Commit Graph

1209 Commits

Author SHA1 Message Date
Jason Volk
a6780697bd Add username claim from OAuth provider. (closes #287)
Signed-off-by: Jason Volk <jason@zemos.net>
2026-02-06 15:48:57 +00:00
Jason Volk
13a11ce097 Bump dependencies.
Signed-off-by: Jason Volk <jason@zemos.net>
2026-02-04 09:43:30 +00:00
dasha_uwu
76dbf4fcb5 Remove unnecessary report delay. 2026-02-03 06:28:31 +00:00
dasha_uwu
b79920a63b Allow .well-known/matrix/server with federation disabled. (closes #240) 2026-02-03 06:28:31 +00:00
dasha_uwu
024c08f795 Fix allow_room_admins_to_request_unredacted_events applying to server admins instead of room admins. 2026-02-01 05:01:59 +00:00
Jason Volk
0b864801f5 Use map of identity_provider to accommodate env var enumerations.
Signed-off-by: Jason Volk <jason@zemos.net>
2026-02-01 01:22:13 +00:00
Jason Volk
13ad2c7966 Fix m.tz identifier and bias to stable.
Bump Ruma; enable spec versions 1.12 and 1.15.

Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-30 21:53:52 +00:00
dasha_uwu
73eee626df Take stuff by ref in users service profile 2026-01-30 21:42:32 +00:00
Jason Volk
136c0f2682 Mitigate clippy::duration_suboptimal_units until 1.91 msrv upgrade.
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-28 05:58:05 +00:00
Jason Volk
7bc25ad1b1 Fix nightly clippy::unnecessary-sort-by.
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-28 04:50:31 +00:00
dasha_uwu
a1960553e9 Turn non-monotonic next_batch assert into error log and clamp. 2026-01-26 20:24:44 +00:00
dasha_uwu
56f3f5ea15 Limited use registration token support
Co-authored-by: Ginger <ginger@gingershaped.computer>
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-26 20:24:15 +00:00
dasha_uwu
3caab50e0d Minor rewrites 2026-01-26 19:28:56 +00:00
dasha_uwu
bb26b749ae Redacted event retention, implement MSC2815 2026-01-26 19:28:56 +00:00
dasha_uwu
0c9a3abb71 clippy allow -> expect 2026-01-26 19:28:56 +00:00
Jason Volk
6db87a4027 Implement associated multi-provider single-sign-on flow support. (#252)
Add experimental note for multi-provider flow. (#252)

Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-26 19:28:50 +00:00
Jason Volk
f048f87dac Split login_via_existing_session conf item to login_via_token.
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-24 08:19:41 +00:00
Jason Volk
48aa6035f6 Hoist room_version query to callers of get_auth_chain.
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-22 09:31:46 +00:00
Jason Volk
a0b98fa575 Misc debug and trace log tweaks.
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-22 09:31:46 +00:00
Jared L
0f547115af chore: fmt 2026-01-21 07:28:12 +11:00
Jared L
50e8fcc403 presence: simplify update surface 2026-01-21 06:23:12 +11:00
Jared L
2b32769649 presence: aggregate device updates 2026-01-21 06:23:12 +11:00
Jason Volk
106bba761e Use bounded condition for syncv3 notification count; asymmetric reset condition. (#261)
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-19 08:26:23 +00:00
dasha_uwu
3a9446bb9c Remove dead code
These check the origin which is already checked in router auth
2026-01-19 00:53:33 +00:00
June Strawberry
2f4d3c2851 fix some unused_crate_dependencies lint warns
Signed-off-by: June Strawberry <june@vern.cc>
2026-01-18 13:18:10 -05:00
June Strawberry
1b68588b84 enable match_same_arms lint
Signed-off-by: June Strawberry <june@vern.cc>
2026-01-18 13:10:05 -05:00
June Strawberry
04e66a03d3 fix and enable collapsible_if lint
Signed-off-by: June Strawberry <june@vern.cc>
2026-01-18 13:09:03 -05:00
Jason Volk
fb102f0e0a Add privileged support for SSO account associations. (#252)
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-18 15:59:02 +00:00
Jason Volk
b3f8118f0e Re-export itertools from tuwunel_core crate.
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-18 13:19:59 +00:00
Jason Volk
98f5ea203b Add simpler option to specify default identity_provider.
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-18 05:00:03 +00:00
dasha_uwu
e78bf21085 Introduce OptionFuture helpers
Optimize user directory searches
2026-01-17 06:54:24 +00:00
dasha_uwu
95121ad905 Add a config option to show all local users in user directory, closes #260 2026-01-17 06:44:34 +00:00
Jason Volk
dfb65d771f Add sso_default_provider_id option and defaulting behavior.
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-17 01:39:49 +00:00
Jason Volk
3426b824a0 Add EdDSA support to JWT login (fixes #258).
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-13 08:47:34 +00:00
dasha_uwu
d095a4fd3b Enable unused_async clippy lint 2026-01-13 07:42:43 +00:00
dasha_uwu
fd519ff7f1 Fix sliding sync not returning rooms the user is invited to 2026-01-13 07:42:43 +00:00
KuhnChris
76c09851ea Guard admin assignment/removal against empty filter 2026-01-13 07:42:43 +00:00
Jason Volk
bd0a0acf4a Add conditional for login flows; filter out SSO when no providers configured.
Signed-off-by: Jason Volk <jason@zemos.net>
2026-01-03 05:22:55 +00:00
Jason Volk
977f9e2e2e Fix deactivated user check misapplied to appservice user. (11309062a2)
Signed-off-by: Jason Volk <jason@zemos.net>
2025-12-28 21:59:29 +00:00
Jason Volk
432e6a2663 Fix serializing zero notification count in never-read room case.
Signed-off-by: Jason Volk <jason@zemos.net>
2025-12-28 05:17:29 +00:00
Jason Volk
14e7a001b9 Use abstracted UIAA call for login token route.
Signed-off-by: Jason Volk <jason@zemos.net>
2025-12-26 14:20:07 +00:00
Jason Volk
d56ee58a73 Fix SSO cookie deserialization for cases requiring allocated strings.
Signed-off-by: Jason Volk <jason@zemos.net>
2025-12-26 14:20:07 +00:00
Jason Volk
11309062a2 Implement SSO/OIDC support. (closes #7)
Signed-off-by: Jason Volk <jason@zemos.net>
2025-12-26 07:24:49 +00:00
Jason Volk
4150b917d8 Restructure full_register arguments with names and defaults.
Signed-off-by: Jason Volk <jason@zemos.net>
2025-12-23 02:55:32 +00:00
Jason Volk
dc9314de1f Fix missing validations for federation invites.
Signed-off-by: Jason Volk <jason@zemos.net>
2025-12-21 12:34:58 +00:00
dasha_uwu
7115fb2796 Refactor join, alias services
Split knock, user register from api into services

Fix autojoin not working with v12 rooms

Fix 'm.login.registration_token/validity' for reloaded registration tokens

Change join servers order

Move autojoin for ldap
2025-12-18 18:41:23 +00:00
Jason Volk
959c559bd8 Log all ruma handler results at trace level.
Signed-off-by: Jason Volk <jason@zemos.net>
2025-12-18 17:27:22 +00:00
dasha_uwu
0c7ba1dd5a Fix sync handling for appservices calling without device_id 2025-12-18 02:18:30 +00:00
dasha_uwu
b5f50c3fda Allow using OpenID userinfo endpoint with federation disabled, fixes #240
Even though it's in SS API this is not really related to federation, so
it makes sense to allow using this endpoint with allow_federation=false
2025-12-17 08:51:29 +00:00
yefim
085cdb30f4 Fix newly created LDAP users not added to auto-join-rooms 2025-12-17 06:53:06 +00:00