matrix-org

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Quentin Gliech fe1daad672 Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986) ... This simplifies the access token verification logic by removing the `rights` parameter which was only ever used for the unsubscribe link in email notifications. The latter has been moved under the `/_synapse` namespace, since it is not a standard API. This also makes the email verification link more secure, by embedding the app_id and pushkey in the macaroon and verifying it. This prevents the user from tampering the query parameters of that unsubscribe link. Macaroon generation is refactored: - Centralised all macaroon generation and verification logic to the `MacaroonGenerator` - Moved to `synapse.utils` - Changed the constructor to require only a `Clock`, hostname, and a secret key (instead of a full `Homeserver`). - Added tests for all methods.		2 years ago
..
_scripts	Replace noop background updates with DELETE. (#12954)	2 years ago
api	Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986)	2 years ago
app	Fix Synapse git info missing in version strings (#12973)	3 years ago
appservice	Remove remaining bits of groups code. (#12936)	3 years ago
config	Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986)	2 years ago
crypto	Bump `black` and `click` versions (#12320)	3 years ago
events	Uniformize spam-checker API, part 4: port other spam-checker callbacks to return `Union[Allow, Codes]`. (#12857)	2 years ago
federation	Stop depending on `room_id` to be returned for children state in the hierarchy response. (#12991)	2 years ago
handlers	Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986)	2 years ago
http	Synapse 1.60.0rc2 (2022-05-27)	3 years ago
logging	Easy type hints in synapse.logging.opentracing (#12894)	3 years ago
metrics	Fix Synapse git info missing in version strings (#12973)	3 years ago
module_api	Uniformize spam-checker API, part 4: port other spam-checker callbacks to return `Union[Allow, Codes]`. (#12857)	2 years ago
push	Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986)	2 years ago
replication	Remove groups replication code. (#12900)	3 years ago
res	Fix Jinja templating error when generating thumbnail URLs. (#12510)	3 years ago
rest	Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986)	2 years ago
server_notices	Decouple `synapse.api.auth_blocking.AuthBlocking` from `synapse.api.auth.Auth`. (#13021)	2 years ago
spam_checker_api	Fix import in module_api module and docs on the new check_event_for_spam signature (#12918)	3 years ago
state	Merge branch 'rav/simplify_event_auth_interface' into develop	2 years ago
static	Display an error page during failure of fallback UIA. (#10561)	3 years ago
storage	Replace noop background updates with DELETE. (#12954)	2 years ago
streams	Rework stream token to stop caring about groups. (#12897)	3 years ago
util	Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986)	2 years ago
__init__.py	Fix Synapse git info missing in version strings (#12973)	3 years ago
event_auth.py	Remove `room_version` param from `check_auth_rules_for_event`	2 years ago
notifier.py	Reduce the amount of state we pull from the DB (#12811)	3 years ago
py.typed	Mark Module API error imports as re-exported and mark Synapse as containing type annotations (#11054)	3 years ago
server.py	Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986)	2 years ago
types.py	Rework stream token to stop caring about groups. (#12897)	3 years ago
visibility.py	Fix 404 on `/sync` when the last event is a redaction of an unknown/purged event (#12905)	3 years ago