Commit Graph

60 Commits

Author SHA1 Message Date
teutat3s
486f6e00e7 docs: add missing --reactivate option 2025-10-17 19:39:34 +02:00
Quentin Gliech
28e573b400 Add a configuration option to make email optional for password registration 2025-10-07 17:28:01 +02:00
Quentin Gliech
1644b41894 Simple CLI commands to manage server admins 2025-09-16 12:42:32 +02:00
Quentin Gliech
bdb44498b8 Automatically derive the kid from the key fingerprint if missing (#4876) 2025-09-02 17:04:35 +02:00
Patrick Maier
e4e2d266b1 Add missing branding config to docs (#4577) 2025-08-15 12:22:07 +02:00
Kai A. Hiller
968968bdbb Auto-generate kid if not given 2025-08-08 11:38:45 +02:00
Quentin Gliech
f610994a0f Merge branch 'main' into secret_file 2025-08-05 11:17:39 +02:00
Quentin Gliech
a503856b7a Add clients.[].client_secret_file config option (#4857) 2025-08-05 11:17:00 +02:00
Kai A. Hiller
dd040220db Add clients.[].client_secret_file config option 2025-08-04 19:32:39 +02:00
Quentin Gliech
4d83fcb25e Merge remote-tracking branch 'origin/main' into quenting/stable-api 2025-08-04 16:38:49 +02:00
Kai A. Hiller
357420a56f Add matrix.secret_file config option 2025-07-29 19:46:07 +02:00
Quentin Gliech
0c32681e26 docs: Remove requirement for arbitrary KIDs (#4807) 2025-07-23 12:38:47 +02:00
Kai A. Hiller
d066259a31 KIDs must be stable across restarts 2025-07-23 12:31:38 +02:00
Kai A. Hiller
6612a90e4b Fix wording 2025-07-23 09:43:43 +02:00
Kai A. Hiller
0fb4a195a2 Adapt markdown formatting 2025-07-23 09:39:52 +02:00
Kai A. Hiller
c16384d2f3 docs: Remove requirement for arbitrary KIDs 2025-07-21 18:37:03 +02:00
mcalinghee
1886e73e40 allow importing existing users when the localpart matches in upstream OAuth 2.0 logins 2025-07-21 09:52:24 +02:00
Quentin Gliech
b2ca7d5f9e Add documentation for backchannel logout 2025-07-04 16:27:10 +02:00
Quentin Gliech
dc6ba0f400 Mention the stable scopes in the doc, remove the guest scope 2025-06-13 15:56:13 +02:00
Quentin Gliech
186b5cbdbe Add secrets.encryption_file config option (#4617) 2025-06-05 15:14:55 +02:00
Kai A. Hiller
4a8dfae7b9 Update encryption secret warning in docs 2025-06-04 14:50:54 +02:00
Kai A. Hiller
6db309f796 Document secrets.encryption_file
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
2025-06-04 11:42:51 +02:00
Quentin Gliech
3821c6550d CLI tool to issue user registration tokens 2025-06-03 17:42:55 +02:00
Quentin Gliech
dcef4bcf3f Add config flag to require registration tokens for password registrations 2025-06-03 17:42:53 +02:00
Jason Robinson
8638538163 Add missing branding config to docs
Mostly copied from the code, with some additions from https://github.com/matrix-org/matrix-authentication-service/pull/2325
2025-05-20 15:21:13 +03:00
Doug
5a93bf69ec Update upstream_oauth2.providers docs. 2025-05-07 11:14:10 +01:00
Quentin Gliech
b3e2cadf71 Document the new migration tool 2025-04-23 18:50:15 +02:00
Quentin Gliech
db5c39e11d Fix headings in config doc (#4419) 2025-04-23 14:11:33 +02:00
Hugh Nimmo-Smith
86ff994fb3 Remove reference to unsupported aws_ses email transport 2025-04-22 13:21:07 +01:00
Kai A. Hiller
e1631f6dfd Fix headings in config doc
Signed-off-by: Kai A. Hiller <git@kaialexhiller.de>
2025-04-16 15:05:36 +02:00
mcalinghee
2fe4752aa4 add login by email + feature flag 2025-04-10 17:57:58 +02:00
Quentin Gliech
25fd400ffb Change the default value of account_deactivation_allowed to true. 2025-03-13 12:04:57 +01:00
Quentin Gliech
3e77684a8b Add the new configuration option to the configuration reference 2025-03-12 16:02:52 +01:00
Quentin Gliech
41349c1a96 Document the new username ban/allow policy 2025-03-03 10:35:44 +01:00
Quentin Gliech
993342ef58 Match suffixes and prefixes in string constraints 2025-02-17 16:40:10 +01:00
Quentin Gliech
6a373657cb Update the policy documentation 2025-02-17 15:43:25 +01:00
Quentin Gliech
9ce746f975 Add documentation for session timeout configuration 2025-02-12 17:34:23 +01:00
Will Lewis
b6be29bece Add documentation to account for all cli mas options and standardise format 2025-02-07 13:38:36 +00:00
Quentin Gliech
e58f0ad5be Document the response_mode parameter 2025-01-06 11:59:53 +01:00
Quentin Gliech
6756c6ebaf Document the new usptream OAuth 2.0 configuration options 2025-01-06 11:59:53 +01:00
reivilibre
05e90b7c91 Add documentation against using database transaction poolers (#3617) 2024-12-05 11:28:22 +00:00
Phan Trung Thanh
3193d6a8c0 Update configuration.md to include a missing parameter 2024-11-26 13:17:52 +01:00
Quentin Gliech
0e465f4904 Remove the contacts requirement from the client registration policy 2024-09-20 20:39:04 +02:00
Quentin Gliech
72d3f4039a Fix the email policy documentation indentation 2024-09-03 17:47:43 +02:00
Marcel
05fa8b3ee0 Apply suggestions on wording 2024-09-03 17:33:10 +02:00
Marcel
74796e6e72 Document policy settings for changing the policy wasm file 2024-09-03 17:33:10 +02:00
Marcel
f47473ccff Document the email policy in the reference 2024-08-30 13:57:31 +02:00
Quentin Gliech
862e34e79e Small documentation fixes
- Removes mentions of the `mas-cli templates save` command
 - Removes the old `experimental` flags
 - Removes the old `policy.data.passwords` configs
 - Document the `policy.data.client_registration` flags
 - Remove references to the pre-built macOS binaries
 - Explains how to get syn2mas
 - State that you need to prepare the database before importing data
 - Clean up the reverse proxy documentation
 - Clarify that you don't need to provede templates/policy/assets
   manually when running the docker image
2024-08-19 13:53:43 +02:00
reivilibre
ca05566e82 Add rate-limiting for account recovery and registration (#3093)
* Add rate-limiting for account recovery and registration

* Rename login ratelimiter `per_address` to `per_ip` for consistency

Co-authored-by: Quentin Gliech <quenting@element.io>
2024-08-07 17:57:36 +00:00
reivilibre
8f0d7800ff Add configuration for rate-limiting of logins, replacing hardcoded limits (#3090) 2024-08-07 18:36:02 +01:00