studio/tuwunel
2
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity
6,181 Commits 2 Branches 0 Tags
d15b30de64a61422b5937202353b31daaf61dc34
Commit Graph

6181 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Jason Volk
4fe14c4346 Merge remote-tracking branch 'wuyukai0403/patch-1' 2026-02-16 10:58:50 +00:00
dasha_uwu
488bd62016 Provide correct zero ClientInfo with unix sockets, fixes #310 2026-02-16 07:46:11 +00:00
dasha_uwu
e48101a6a6 Adverstise support for stable MSC3827, fixes room type search in element web 2026-02-16 07:46:11 +00:00
Jason Volk
a7989a9906 Fix str-to-string lints. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-16 07:46:11 +00:00
Denys Bezmenov
6bed0d38f4 Fix SSO/LDAP user origin overwritten by set_password 
When `create()` registers a user with `origin: Some("sso")`, it correctly
sets `userid_origin = "sso"` then calls `set_password()`. However,
`set_password()` unconditionally overwrites `userid_origin` to "password"
whenever the password hash succeeds — including for the sentinel password
"*" used by SSO and LDAP accounts.

This causes all SSO/LDAP users to have `origin = "password"` in the
database, which breaks the UIA SSO bypass check in `uiaa.rs` that gates
on `users.origin(sender_user) == "sso"`. As a result, SSO users cannot
delete devices or perform other UIA-protected operations because they
are prompted for a password they don't have, and the SSO bypass never
triggers.

Fix: skip the `userid_origin` overwrite when the password is the
sentinel value `"*"`, preserving the origin set by `create()`.
 2026-02-15 12:07:17 -08:00
Yukai Wu
41d5b7ce58 Fix a typo in troubleshooting.md 2026-02-15 21:39:20 +08:00
Jason Volk
96fb02ac99 Return NotFound for empty room name string. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 22:44:16 +00:00
Jason Volk
1bd4ab0601 Optimize reference graph container value type for topological_sort. 
Optimize initial container capacity estimates.

Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 22:44:16 +00:00
Jason Volk
b7ea9714e8 Add util to generate random event_id's. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 18:59:43 +00:00
Jason Volk
ca6cf8ad19 Eliminate mutable state. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 18:59:43 +00:00
Jason Volk
0564f23c96 Clarify doc comment for toplogical_sort. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 18:59:43 +00:00
Jason Volk
1004d99350 Split txn pdu/edu handling with separate spans. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 18:59:43 +00:00
Jason Volk
6cd4c1a70b Move state_res topological_sort out of resolve. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 18:59:43 +00:00
Jason Volk
d904d30a16 Split full_conflicted_set from resolve under separate span. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 18:59:43 +00:00
Jason Volk
75e63c93ab Log debug_warn msg for client disconnect from request. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 18:59:43 +00:00
Jason Volk
289eaa57a3 Cleanup/simplify client versions and unstable_features listing. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 18:59:43 +00:00
Jason Volk
4d2845dd54 Split out and eliminate api/client/unversioned.rs. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 18:59:43 +00:00
Jason Volk
2f41784a3b Bump Complement. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-14 18:59:43 +00:00
cornerot
6c91aa1ddc Update docker-compose.with-traefik.yml (#308) 
/etc/conduit.toml -> /etc/tuwunel.toml
 2026-02-13 18:31:23 -05:00
Jason Volk
b67cb16f80 Additional entries for .git-blame-ignore-revs 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-13 22:14:08 +00:00
Jason Volk
6e3e6441b9 Merge remote-tracking branch 'the-hazelnut/patch-2' 2026-02-12 13:15:54 +00:00
Jason Volk
ef4903a00f Merge remote-tracking branch 'the-hazelnut/patch-1' 2026-02-12 13:15:51 +00:00
Jason Volk
847bd19b36 Merge remote-tracking branch 'Lamby777/patch-1' 2026-02-12 13:15:49 +00:00
Jason Volk
1874a8281d Merge remote-tracking branch 'risu729/docs/docker-run-default-port' 2026-02-12 13:15:47 +00:00
dasha_uwu
31fcbe86fc Include "preview" in url preview user agent string. (fixes #303) 
This is required for fixupx.com to serve previews instead of redirecting
 2026-02-12 13:15:41 +00:00
Jason Volk
994e1d12a7 Optimize various case-insensitive comparisons. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-12 13:15:41 +00:00
Jason Volk
814cbc2f37 Bump Ruma for case-insensitive ACL. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-12 13:15:41 +00:00
dasha_uwu
4bba40982c Refactor room_version support code 
Fix advertising unsupported room versions
 2026-02-12 13:15:41 +00:00
dasha_uwu
d6ae4e5ff2 Remove redundant debug assert 2026-02-12 13:15:41 +00:00
dasha_uwu
34fb683ddd Move reqwest clients behind one shared lazylock 2026-02-12 13:15:41 +00:00
dasha_uwu
a257d846c7 Refactor CS membership query 2026-02-12 13:15:41 +00:00
dasha_uwu
baa1e52302 Implement local redaction blocking 2026-02-12 13:15:41 +00:00
dasha_uwu
e1dc52200c Remove redundant service.users.is_admin 2026-02-12 13:15:41 +00:00
Jason Volk
e59dcb3f3c Simplify router::run() and blocking point. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-12 13:15:41 +00:00
Jason Volk
02cd1dc124 Add unwrap_or_else_async to OptionFutureExt. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-12 13:15:41 +00:00
Jason Volk
5dcb4c9a34 Fix presence worker shutdown sequence. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-12 13:15:41 +00:00
Jason Volk
6286c5a041 Move router/serve/mod.rs to router/serve.rs 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-12 13:15:41 +00:00
Jason Volk
5286bdc6bb Consolidate concurrent event filters in messages iteration. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-12 13:15:41 +00:00
dasha_uwu
b160880868 Increase max limit for /messages from 100 to 1000 2026-02-12 13:15:41 +00:00
dasha_uwu
6f5ae17dc6 Trim client_secret_file value, fixes #302 2026-02-12 13:15:41 +00:00
dasha_uwu
bccc251fef remove unix socket on shutdown 2026-02-12 13:15:41 +00:00
dasha_uwu
bd5203b406 Update axum-server to 0.8; switch to axum unix listener. 2026-02-12 13:15:41 +00:00
dasha_uwu
87faf818ff Add webpki roots for reqwest clients. (fixes #296) 2026-02-12 13:15:35 +00:00
Jason Volk
2e19a30ff2 Add conditional default for provider callback_url. 
Co-authored-by: jeidnx <git@domainhier.de>
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-12 03:22:51 +00:00
jeidnx
60d418118f fix: url calculation in make_url 2026-02-12 03:22:51 +00:00
Jason Volk
e279d39ff0 Fix unfulfilled lint expectation. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-12 02:06:17 +00:00
Jason Volk
f8ffbbf161 ci: Add specific nightly toolchain override. 
Signed-off-by: Jason Volk <jason@zemos.net>
 2026-02-12 02:06:17 +00:00
Kate
cd0cdc386f Update turn.md 
Add a note about port forwarding, where installation is behind NAT.
 2026-02-11 17:05:18 +00:00
Kate
d55815eaa4 Update matrix_rtc.md 
Add some observations borne from troubleshooting the configuration of a new install - add notes about port forwarding and a clarifying note about serving .well-known.
 2026-02-11 17:02:08 +00:00
Cherry
90f7abe3b8 rm version field from turn docker compose example 2026-02-09 19:49:37 -05:00