1134 Commits (eccc49d7554d1fab001e1fefb0fda8ffb254b630)

Author	SHA1	Message	Date
Richard van der Hoff	70ea9593ff	example systemd config: propagate reloads to units (#9463) ... It should be possible to reload `synapse.target` to have the reload propagate to all the synapse units.	4 years ago
Andrew Morgan	e22b71810e	Clean up the user directory sample config section (#9385) ... The user directory sample config section was a little messy, and didn't adhere to our [recommended config format guidelines](https://github.com/matrix-org/synapse/blob/develop/docs/code_style.md#configuration-file-format). This PR cleans that up a bit.	4 years ago
Andrew Morgan	13e9029f44	Add a config option to prioritise local users in user directory search results (#9383) ... This PR adds a homeserver config option, `user_directory.prefer_local_users`, that when enabled will show local users higher in user directory search results than remote users. This option is off by default. Note that turning this on doesn't necessarily mean that remote users will always be put below local users, but they should be assuming all other ranking factors (search query match, profile information present etc) are identical. This is useful for, say, University networks that are openly federating, but want to prioritise local students and staff in the user directory over other random users.	4 years ago
AndrewFerr	9bc74743d5	Add configs to make profile data more private (#9203) ... Add off-by-default configuration settings to: - disable putting an invitee's profile info in invite events - disable profile lookup via federation Signed-off-by: Andrew Ferrazzutti <fair@miscworks.net>	4 years ago
Rishabh Arya	e17553e185	Parse ui_auth.session_timeout as a duration (instead of treating it as ms) (#9426)	4 years ago
David Vo	bb2577f6b7	Add http2 to the nginx example config (#9390)	4 years ago
Richard van der Hoff	626afd7e89	Revert "Update workers.md" ... This reverts commit a8878960c0.	4 years ago
Dirk Klimpel	c8d9383cfb	Add the shadow-banning status to the display user admin API. (#9400)	4 years ago
Richard van der Hoff	53f1c4da81	Update workers.md	4 years ago
Richard van der Hoff	a8878960c0	Update workers.md ... tiny typo in sso paths	4 years ago
Eric Eastwood	0a00b7ff14	Update black, and run auto formatting over the codebase (#9381) ... - Update black version to the latest - Run black auto formatting over the codebase - Run autoformatting according to [`docs/code_style.md `](80d6dc9783/docs/code_style.md) - Update `code_style.md` docs around installing black to use the correct version	4 years ago
Marcus	5636e597c3	Fix OIDC gitiea redirect URL. (#9404) ... Fixes a "conflict" from 846b9d3df0 and d1f13c7485.	4 years ago
Erik Johnston	ddfdf94506	Document that pusher instances are shardable (#9407)	4 years ago
Andrew Morgan	ff40c8099d	Fix sample config ... Just a small change missed in 7950aa8a27.	4 years ago
Patrick Cloke	e40d88cff3	Backout changes for automatically calculating the public baseurl. (#9313) ... This breaks some people's configurations (if their Client-Server API is not accessed via port 443).	4 years ago
Thomas Mortagne	5f716fa777	Add XWiki OIDC provider example. (#9324)	4 years ago
Erik Johnston	7e8083eb48	Add check_media_file_for_spam spam checker hook	4 years ago
dykstranet	982d9eb211	Correct `matrix-synapse.service` reference in TURN howto docs. (#9308)	4 years ago
Patrick Cloke	2ab6e67ab7	Fix escaping of braces in OIDC sample config. (#9317) ... This fixes the Jinja2 templates for the mapping provider.	4 years ago
Patrick Cloke	afa18f1baa	Clarify documentation about escaping URLs in templates. (#9310)	4 years ago
dykstranet	e4cdecb310	config: Add detail to auto_join_rooms comment (#9291) ... config: Add detail to auto_join_rooms comment Signed-off-by: Gary Dykstra <gary@dykstranet.com>	4 years ago
Patrick Cloke	4ca054a4ea	Convert blacklisted IPv4 addresses to compatible IPv6 addresses. (#9240) ... Also add a few more IP ranges to the default blacklist.	4 years ago
Travis Ralston	b60bb28bbc	Add an admin API to get the current room state (#9168) ... This could arguably replace the existing admin API for `/members`, however that is out of scope of this change. This sort of endpoint is ideal for moderation use cases as well as other applications, such as needing to retrieve various bits of information about a room to perform a task (like syncing power levels between two places). This endpoint exposes nothing more than an admin would be able to access with a `select *` query on their database.	4 years ago
Richard van der Hoff	8f75bf1df7	Put SAML callback URI under /_synapse/client. (#9289)	4 years ago
Richard van der Hoff	846b9d3df0	Put OIDC callback URI under /_synapse/client. (#9288)	4 years ago
Oliver Hanikel	d1f13c7485	Add an OpenID example config for Gitea. (#9134)	4 years ago
Richard van der Hoff	c543bf87ec	Collect terms consent from the user during SSO registration (#9276)	4 years ago
Richard van der Hoff	e5d70c8a82	Improve styling and wording of SSO UIA templates (#9286) ... fixes #9171	4 years ago
Richard van der Hoff	4167494c90	Replace username picker with a template (#9275) ... There's some prelimiary work here to pull out the construction of a jinja environment to a separate function. I wanted to load the template at display time rather than load time, so that it's easy to update on the fly. Honestly, I think we should do this with all our templates: the risk of ending up with malformed templates is far outweighed by the improved turnaround time for an admin trying to update them.	4 years ago
Richard van der Hoff	8aed29dc61	Improve styling and wording of SSO redirect confirm template (#9272)	4 years ago
Richard van der Hoff	9c715a5f19	Fix SSO on workers (#9271) ... Fixes #8966. * Factor out build_synapse_client_resource_tree Start a function which will mount resources common to all workers. * Move sso init into build_synapse_client_resource_tree ... so that we don't have to do it for each worker * Fix SSO-login-via-a-worker Expose the SSO login endpoints on workers, like the documentation says. * Update workers config for new endpoints Add documentation for endpoints recently added (#8942, #9017, #9262) * remove submit_token from workers endpoints list this *doesn't* work on workers (yet). * changelog * Add a comment about the odd path for SAML2Resource	4 years ago
Erik Johnston	f2c1560eca	Ratelimit invites by room and target user (#9258)	4 years ago
Erik Johnston	4b73488e81	Ratelimit 3PID /requestToken API (#9238)	4 years ago
David Teller	fe52dae6bd	FIXUP: Documenting /_synapse/admin/v1/rooms/<room_id>/context/<event_id>	4 years ago
Richard van der Hoff	34efb4c604	Add notes on integrating with Facebook for SSO login. (#9244)	4 years ago
Richard van der Hoff	a083aea396	Add 'brand' field to MSC2858 response (#9242) ... We've decided to add a 'brand' field to help clients decide how to style the buttons. Also, fix up the allowed characters for idp_id, while I'm in the area.	4 years ago
Richard van der Hoff	869667760f	Support for scraping email addresses from OIDC providers (#9245)	4 years ago
Erik Johnston	93b61589b0	Add a note to changelog about redis usage (#9227)	4 years ago
Patrick Cloke	26837d5dbe	Do not require the CAS service URL setting (use public_baseurl instead). (#9199) ... The current configuration is handled for backwards compatibility, but is considered deprecated.	4 years ago
Patrick Cloke	4a55d267ee	Add an admin API for shadow-banning users. (#9209) ... This expands the current shadow-banning feature to be usable via the admin API and adds documentation for it. A shadow-banned users receives successful responses to their client-server API requests, but the events are not propagated into rooms. Shadow-banning a user should be used as a tool of last resort and may lead to confusing or broken behaviour for the client.	4 years ago
Jason Robinson	930ba00971	Add depth and received_ts to forward_extremities admin API response ... Also add a warning on the admin API documentation. Signed-off-by: Jason Robinson <jasonr@matrix.org>	4 years ago
Richard van der Hoff	7447f19702	Prefix idp_id with "oidc-" (#9189) ... ... to avoid clashes with other SSO mechanisms	4 years ago
Richard van der Hoff	0cd2938bc8	Support icons for Identity Providers (#9154)	4 years ago
rht	a5b9c87ac6	docs: Add link to Matrix VoIP tester for turn-howto (#9135) ... Signed-off-by: rht <rhtbot@protonmail.com>	4 years ago
Richard van der Hoff	fa50e4bf4d	Give `public_baseurl` a default value (#9159)	4 years ago
Patrick Cloke	de45bf5b5b	Quote pip install with brackets to avoid shell interpretation. (#9151)	4 years ago
Matthew Hodgson	883d4e6f2b	link to the scalability blog post from workers.md	4 years ago
Richard van der Hoff	9de6b94117	Land support for multiple OIDC providers (#9110) ... This is the final step for supporting multiple OIDC providers concurrently. First of all, we reorganise the config so that you can specify a list of OIDC providers, instead of a single one. Before: oidc_config: enabled: true issuer: "https://oidc_provider" # etc After: oidc_providers: - idp_id: prov1 issuer: "https://oidc_provider" - idp_id: prov2 issuer: "https://another_oidc_provider" The old format is still grandfathered in. With that done, it's then simply a matter of having OidcHandler instantiate a new OidcProvider for each configured provider.	4 years ago
Patrick Cloke	3e4cdfe5d9	Add an admin API endpoint to protect media. (#9086) ... Protecting media stops it from being quarantined when e.g. all media in a room is quarantined. This is useful for sticker packs and other media that is uploaded by server administrators, but used by many people.	4 years ago
Richard van der Hoff	5310808d3b	Give the user a better error when they present bad SSO creds ... If a user tries to do UI Auth via SSO, but uses the wrong account on the SSO IdP, try to give them a better error. Previously, the UIA would claim to be successful, but then the operation in question would simply fail with "auth fail". Instead, serve up an error page which explains the failure.	4 years ago