1168 Commits (eafd103fc70bc7d479bf80271b4f03144424d5fa)

Author	SHA1	Message	Date
Andrew Morgan	225c165087	Allow expired accounts to logout (#7443)	5 years ago
Patrick Cloke	5d64fefd6c	Do not validate that the client dict is stable during UI Auth. (#7483) ... This backs out some of the validation for the client dictionary and logs if this changes during a user interactive authentication session instead.	5 years ago
Patrick Cloke	0ad6d28b0d	Rework UI Auth session validation for registration (#7455) ... Be less strict about validation of UI authentication sessions during registration to match client expecations.	5 years ago
Quentin Gliech	616af44137	Implement OpenID Connect-based login (#7256)	5 years ago
Patrick Cloke	627b0f5f27	Persist user interactive authentication sessions (#7302) ... By persisting the user interactive authentication sessions to the database, this fixes situations where a user hits different works throughout their auth session and also allows sessions to persist through restarts of Synapse.	5 years ago
Brendan Abolivier	2e3b9a0fcb	Revert "Revert "Merge pull request #7315 from matrix-org/babolivier/request_token"" ... This reverts commit 1adf6a5587.	5 years ago
Brendan Abolivier	1adf6a5587	Revert "Merge pull request #7315 from matrix-org/babolivier/request_token" ... This reverts commit 6f4319368b, reversing changes made to 0d775fcc2d.	5 years ago
Brendan Abolivier	69ad7cc13b	Config option to inhibit 3PID errors on /requestToken ... Adds a request_token_inhibit_errors configuration flag (disabled by default) which, if enabled, change the behaviour of all /requestToken endpoints so that they return a 200 and a fake sid if the 3PID was/was not found associated with an account (depending on the endpoint), instead of an error. Co-Authored-By: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>	5 years ago
Richard van der Hoff	974c0d726a	Support GET account_data requests on a worker (#7311)	5 years ago
Patrick Cloke	054c231e58	Use a template for the SSO success page to allow for customization. (#7279)	5 years ago
Andrew Morgan	b21000a44f	Improve error responses when a remote server doesn't allow you to access its public rooms list (#6899)	5 years ago
Patrick Cloke	694d8bed0e	Support CAS in UI Auth flows. (#7186)	5 years ago
Patrick Cloke	b9930d24a0	Support SAML in the user interactive authentication workflow. (#7102)	5 years ago
Dirk Klimpel	8327eb9280	Add options to prevent users from changing their profile. (#7096)	5 years ago
Andrew Morgan	12aa5a7fa7	Ensure is_verified on /_matrix/client/r0/room_keys/keys is a boolean (#7150)	5 years ago
Patrick Cloke	fa4f12102d	Refactor the CAS code (move the logic out of the REST layer to a handler) (#7136)	5 years ago
Dirk Klimpel	e8e2ddb60a	Allow server admins to define and enforce a password policy (MSC2000). (#7118)	5 years ago
Patrick Cloke	1c1242acba	Validate that the session is not modified during UI-Auth (#7068)	5 years ago
Naugrimm	1fcf9c6f95	Fix CAS redirect url (#6634) ... Build the same service URL when requesting the CAS ticket and when calling the proxyValidate URL.	5 years ago
Patrick Cloke	477c4f5b1c	Clean-up some auth/login REST code (#7115)	5 years ago
Patrick Cloke	88b41986db	Add an option to the set password API to choose whether to logout other devices. (#7085)	5 years ago
Patrick Cloke	60724c46b7	Remove special casing of `m.room.aliases` events (#7034)	5 years ago
Richard van der Hoff	6a35046363	Revert "Add options to disable setting profile info for prevent changes. (#7053)" ... This reverts commit 54dd28621b, reversing changes made to 6640460d05.	5 years ago
dklimpel	885134529f	updates after review	5 years ago
dklimpel	99bbe177b6	add disable_3pid_changes	5 years ago
Brendan Abolivier	65c73cdfec	Factor out complete_sso_login and expose it to the Module API	5 years ago
Richard van der Hoff	b68041df3d	Add a whitelist for the SSO confirmation step.	5 years ago
Brendan Abolivier	b2bd54a2e3	Add a confirmation step to the SSO login flow	5 years ago
Andrew Morgan	8c75b621bf	Ensure 'deactivated' parameter is a boolean on user admin API, Fix error handling of call to deactivate user (#6990)	5 years ago
Patrick Cloke	509e381afa	Clarify list/set/dict/tuple comprehensions and enforce via flake8 (#6957) ... Ensure good comprehension hygiene using flake8-comprehensions.	5 years ago
Richard van der Hoff	880aaac1d8	Move MSC2432 stuff onto unstable prefix (#6948) ... it's not in the spec yet, so needs to be unstable. Also add a feature flag for it. Also add a test for admin users.	5 years ago
Richard van der Hoff	a0a1fd0bec	Add `allow_departed_users` param to `check_in_room_or_world_readable` ... ... and set it everywhere it's called. while we're here, rename it for consistency with `check_user_in_room` (and to help check that I haven't missed any instances)	5 years ago
Richard van der Hoff	adfaea8c69	Implement GET /_matrix/client/r0/rooms/{roomId}/aliases (#6939) ... per matrix-org/matrix-doc#2432	5 years ago
Aaron Raimist	dc3f998706	Remove m.lazy_load_members from unstable features since it is in CS r0.5.0 (#6877) ... Fixes #5528	5 years ago
Richard van der Hoff	184303b865	MSC2260: Block direct sends of m.room.aliases events (#6794) ... as per MSC2260	5 years ago
Erik Johnston	8df862e45d	Add `rooms.room_version` column (#6729) ... This is so that we don't have to rely on pulling it out from `current_state_events` table.	5 years ago
Andrew Morgan	9f7aaf90b5	Validate client_secret parameter (#6767)	5 years ago
Andrew Morgan	90a28fb475	Admin API to list, filter and sort rooms (#6720)	5 years ago
Erik Johnston	b0a66ab83c	Fixup synapse.rest to pass mypy (#6732)	5 years ago
Erik Johnston	74b74462f1	Fix `/events/:event_id` deprecated API. (#6731)	5 years ago
Neil Johnson	38e0e59f42	Add org.matrix.e2e_cross_signing to unstable_features in /versions as per MSC1756 (#6712)	5 years ago
Andrew Morgan	edc244eec4	Remove duplicate session check in web fallback servlet (#6702)	5 years ago
Richard van der Hoff	d6752ce5da	Clean up startup for the pusher (#6558) ... * Remove redundant python2 support code `str.decode()` doesn't exist on python3, so presumably this code was doing nothing * Filter out pushers with corrupt data When we get a row with unparsable json, drop the row, rather than returning a row with null `data`, which will then cause an explosion later on. * Improve logging when we can't start a pusher Log the ID to help us understand the problem * Make email pusher setup more robust We know we'll have a `data` member, since that comes from the database. What we *don't* know is if that is a dict, and if that has a `brand` member, and if that member is a string.	5 years ago
Erik Johnston	72acca6a32	Back out change preventing setting null avatar URLs	5 years ago
Andrew Morgan	5e8abe9013	Better errors regarding changing avatar_url (#6497)	5 years ago
Erik Johnston	9c41ba4c5f	Port rest.client.v2	5 years ago
Erik Johnston	1a0997bbd5	Port rest/v1 to async/await	5 years ago
Andrew Morgan	23ea572125	Add User-Interactive Auth to /account/3pid/add (#6119)	5 years ago
Erik Johnston	69d8fb83c6	MSC2367 Allow reason field on all member events	5 years ago
Hubert Chathi	0d27aba900	add etag and count to key backup endpoints (#5858)	5 years ago