Quentin Gliech
bdb44498b8
Automatically derive the kid from the key fingerprint if missing ( #4876 )
2025-09-02 17:04:35 +02:00
Quentin Gliech
6e3d2e79f1
Merge branch 'main' into quenting/stable-docs
2025-09-02 14:11:40 +02:00
Quentin Gliech
6d4747cd28
Fix the wording about admin token vs. secret in the doctor command
2025-09-02 14:08:20 +02:00
Kai A. Hiller
897d6de572
Switch to JWK Thumbprints
2025-08-20 18:22:21 +02:00
Kai A. Hiller
7f7f9918b0
Remove kid from test config and config generation
2025-08-20 18:04:39 +02:00
Quentin Gliech
9ab64403dd
Simplify handling of login hints
2025-08-18 16:48:21 +02:00
Quentin Gliech
76f9b8657e
Remove unnecessary crate-level comment
2025-08-18 16:48:04 +02:00
Quentin Gliech
7253ca69b0
Merge remote-tracking branch 'origin/main' into feat/login_hint_with_email
2025-08-18 16:43:00 +02:00
Quentin Gliech
a4cafa8ed0
Reformat with rustfmt
2025-08-18 13:46:25 +02:00
Quentin Gliech
4f33544eb7
Apply suggestions from code review
...
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com >
2025-08-18 13:44:10 +02:00
Quentin Gliech
29e88691ab
Update mas-cli doctor to suggest the stable MAS integration
2025-08-18 13:23:09 +02:00
Quentin Gliech
8dd096ce60
Fix a few more clippy lints
2025-08-18 10:45:20 +02:00
Quentin Gliech
bef50474ab
Un-hide a few elidded lifetimes
2025-08-18 10:35:28 +02:00
Quentin Gliech
eded025ff4
Fix a few clippy lints, mostly in doc comments
2025-08-18 10:34:28 +02:00
Quentin Gliech
78933acb3c
Collapse a few nested if now that we have if let chains
2025-08-18 10:29:30 +02:00
Kai A. Hiller
3f816ba9c4
Improve clarity of return type
2025-08-08 12:04:56 +02:00
Kai A. Hiller
968968bdbb
Auto-generate kid if not given
2025-08-08 11:38:45 +02:00
mcalinghee
8bad68cc34
Merge branch 'main' into feat/login_hint_with_email
2025-08-05 17:02:14 +02:00
Quentin Gliech
c93b051da4
Merge branch 'main' into secret_file
2025-08-05 15:37:32 +02:00
Quentin Gliech
9d6c357f45
Make MAS use the modern Synapse API by default
2025-08-05 15:03:32 +02:00
Quentin Gliech
8df0c57c4c
Fix usage of homeserver_connection_from_config
2025-08-05 11:54:28 +02:00
Quentin Gliech
f610994a0f
Merge branch 'main' into secret_file
2025-08-05 11:17:39 +02:00
Quentin Gliech
a503856b7a
Add clients.[].client_secret_file config option ( #4857 )
2025-08-05 11:17:00 +02:00
Kai A. Hiller
dd040220db
Add clients.[].client_secret_file config option
2025-08-04 19:32:39 +02:00
Quentin Gliech
4d83fcb25e
Merge remote-tracking branch 'origin/main' into quenting/stable-api
2025-08-04 16:38:49 +02:00
Quentin Gliech
c20ce916d8
Make mas-cli manage issue-compatibility-token create the device on the homeserver
2025-08-04 11:21:57 +02:00
mcalinghee
1e2bf7f2f3
use of static RNG and MockClock in tests
2025-07-31 12:48:16 +02:00
mcalinghee
a45a1d7f73
move Clock/MockClock/SystemClock/BoxClock/BoxRng to mas-data-model : format
2025-07-31 12:35:56 +02:00
mcalinghee
9fa91b9524
move Clock/MockClock/SystemClock/BoxClock/BoxRng to mas-data-model : correct documentation
2025-07-31 12:34:01 +02:00
mcalinghee
062f5aced7
move Clock/MockClock/SystemClock/BoxClock/BoxRng to mas-data-model
2025-07-31 11:17:33 +02:00
mcalinghee
70cf833f0d
use of login_with_email_allowed at caller level
2025-07-30 15:19:57 +02:00
mcalinghee
0e79ed5268
rename Login:EMAIL to Login::Email + remove use of email prefix
2025-07-30 15:19:57 +02:00
mcalinghee
929c14a6aa
display email login_hint when login_with_email_allowed is activated
2025-07-30 15:19:57 +02:00
Quentin Gliech
b8d23be313
Fix many clippy warnings
...
This is because the tracing-attributes update made clippy look at those
again. I've removed the `too_many_lines` lint, as it's not really useful
and we ignore it most of the time anyway.
2025-07-30 14:49:38 +02:00
Quentin Gliech
77f371c6f6
Replace usage of deprecated SentryHttpLayer::with_transaction
2025-07-30 14:27:07 +02:00
Quentin Gliech
9a191a2b21
Remove unused Sentry options
2025-07-30 14:27:07 +02:00
Quentin Gliech
1d0499ce68
Properly use rustls-platform-verifier with reqwest
2025-07-30 12:04:30 +02:00
Quentin Gliech
b10db6f5b0
Use the renamed functions from socket2
2025-07-30 11:24:04 +02:00
Kai A. Hiller
357420a56f
Add matrix.secret_file config option
2025-07-29 19:46:07 +02:00
networkException
017fd53308
fix: don't attempt to set TCP_NODELAY on accepted unix streams
...
This patch fixes accepting streams from unix sockets resulting
in operation not supported errors.
2025-07-27 02:41:39 +02:00
Quentin Gliech
1a680a26f8
Fix spec compliance of upstream OAuth 2.0 client auth methods ( #4819 )
2025-07-24 15:36:25 +02:00
Quentin Gliech
4b54a731b9
Show a better error page in most human-facing pages ( #4816 )
2025-07-24 15:36:09 +02:00
Quentin Gliech
3a13eb68c5
Don't check for client_id in tests
2025-07-24 11:31:54 +02:00
Quentin Gliech
a3540411dd
Fix spec compliance of upstream OAuth 2.0 client auth methods
...
We were sending the `client_id` in all cases, but the spec says it
should only be sent for the `none` and `client_secret_post` methods.
2025-07-24 11:16:00 +02:00
Kai A. Hiller
9a21e44d4b
Fix typo in secrets config output
2025-07-24 10:21:55 +02:00
Quentin Gliech
00234469a9
Human-readable error page on the compat SSO login redirect
2025-07-24 10:01:00 +02:00
Quentin Gliech
e964c08eb6
Make the compat_router also recover from errors in human-facing routes
2025-07-23 19:45:59 +02:00
Quentin Gliech
32f8d22dec
Include the issuer URLs in the error message when they don't match
2025-07-23 19:36:54 +02:00
Quentin Gliech
e21d113cfb
Human-readable error page on the upstream callback page
2025-07-23 19:36:39 +02:00
Quentin Gliech
089de9ef8f
Human-readable error page on the upstream authorization page
2025-07-23 19:36:17 +02:00