1168 Commits (eafd103fc70bc7d479bf80271b4f03144424d5fa)

Author	SHA1	Message	Date
Andrew Morgan	4765f0cfd9	Add m.id_access_token flag (#5930) ... Adds a flag to `/versions`' `unstable_features` section indicating that this Synapse understands what an `id_access_token` is, as per https://github.com/matrix-org/synapse/issues/5927#issuecomment-523566043 Fixes #5927	5 years ago
Manuel Stahl	0bab582fd6	Remove shared secret registration from client/r0/register endpoint ... This type of registration was probably never used. It only includes the user name in the HMAC but not the password. Shared secret registration is still available via client/r0/admin/register. Signed-off-by: Manuel Stahl <manuel.stahl@awesome-technologies.de>	5 years ago
Brendan Abolivier	1c5b8c6222	Revert "Add "require_consent" parameter for registration" ... This reverts commit 3320aaab3a.	5 years ago
Half-Shot	3320aaab3a	Add "require_consent" parameter for registration	5 years ago
Jorik Schellekens	9a6f2be572	Opentrace e2e keys (#5855) ... Add opentracing tags and logs for e2e keys	5 years ago
Hubert Chathi	7c3abc6572	apply PR review suggestions	5 years ago
Andrew Morgan	b13cac896d	Fix up password reset template config names (#5863) ... Fixes #5833 The emailconfig code was attempting to pull incorrect config file names. This corrects that, while also marking a difference between a config file variable that's a filepath versus a str containing HTML.	5 years ago
Andrew Morgan	edeae53221	Return 404 instead of 403 when retrieving an event without perms (#5798) ... Part of fixing matrix-org/sytest#652 Sytest PR: matrix-org/sytest#667	5 years ago
Brendan Abolivier	f25f638c35	Lint	5 years ago
Brendan Abolivier	a4a9ded4d0	Allow defining HTML templates to serve the user on account renewal	5 years ago
Hubert Chathi	c659b9f94f	allow uploading keys for cross-signing	5 years ago
Jorik Schellekens	cf2972c818	Fix servlet metric names (#5734) ... * Fix servlet metric names Co-Authored-By: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Remove redundant check * Cover all return paths	5 years ago
Amber Brown	4806651744	Replace returnValue with return (#5736)	5 years ago
Andrew Morgan	b2a382efdb	Remove the ability to query relations when the original event was redacted. (#5629) ... Fixes #5594 Forbid viewing relations on an event once it has been redacted.	5 years ago
Richard van der Hoff	0a4001eba1	Clean up exception handling for access_tokens (#5656) ... First of all, let's get rid of `TOKEN_NOT_FOUND_HTTP_STATUS`. It was a hack we did at one point when it was possible to return either a 403 or a 401 if the creds were missing. We always return a 401 in these cases now (thankfully), so it's not needed. Let's also stop abusing `AuthError` for these cases. Honestly they have nothing that relates them to the other places that `AuthError` is used, other than the fact that they are loosely under the 'Auth' banner. It makes no sense for them to share exception classes. Instead, let's add a couple of new exception classes: `InvalidClientTokenError` and `MissingClientTokenError`, for the `M_UNKNOWN_TOKEN` and `M_MISSING_TOKEN` cases respectively - and an `InvalidClientCredentialsError` base class for the two of them.	5 years ago
Andrew Morgan	f281714583	Don't bundle aggregations when retrieving the original event (#5654) ... A fix for PR #5626, which returned the original event content as part of a call to /relations. Only problem was that we were attempting to aggregate the relations on top of it when we did so. We now set bundle_aggregations to False in the get_event call. We also do this when pulling the relation events as well, because edits of edits are not something we'd like to support here.	5 years ago
Andrew Morgan	d88421ab03	Include the original event in /relations (#5626) ... When asking for the relations of an event, include the original event in the response. This will mostly be used for efficiently showing edit history, but could be useful in other circumstances.	5 years ago
Richard van der Hoff	824707383b	Remove access-token support from RegistrationHandler.register (#5641) ... Nothing uses this now, so we can remove the dead code, and clean up the API. Since we're changing the shape of the return value anyway, we take the opportunity to give the method a better name.	5 years ago
Richard van der Hoff	f9e99f9534	Factor out some redundant code in the login impl (#5639) ... * Factor out some redundant code in the login impl Also fixes a redundant access_token which was generated during jwt login. * changelog	5 years ago
Amber Brown	463b072b12	Move logging utilities out of the side drawer of util/ and into logging/ (#5606)	5 years ago
PauRE	948488e115	Fix JWT login with new users (#5586) ... Signed-off-by: Pau Rodriguez-Estivill <prodrigestivill@gmail.com>	5 years ago
PauRE	856ea04eb3	Fix JWT login (#5555) ... * Fix JWT login with register Signed-off-by: Pau Rodriguez-Estivill <prodrigestivill@gmail.com> * Add pyjwt conditional dependency Signed-off-by: Pau Rodriguez-Estivill <prodrigestivill@gmail.com> * Added changelog file Signed-off-by: Pau Rodriguez-Estivill <prodrigestivill@gmail.com> * Improved changelog description Signed-off-by: Pau Rodriguez-Estivill <prodrigestivill@gmail.com>	5 years ago
Richard van der Hoff	79b9d9076d	rename BaseSSORedirectServlet for consistency	5 years ago
Richard van der Hoff	3705322103	Move all the saml stuff out to a centralised handler	5 years ago
Brendan Abolivier	bfe84e051e	Split public rooms directory auth config in two	6 years ago
Amber Brown	32e7c9e7f2	Run Black. (#5482)	6 years ago
Erik Johnston	10383e6e6f	Change password reset links to /_matrix.	6 years ago
Andrew Morgan	2ddc13577c	Don't warn user about password reset disabling through config code (#5387) ... Moves the warning about password resets being disabled to the point where a user actually tries to reset their password. Is this an appropriate place for it to happen? Also removed the disabling of msisdn password resets when you don't have an email config, as that just doesn't make sense. Also change the error a user receives upon disabled passwords to specify that only email-based password reset is disabled.	6 years ago
Richard van der Hoff	426049247b	Code cleanups and simplifications. ... Also: share the saml client between redirect and response handlers.	6 years ago
Andrew Morgan	3719680ee4	Add ability to perform password reset via email without trusting the identity server (#5377) ... Sends password reset emails from the homeserver instead of proxying to the identity server. This is now the default behaviour for security reasons. If you wish to continue proxying password reset requests to the identity server you must now enable the email.trust_identity_server_for_password_resets option. This PR is a culmination of 3 smaller PRs which have each been separately reviewed: * #5308 * #5345 * #5368	6 years ago
Brendan Abolivier	fe13bd52ac	Don't check whether the user's account is expired on /send_mail requests	6 years ago
Neil Johnson	94f6c674df	Neilj/add r0.5 to versions (#5360) ... * Update _matrix/client/versions to reference support for r0.5.0	6 years ago
Amber Brown	b2b90b7d34	Hawkowl/fix missing auth (#5328)	6 years ago
Amber Brown	2889b05554	Unify v1 and v2 REST client APIs (#5226)	6 years ago
Alexander Trost	dc3e586938	SAML2 Improvements and redirect stuff ... Signed-off-by: Alexander Trost <galexrt@googlemail.com>	6 years ago
Eisha Chen-yen-su	8824325b82	Fix ignored filter field in `/messages` endpoint ... This fixes a bug which were causing the "event_format" field to be ignored in the filter of requests to the `/messages` endpoint of the CS API. Signed-off-by: Eisha Chen-yen-su <chenyensu0@gmail.com>	6 years ago
Aaron Raimist	123918b739	Lint ... Signed-off-by: Aaron Raimist <aaron@raim.ist>	6 years ago
Amber Brown	532b825ed9	Serve CAS login over r0 (#5286)	6 years ago
Aaron Raimist	119c9c10b0	Get rid of try except ... Signed-off-by: Aaron Raimist <aaron@raim.ist>	6 years ago
Aaron Raimist	56f07d980a	Show correct error when logging out and access token is missing ... Signed-off-by: Aaron Raimist <aaron@raim.ist>	6 years ago
Andrew Morgan	6368150a74	Add config option for setting homeserver's default room version (#5223) ... Replaces DEFAULT_ROOM_VERSION constant with a method that first checks the config, then returns a hardcoded value if the option is not present. That hardcoded value is now located in the server.py config file.	6 years ago
Erik Johnston	de7672b78f	Don't bundle events in /sync or /events ... As we'll send down the annotations too anyway, so this just ends up confusing clients.	6 years ago
Erik Johnston	7a7eba8302	Move parsing of tokens out of storage layer	6 years ago
Erik Johnston	95f3fcda3c	Check that event is visible in new APIs	6 years ago
Erik Johnston	a0603523d2	Add aggregations API	6 years ago
Amber Brown	f1e5b41388	Make all the rate limiting options more consistent (#5181)	6 years ago
Richard van der Hoff	5f027a315f	Drop support for v2_alpha API prefix (#5190)	6 years ago
Erik Johnston	e6459c26b4	Actually implement idempotency	6 years ago
Erik Johnston	b50641e357	Add simple pagination API	6 years ago
Erik Johnston	efe3c7977a	Add simple send_relation API and track in DB	6 years ago