1762 Commits (eafd103fc70bc7d479bf80271b4f03144424d5fa)

Author	SHA1	Message	Date
Andrew Morgan	225c165087	Allow expired accounts to logout (#7443)	5 years ago
Patrick Cloke	5d64fefd6c	Do not validate that the client dict is stable during UI Auth. (#7483) ... This backs out some of the validation for the client dictionary and logs if this changes during a user interactive authentication session instead.	5 years ago
Patrick Cloke	0ad6d28b0d	Rework UI Auth session validation for registration (#7455) ... Be less strict about validation of UI authentication sessions during registration to match client expecations.	5 years ago
Quentin Gliech	616af44137	Implement OpenID Connect-based login (#7256)	5 years ago
Manuel Stahl	a4a5ec4096	Add room details admin endpoint (#7317)	5 years ago
Patrick Cloke	627b0f5f27	Persist user interactive authentication sessions (#7302) ... By persisting the user interactive authentication sessions to the database, this fixes situations where a user hits different works throughout their auth session and also allows sessions to persist through restarts of Synapse.	5 years ago
Manuel Stahl	04dd7d182d	Return total number of users and profile attributes in admin users endpoint (#6881) ... Signed-off-by: Manuel Stahl <manuel.stahl@awesome-technologies.de>	5 years ago
Brendan Abolivier	2e3b9a0fcb	Revert "Revert "Merge pull request #7315 from matrix-org/babolivier/request_token"" ... This reverts commit 1adf6a5587.	5 years ago
Brendan Abolivier	1adf6a5587	Revert "Merge pull request #7315 from matrix-org/babolivier/request_token" ... This reverts commit 6f4319368b, reversing changes made to 0d775fcc2d.	5 years ago
Brendan Abolivier	69ad7cc13b	Config option to inhibit 3PID errors on /requestToken ... Adds a request_token_inhibit_errors configuration flag (disabled by default) which, if enabled, change the behaviour of all /requestToken endpoints so that they return a 200 and a fake sid if the 3PID was/was not found associated with an account (depending on the endpoint), instead of an error. Co-Authored-By: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>	5 years ago
Dirk Klimpel	6b6685db9f	Extend room admin api with additional attributes (#7225)	5 years ago
Michael Kaye	5308239d5d	Reduce logging verbosity of URL cache cleanup. (#7295)	5 years ago
Richard van der Hoff	974c0d726a	Support GET account_data requests on a worker (#7311)	5 years ago
Patrick Cloke	054c231e58	Use a template for the SSO success page to allow for customization. (#7279)	5 years ago
Andrew Morgan	a48138784e	Allow specifying the value of Accept-Language header for URL previews (#7265)	5 years ago
Andrew Morgan	b21000a44f	Improve error responses when a remote server doesn't allow you to access its public rooms list (#6899)	5 years ago
Patrick Cloke	694d8bed0e	Support CAS in UI Auth flows. (#7186)	5 years ago
Patrick Cloke	b9930d24a0	Support SAML in the user interactive authentication workflow. (#7102)	5 years ago
Dirk Klimpel	fb69690761	Admin API to join users to a room. (#7051)	5 years ago
Dirk Klimpel	8327eb9280	Add options to prevent users from changing their profile. (#7096)	5 years ago
Andrew Morgan	12aa5a7fa7	Ensure is_verified on /_matrix/client/r0/room_keys/keys is a boolean (#7150)	5 years ago
Patrick Cloke	fa4f12102d	Refactor the CAS code (move the logic out of the REST layer to a handler) (#7136)	5 years ago
Dirk Klimpel	e8e2ddb60a	Allow server admins to define and enforce a password policy (MSC2000). (#7118)	5 years ago
Patrick Cloke	1c1242acba	Validate that the session is not modified during UI-Auth (#7068)	5 years ago
Naugrimm	1fcf9c6f95	Fix CAS redirect url (#6634) ... Build the same service URL when requesting the CAS ticket and when calling the proxyValidate URL.	5 years ago
Dionysis Grigoropoulos	96071eea8f	Set Referrer-Policy to no-referrer for media (#7009)	5 years ago
Patrick Cloke	477c4f5b1c	Clean-up some auth/login REST code (#7115)	5 years ago
Patrick Cloke	caec7d4fa0	Convert some of the media REST code to async/await (#7110)	5 years ago
Patrick Cloke	88b41986db	Add an option to the set password API to choose whether to logout other devices. (#7085)	5 years ago
The Stranjer	5e477c1deb	Set charset to utf-8 when adding headers for certain text content types (#7044) ... Fixes #7043	5 years ago
Patrick Cloke	60724c46b7	Remove special casing of `m.room.aliases` events (#7034)	5 years ago
Richard van der Hoff	6a35046363	Revert "Add options to disable setting profile info for prevent changes. (#7053)" ... This reverts commit 54dd28621b, reversing changes made to 6640460d05.	5 years ago
Brendan Abolivier	6b0efe73e2	SAML2: render a comprehensible error page if something goes wrong ... If an error happened while processing a SAML AuthN response, or a client ends up doing a `GET` request to `/authn_response`, then render a customisable error page rather than a confusing error.	5 years ago
dklimpel	885134529f	updates after review	5 years ago
dklimpel	99bbe177b6	add disable_3pid_changes	5 years ago
Patrick Cloke	87972f07e5	Convert remote key resource REST layer to async/await. (#7020)	5 years ago
Brendan Abolivier	65c73cdfec	Factor out complete_sso_login and expose it to the Module API	5 years ago
Richard van der Hoff	b68041df3d	Add a whitelist for the SSO confirmation step.	5 years ago
Brendan Abolivier	b2bd54a2e3	Add a confirmation step to the SSO login flow	5 years ago
Dirk Klimpel	bbeee33d63	Fixed set a user as an admin with the new API (#6928) ... Fix #6910	5 years ago
Dirk Klimpel	9b06d8f8a6	Fixed set a user as an admin with the new API (#6928) ... Fix #6910	5 years ago
Andrew Morgan	8c75b621bf	Ensure 'deactivated' parameter is a boolean on user admin API, Fix error handling of call to deactivate user (#6990)	5 years ago
Patrick Cloke	509e381afa	Clarify list/set/dict/tuple comprehensions and enforce via flake8 (#6957) ... Ensure good comprehension hygiene using flake8-comprehensions.	5 years ago
Richard van der Hoff	880aaac1d8	Move MSC2432 stuff onto unstable prefix (#6948) ... it's not in the spec yet, so needs to be unstable. Also add a feature flag for it. Also add a test for admin users.	5 years ago
Richard van der Hoff	a0a1fd0bec	Add `allow_departed_users` param to `check_in_room_or_world_readable` ... ... and set it everywhere it's called. while we're here, rename it for consistency with `check_user_in_room` (and to help check that I haven't missed any instances)	5 years ago
Richard van der Hoff	adfaea8c69	Implement GET /_matrix/client/r0/rooms/{roomId}/aliases (#6939) ... per matrix-org/matrix-doc#2432	5 years ago
Aaron Raimist	dc3f998706	Remove m.lazy_load_members from unstable features since it is in CS r0.5.0 (#6877) ... Fixes #5528	5 years ago
Andrew Morgan	d8994942f2	Return a 404 for admin api user lookup if user not found (#6901)	5 years ago
Dirk Klimpel	56ca93ef59	Admin api to add an email address (#6789)	5 years ago
Andrew Morgan	370080531e	Allow URL-encoded user IDs on user admin api paths (#6825)	5 years ago