neil Johnson	d08296f9f2	remove unused import	8 years ago
Neil Johnson	886be75ad1	bug fixes	8 years ago
Neil Johnson	74b1d46ad9	do mau checks based on monthly_active_users table	8 years ago
Amber Brown	da7785147d	Python 3: Convert some unicode/bytes uses (#3569)	8 years ago
Amber Brown	49af402019	run isort	8 years ago
Matthew Hodgson	f82cf3c7df	add test	8 years ago
Matthew Hodgson	e72234f6bd	fix tests	8 years ago
pik	566641a0b5	use jsonschema.FormatChecker for RoomID and UserID strings ... * use a valid filter in rest/client/v2_alpha test Signed-off-by: pik <alexander.maznev@gmail.com>	9 years ago
pik	acafcf1c5b	Add valid filter tests, flake8, fix typo ... Signed-off-by: pik <alexander.maznev@gmail.com>	9 years ago
pik	e56c79c114	check_valid_filter using JSONSchema ... * add invalid filter tests Signed-off-by: pik <alexander.maznev@gmail.com>	9 years ago
Erik Johnston	5d6bad1b3c	Optimise state resolution	9 years ago
Richard van der Hoff	1529c19675	Prevent user tokens being used as guest tokens (#1675) ... Make sure that a user cannot pretend to be a guest by adding 'guest = True' caveats.	10 years ago
Mark Haines	ec609f8094	Fix unit tests	10 years ago
Richard van der Hoff	ec041b335e	Record device_id in client_ips ... Record the device_id when we add a client ip; it's somewhat redundant as we could get it via the access_token, but it will make querying rather easier.	10 years ago
Negar Fazeli	0136a522b1	Bug fix: expire invalid access tokens	10 years ago
Negi Fazeli	40aa6e8349	Create user with expiry ... - Add unittests for client, api and handler Signed-off-by: Negar Fazeli <negar.fazeli@ericsson.com>	10 years ago
Mark Haines	5c79ef9396	Test Filter.filter_rooms ... Also check that the __repr__ method for FilterCollection does something sensible.	10 years ago
Mark Haines	700487a7c7	Fix flake8 warnings for tests	10 years ago
Erik Johnston	35981c8b71	Fix test	10 years ago
Erik Johnston	8c6012a4af	Fix tests	10 years ago
Erik Johnston	8f9c74e9f1	Fix tests	10 years ago
Daniel Wagner-Hall	2110e35fd6	Introduce a Requester object ... This tracks data about the entity which made the request. This is instead of passing around a tuple, which requires call-site modifications every time a new piece of optional context is passed around. I tried to introduce a User object. I gave up.	10 years ago
Matthew Hodgson	6c28ac260c	copyrights	10 years ago
Daniel Wagner-Hall	cfd07aafff	Allow guests to upgrade their accounts	10 years ago
Daniel Wagner-Hall	f522f50a08	Allow guests to register and call /events?room_id= ... This follows the same flows-based flow as regular registration, but as the only implemented flow has no requirements, it auto-succeeds. In the future, other flows (e.g. captcha) may be required, so clients should treat this like the regular registration flow choices.	11 years ago
Erik Johnston	45cd2b0233	Refactor api.filtering to have a Filter API	11 years ago
Mark Haines	8897781558	update filtering tests	11 years ago
Mark Haines	586beb8318	Update the filters to match the latest spec. ... Apply the filter the 'timeline' and 'ephemeral' keys of rooms. Apply the filter to the 'presence' key of a sync response.	11 years ago
Daniel Wagner-Hall	e255c2c32f	s/user_id/user/g for consistency	11 years ago
Daniel Wagner-Hall	81450fded8	Turn TODO into thing which actually will fail	11 years ago
Daniel Wagner-Hall	6a4b650d8a	Attempt to validate macaroons ... A couple of weird caveats: * If we can't validate your macaroon, we fall back to checking that your access token is in the DB, and ignoring the failure * Even if we can validate your macaroon, we still have to hit the DB to get the access token ID, which we pretend is a device ID all over the codebase. This mostly adds the interesting code, and points out the two pieces we need to delete (and necessary conditions) in order to fix the above caveats.	11 years ago
Daniel Wagner-Hall	a9d8bd95e7	Stop looking up "admin", which we never read	11 years ago