watcha-synapse

Commit Graph

Author	SHA1	Message	Date
Richard van der Hoff	8a910f97a4	Add some tests for the IDP picker flow	4 years ago
Richard van der Hoff	111b673fc1	Add initial support for a "pick your IdP" page (#9017 ) During login, if there are multiple IdPs enabled, offer the user a choice of IdPs.	4 years ago
Richard van der Hoff	d2c616a413	Combine the SSO Redirect Servlets (#9015 ) * Implement CasHandler.handle_redirect_request ... to make it match OidcHandler and SamlHandler * Clean up interface for OidcHandler.handle_redirect_request Make it accept `client_redirect_url=None`. * Clean up interface for `SamlHandler.handle_redirect_request` ... bring it into line with CAS and OIDC by making it take a Request parameter, move the magic for `client_redirect_url` for UIA into the handler, and fix the return type to be a `str` rather than a `bytes`. * Define a common protocol for SSO auth provider impls * Give SsoIdentityProvider an ID and register them * Combine the SSO Redirect servlets Now that the SsoHandler knows about the identity providers, we can combine the various RedirectServlets into a single implementation which delegates to the right IdP. changelog	4 years ago
Patrick Cloke	1c9a850562	Add type hints to the crypto module. (#8999 )	4 years ago
Patrick Cloke	b7c580e333	Check if group IDs are valid before using them. (#8977 )	4 years ago
Patrick Cloke	14a7371375	Validate input parameters for the sendToDevice API. (#8975 ) This makes the "messages" key in the content required. This is currently optional in the spec, but that seems to be an error.	4 years ago
Patrick Cloke	68bb26da69	Allow redacting events on workers (#8994 ) Adds the redacts endpoint to workers that have the client listener.	4 years ago
Erik Johnston	d781a81e69	Allow server admin to get admin bit in rooms where local user is an admin (#8756 ) This adds an admin API that allows a server admin to get power in a room if a local user has power in a room. Will also invite the user if they're not in the room and its a private room. Can specify another user (rather than the admin user) to be granted power. Co-authored-by: Matthew Hodgson <matthew@matrix.org>	4 years ago
Richard van der Hoff	28877fade9	Implement a username picker for synapse (#8942 ) The final part (for now) of my work to implement a username picker in synapse itself. The idea is that we allow `UsernameMappingProvider`s to return `localpart=None`, in which case, rather than redirecting the browser back to the client, we redirect to a username-picker resource, which allows the user to enter a username. We then complete the SSO flow (including doing the client permission checks). The static resources for the username picker itself (in https://github.com/matrix-org/synapse/tree/rav/username_picker/synapse/res/username_picker) are essentially lifted wholesale from https://github.com/matrix-org/matrix-synapse-saml-mozilla/tree/master/matrix_synapse_saml_mozilla/res. As the comment says, we might want to think about making them customisable, but that can be a follow-up. Fixes #8876.	4 years ago
Patrick Cloke	5d4c330ed9	Allow re-using a UI auth validation for a period of time (#8970 )	4 years ago
Erik Johnston	4c33796b20	Correctly handle AS registerations and add test	4 years ago
Patrick Cloke	bd30cfe86a	Convert internal pusher dicts to attrs classes. (#8940 ) This improves type hinting and should use less memory.	4 years ago
David Teller	f14428b25c	Allow spam-checker modules to be provide async methods. (#8890 ) Spam checker modules can now provide async methods. This is implemented in a backwards-compatible manner.	4 years ago
Erik Johnston	a8eceb01e5	Honour AS ratelimit settings for /login requests (#8920 ) Fixes #8846.	4 years ago
Dirk Klimpel	0a34cdfc66	Add number of local devices to Room Details Admin API (#8886 )	4 years ago
Aaron Raimist	cd9e72b185	Add X-Robots-Tag header to stop crawlers from indexing media (#8887 ) Fixes / related to: https://github.com/matrix-org/synapse/issues/6533 This should do essentially the same thing as a robots.txt file telling robots to not index the media repo. https://developers.google.com/search/reference/robots_meta_tag Signed-off-by: Aaron Raimist <aaron@raim.ist>	4 years ago
Will Hunt	ff1f0ee094	Call set_avatar_url with target_user, not user_id (#8872 ) * Call set_avatar_url with target_user, not user_id Fixes https://github.com/matrix-org/synapse/issues/8871 * Create 8872.bugfix * Update synapse/rest/admin/users.py Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com> * Testing * Update changelog.d/8872.bugfix Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>	4 years ago
Patrick Cloke	1f3748f033	Do not raise a 500 exception when previewing empty media. (#8883 )	4 years ago
Patrick Cloke	df3e6a23a7	Do not 500 if the content-length is not provided when uploading media. (#8862 ) Instead return the proper 400 error.	4 years ago
Richard van der Hoff	cf3b8156be	Fix errorcode for disabled registration (#8867 ) The spec says we should return `M_FORBIDDEN` when someone tries to register and registration is disabled.	4 years ago
Patrick Cloke	30fba62108	Apply an IP range blacklist to push and key revocation requests. (#8821 ) Replaces the `federation_ip_range_blacklist` configuration setting with an `ip_range_blacklist` setting with wider scope. It now applies to: * Federation * Identity servers * Push notifications * Checking key validitity for third-party invite events The old `federation_ip_range_blacklist` setting is still honored if present, but with reduced scope (it only applies to federation and identity servers).	4 years ago
David Florness	c4675e1b24	Add additional validation for the admin register endpoint. (#8837 ) Raise a proper 400 error if the `mac` field is missing.	4 years ago
Richard van der Hoff	4d9496559d	Support "identifier" dicts in UIA (#8848 ) The spec requires synapse to support `identifier` dicts for `m.login.password` user-interactive auth, which it did not (instead, it required an undocumented `user` parameter.) To fix this properly, we need to pull the code that interprets `identifier` into `AuthHandler.validate_login` so that it can be called from the UIA code. Fixes #5665.	4 years ago
Richard van der Hoff	59e18a1333	Simplify appservice login code (#8847 ) we don't need to support legacy login dictionaries here.	4 years ago
Jonathan de Jong	ca60822b34	Simplify the way the `HomeServer` object caches its internal attributes. (#8565 ) Changes `@cache_in_self` to use underscore-prefixed attributes.	4 years ago
Richard van der Hoff	a090b86209	Add `force_purge` option to delete-room admin api. (#8843 )	4 years ago
Dirk Klimpel	3f0ff53158	Remove deprecated `/_matrix/client/*/admin` endpoints (#8785 ) These are now only available via `/_synapse/admin/v1`.	4 years ago
Patrick Cloke	473dfec1e5	Use TYPE_CHECKING instead of magic MYPY variable. (#8770 )	4 years ago
Erik Johnston	f737368a26	Add admin API for logging in as a user (#8617 )	4 years ago
Erik Johnston	427ede619f	Add metrics for tracking 3PID /requestToken requests. (#8712 ) The main use case is to see how many requests are being made, and how many are second/third/etc attempts. If there are large number of retries then that likely indicates a delivery problem.	4 years ago
Dirk Klimpel	c3119d1536	Add an admin API for users' media statistics (#8700 ) Add `GET /_synapse/admin/v1/statistics/users/media` to get statisics about local media usage by users. Related to #6094 It is the first API for statistics. Goal is to avoid/reduce usage of sql queries like [Wiki analyzing Synapse](https://github.com/matrix-org/synapse/wiki/SQL-for-analyzing-Synapse-PostgreSQL-database-stats) Signed-off-by: Dirk Klimpel dirk@klimpel.org	4 years ago
Dirk Klimpel	e4676bd877	Add `displayname` to Shared-Secret Registration for admins (#8722 ) Add `displayname` to Shared-Secret Registration for admins to `POST /_synapse/admin/v1/register`	4 years ago
Erik Johnston	46f4be94b4	Fix race for concurrent downloads of remote media. (#8682 ) Fixes #6755	4 years ago
Dirk Klimpel	2239813278	Add an admin APIs to allow server admins to list users' pushers (#8610 ) Add an admin API `GET /_synapse/admin/v1/users/<user_id>/pushers` like https://matrix.org/docs/spec/client_server/latest#get-matrix-client-r0-pushers	4 years ago
Dirk Klimpel	9b7c28283a	Add admin API to list users' local media (#8647 ) Add admin API `GET /_synapse/admin/v1/users/<user_id>/media` to get information of users' uploaded files.	4 years ago
Dirk Klimpel	66e6801c3e	Split admin API for reported events into a detail and a list view (#8539 ) Split admin API for reported events in detail und list view. API was introduced with #8217 in synapse v.1.21.0. It makes the list (`GET /_synapse/admin/v1/event_reports`) less complex and provides a better overview. The details can be queried with: `GET /_synapse/admin/v1/event_reports/<report_id>`. It is similar to room and users API. It is a kind of regression in `GET /_synapse/admin/v1/event_reports`. `event_json` was removed. But the api was introduced one version before and it is an admin API (not under spec). Signed-off-by: Dirk Klimpel dirk@klimpel.org	4 years ago
Dirk Klimpel	49d72dea2a	Add an admin api to delete local media. (#8519 ) Related to: #6459, #3479 Add `DELETE /_synapse/admin/v1/media/<server_name>/<media_id>` to delete a single file from server.	4 years ago
Dirk Klimpel	4ac3a8c5dc	Fix a bug in the joined_rooms admin API (#8643 ) If the user was not in any rooms then the API returned the same error as if the user did not exist.	4 years ago
Dirk Klimpel	913f8a06e4	Add field `total` to device list in admin API (#8644 )	4 years ago
Patrick Cloke	514a240aed	Remove unused OPTIONS handlers. (#8621 ) The handling of OPTIONS requests was consolidated in #7534, but the endpoint specific handlers were not removed.	4 years ago
Patrick Cloke	8f27b7fde1	Expose the experimental appservice login flow to clients. (#8504 )	4 years ago
Aaron Raimist	ec606ea9e3	Add correct M_BAD_JSON error code to /profile/{userId}/displayname (#8517 ) Fixes #8029	4 years ago
Patrick Cloke	c9c0ad5e20	Remove the deprecated Handlers object (#8494 ) All handlers now available via get_*_handler() methods on the HomeServer.	4 years ago
Hubert Chathi	4cb44a1585	Add support for MSC2697: Dehydrated devices (#8380 ) This allows a user to store an offline device on the server and then restore it at a subsequent login.	4 years ago
Hubert Chathi	3cd78bbe9e	Add support for MSC2732: olm fallback keys (#8312 )	4 years ago
Andrew Morgan	3e58ce72b4	Don't bother responding to client requests that have already disconnected (#8465 ) This PR ports the quick fix from https://github.com/matrix-org/synapse/pull/2796 to further methods which handle media, URL preview and `/key/v2/server` requests. This prevents a harmless `ERROR` that comes up in the logs when we were unable to respond to a client request when the client had already disconnected. In this case we simply bail out if the client has already done so. This is the 'simple fix' as suggested by https://github.com/matrix-org/synapse/issues/5304#issuecomment-574740003. Fixes https://github.com/matrix-org/synapse/issues/6700 Fixes https://github.com/matrix-org/synapse/issues/5304	4 years ago
Richard van der Hoff	f31f8e6319	Remove stream ordering from Metadata dict (#8452 ) There's no need for it to be in the dict as well as the events table. Instead, we store it in a separate attribute in the EventInternalMetadata object, and populate that on load. This means that we can rely on it being correctly populated for any event which has been persited to the database.	4 years ago
Richard van der Hoff	73d93039ff	Fix bug in remote thumbnail search (#8438 ) #7124 changed the behaviour of remote thumbnails so that the thumbnailing method was included in the filename of the thumbnail. To support existing files, it included a fallback so that we would check the old filename if the new filename didn't exist. Unfortunately, it didn't apply this logic to storage providers, so any thumbnails stored on such a storage provider was broken.	4 years ago
Patrick Cloke	34ff8da83b	Convert additional templates to Jinja (#8444 ) This converts a few more of our inline HTML templates to Jinja. This is somewhat part of #7280 and should make it a bit easier to customize these in the future.	4 years ago
Patrick Cloke	61aaf36a1c	Do not expose the experimental appservice login flow to clients. (#8440 )	4 years ago

1 2 3 4 5 ...

1928 Commits (bce0c91d9a89097c94d687aadfed9b4ebbdcc75d)