945 Commits (bb0fe02a5278d0033825bee31a7a49af838d4a9a)

Author	SHA1	Message	Date
Dirk Klimpel	bb0fe02a52	Add `order_by` to list user admin API (#9691)	4 years ago
Denis Kasak	5ff8eb97c6	Make sample config allowed_local_3pids regex stricter. (#9719) ... The regex should be terminated so that subdomain matches of another domain are not accepted. Just ensuring that someone doesn't shoot themselves in the foot by copying our example. Signed-off-by: Denis Kasak <dkasak@termina.org.uk>	4 years ago
Richard van der Hoff	f02663c4dd	Replace `room_invite_state_types` with `room_prejoin_state` (#9700) ... `room_invite_state_types` was inconvenient as a configuration setting, because anyone that ever set it would not receive any new types that were added to the defaults. Here, we deprecate the old setting, and replace it with a couple of new settings under `room_prejoin_state`.	4 years ago
Richard van der Hoff	4bbd535450	Update the OIDC sample config (#9695) ... I've reiterated the advice about using `oidc` to migrate, since I've seen a few people caught by this. I've also removed a couple of the examples as they are duplicating the OIDC documentation, and I think they might be leading people astray.	4 years ago
Paul Tötterman	d7d4232a2d	Preserve host in example apache config (#9696) ... Fixes redirect loop Signed-off-by: Paul Tötterman <paul.totterman@iki.fi>	4 years ago
Ben Banfield-Zanin	4655d2221e	docs: fallback/web endpoint does not appear to be mounted on workers (#9679)	4 years ago
Erik Johnston	e550ab17ad	Increase default join burst ratelimiting (#9674) ... It's legitimate behaviour to try and join a bunch of rooms at once.	4 years ago
Hubbe	dd5e5dc1d6	Add SSO attribute requirements for OIDC providers (#9609) ... Allows limiting who can login using OIDC via the claims made from the IdP.	4 years ago
Andrew Morgan	847ecdd8fa	Pass SSO IdP information to spam checker's registration function (#9626) ... Fixes https://github.com/matrix-org/synapse/issues/9572 When a SSO user logs in for the first time, we create a local Matrix user for them. This goes through the register_user flow, which ends up triggering the spam checker. Spam checker modules don't currently have any way to differentiate between a user trying to sign up initially, versus an SSO user (whom has presumably already been approved elsewhere) trying to log in for the first time. This PR passes `auth_provider_id` as an argument to the `check_registration_for_spam` function. This argument will contain an ID of an SSO provider (`"saml"`, `"cas"`, etc.) if one was used, else `None`.	4 years ago
Richard van der Hoff	dd69110d95	Add support for stable MSC2858 API (#9617) ... The stable format uses different brand identifiers, so we need to support two identifiers for each IdP.	4 years ago
Richard van der Hoff	5b5bc188cf	Clean up config settings for stats (#9604) ... ... and complain if people try to turn it off.	4 years ago
Jason Robinson	17cd48fe51	Fix spam checker modules documentation example (#9580) ... Mention that parse_config must exist and note the check_media_file_for_spam method.	4 years ago
Andrew Morgan	e9df3f496b	Link to the List user's media admin API from media Admin API docs (#9571) ... Earlier [I was convinced](https://github.com/matrix-org/synapse/issues/9565) that we didn't have an Admin API for listing media uploaded by a user. Foolishly I was looking under the Media Admin API documentation, instead of the User Admin API documentation. I thought it'd be helpful to link to the latter so others don't hit the same dead end :)	4 years ago
Richard van der Hoff	eaada74075	JWT OIDC secrets for Sign in with Apple (#9549) ... Apple had to be special. They want a client secret which is generated from an EC key. Fixes #9220. Also fixes #9212 while I'm here.	4 years ago
Erik Johnston	576c91c7c1	Fixup sample config ... After 0764d0c6e5	4 years ago
Leo Bärring	0fc4eb103a	Update reverse proxy to add OpenBSD relayd example configuration. (#9508) ... Update reverse proxy to add OpenBSD relayd example configuration. Signed-off-by: Leo Bärring <leo.barring@protonmail.com>	4 years ago
Richard van der Hoff	a5daae2a5f	Update nginx reverse-proxy docs (#9512) ... Turns out nginx overwrites the Host header by default.	4 years ago
Richard van der Hoff	d8e95e5452	Add support for X-Forwarded-Proto (#9472) ... rewrite XForwardedForRequest to set `isSecure()` based on `X-Forwarded-Proto`. Also implement `getClientAddress()` while we're here.	4 years ago
Andrew Morgan	00bf80cb8e	Fix typo in spam checker documentation	4 years ago
Erik Johnston	66f4949e7f	Fix deleting pushers when using sharded pushers. (#9465)	4 years ago
Dirk Klimpel	71c9f8de6d	Add an `order_by` field to list users' media admin API. (#8978)	4 years ago
Richard van der Hoff	70ea9593ff	example systemd config: propagate reloads to units (#9463) ... It should be possible to reload `synapse.target` to have the reload propagate to all the synapse units.	4 years ago
Andrew Morgan	e22b71810e	Clean up the user directory sample config section (#9385) ... The user directory sample config section was a little messy, and didn't adhere to our [recommended config format guidelines](https://github.com/matrix-org/synapse/blob/develop/docs/code_style.md#configuration-file-format). This PR cleans that up a bit.	4 years ago
Andrew Morgan	13e9029f44	Add a config option to prioritise local users in user directory search results (#9383) ... This PR adds a homeserver config option, `user_directory.prefer_local_users`, that when enabled will show local users higher in user directory search results than remote users. This option is off by default. Note that turning this on doesn't necessarily mean that remote users will always be put below local users, but they should be assuming all other ranking factors (search query match, profile information present etc) are identical. This is useful for, say, University networks that are openly federating, but want to prioritise local students and staff in the user directory over other random users.	4 years ago
AndrewFerr	9bc74743d5	Add configs to make profile data more private (#9203) ... Add off-by-default configuration settings to: - disable putting an invitee's profile info in invite events - disable profile lookup via federation Signed-off-by: Andrew Ferrazzutti <fair@miscworks.net>	4 years ago
Rishabh Arya	e17553e185	Parse ui_auth.session_timeout as a duration (instead of treating it as ms) (#9426)	4 years ago
David Vo	bb2577f6b7	Add http2 to the nginx example config (#9390)	4 years ago
Richard van der Hoff	626afd7e89	Revert "Update workers.md" ... This reverts commit a8878960c0.	4 years ago
Dirk Klimpel	c8d9383cfb	Add the shadow-banning status to the display user admin API. (#9400)	4 years ago
Richard van der Hoff	53f1c4da81	Update workers.md	4 years ago
Richard van der Hoff	a8878960c0	Update workers.md ... tiny typo in sso paths	4 years ago
Eric Eastwood	0a00b7ff14	Update black, and run auto formatting over the codebase (#9381) ... - Update black version to the latest - Run black auto formatting over the codebase - Run autoformatting according to [`docs/code_style.md `](80d6dc9783/docs/code_style.md) - Update `code_style.md` docs around installing black to use the correct version	4 years ago
Marcus	5636e597c3	Fix OIDC gitiea redirect URL. (#9404) ... Fixes a "conflict" from 846b9d3df0 and d1f13c7485.	4 years ago
Erik Johnston	ddfdf94506	Document that pusher instances are shardable (#9407)	4 years ago
Andrew Morgan	ff40c8099d	Fix sample config ... Just a small change missed in 7950aa8a27.	4 years ago
Patrick Cloke	e40d88cff3	Backout changes for automatically calculating the public baseurl. (#9313) ... This breaks some people's configurations (if their Client-Server API is not accessed via port 443).	4 years ago
Thomas Mortagne	5f716fa777	Add XWiki OIDC provider example. (#9324)	4 years ago
Erik Johnston	7e8083eb48	Add check_media_file_for_spam spam checker hook	4 years ago
dykstranet	982d9eb211	Correct `matrix-synapse.service` reference in TURN howto docs. (#9308)	4 years ago
Patrick Cloke	2ab6e67ab7	Fix escaping of braces in OIDC sample config. (#9317) ... This fixes the Jinja2 templates for the mapping provider.	4 years ago
Patrick Cloke	afa18f1baa	Clarify documentation about escaping URLs in templates. (#9310)	4 years ago
dykstranet	e4cdecb310	config: Add detail to auto_join_rooms comment (#9291) ... config: Add detail to auto_join_rooms comment Signed-off-by: Gary Dykstra <gary@dykstranet.com>	4 years ago
Patrick Cloke	4ca054a4ea	Convert blacklisted IPv4 addresses to compatible IPv6 addresses. (#9240) ... Also add a few more IP ranges to the default blacklist.	4 years ago
Travis Ralston	b60bb28bbc	Add an admin API to get the current room state (#9168) ... This could arguably replace the existing admin API for `/members`, however that is out of scope of this change. This sort of endpoint is ideal for moderation use cases as well as other applications, such as needing to retrieve various bits of information about a room to perform a task (like syncing power levels between two places). This endpoint exposes nothing more than an admin would be able to access with a `select *` query on their database.	4 years ago
Richard van der Hoff	8f75bf1df7	Put SAML callback URI under /_synapse/client. (#9289)	4 years ago
Richard van der Hoff	846b9d3df0	Put OIDC callback URI under /_synapse/client. (#9288)	4 years ago
Oliver Hanikel	d1f13c7485	Add an OpenID example config for Gitea. (#9134)	4 years ago
Richard van der Hoff	c543bf87ec	Collect terms consent from the user during SSO registration (#9276)	4 years ago
Richard van der Hoff	e5d70c8a82	Improve styling and wording of SSO UIA templates (#9286) ... fixes #9171	4 years ago
Richard van der Hoff	4167494c90	Replace username picker with a template (#9275) ... There's some prelimiary work here to pull out the construction of a jinja environment to a separate function. I wanted to load the template at display time rather than load time, so that it's easy to update on the fly. Honestly, I think we should do this with all our templates: the risk of ending up with malformed templates is far outweighed by the improved turnaround time for an admin trying to update them.	4 years ago