matrix-org

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Quentin Gliech fe1daad672 Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986) ... This simplifies the access token verification logic by removing the `rights` parameter which was only ever used for the unsubscribe link in email notifications. The latter has been moved under the `/_synapse` namespace, since it is not a standard API. This also makes the email verification link more secure, by embedding the app_id and pushkey in the macaroon and verifying it. This prevents the user from tampering the query parameters of that unsubscribe link. Macaroon generation is refactored: - Centralised all macaroon generation and verification logic to the `MacaroonGenerator` - Moved to `synapse.utils` - Changed the constructor to require only a `Clock`, hostname, and a secret key (instead of a full `Homeserver`). - Added tests for all methods.		2 years ago
..
__init__.py	Remove redundant "coding: utf-8" lines (#9786)	4 years ago
auth.py	Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986)	2 years ago
auth_blocking.py	Remove `HomeServer.get_datastore()` (#12031)	3 years ago
constants.py	Remove remaining bits of groups code. (#12936)	3 years ago
errors.py	Fix M_USER_ACCOUNT_SUSPENDED error code for spec compliance (#12923)	3 years ago
filtering.py	Additional constants for EDU types. (#12884)	3 years ago
presence.py	Add missing type hints to synapse.api. (#11109)	3 years ago
ratelimiting.py	Add missing type hints to synapse.api. (#11109)	3 years ago
room_versions.py	Add a new room version for MSC3787's knock+restricted join rule (#12623)	3 years ago
urls.py	Remove support for the webclient listener. (#11895)	3 years ago