Matthias Ahouansou
2a7aa6242f
chore: upgrade ruma
1 year ago
Matthias Ahouansou
406367b4f2
chore: upgrade rust
...
this is needed for recent versions of ruma
1 year ago
Matthias Ahouansou
3686f6d260
remove unused backends
...
they have been disabled for a long time, and are unlikely to ever make a comeback
1 year ago
Matthias Ahouansou
30855cef81
fix(media): return an error when content is failed to be parsed as an image
1 year ago
Matthias Ahouansou
dbc1daaefb
feat(turn): move config to table & error when no config is set
1 year ago
Matthias Ahouansou
56a51360e0
feat(spaces): hierarchy over federation
...
fix(spaces): deal with hierarchy recursion
fix(spaces): properly handle max_depth
refactor(spaces): token scheme to prevent clients from modifying max_depth and suggested_only
perf(spaces): use tokens to skip to room to start populating results at
feat(spaces): request hierarchy from servers in via field of child event
1 year ago
Matthias Ahouansou
de323cbecb
re-add well-known table, while still allowing individual values to be set with env vars without double underscores
1 year ago
Laurențiu Nicola
a2b72f48b9
fix: remove content-disposition debug prints
1 year ago
Timo Kösters
65fe6b0ab5
fix: Empty content dispositions could create problems
2 years ago
Timo Kösters
fea85b0894
fix: Migration typo for media
2 years ago
Timo Kösters
a7405cddc0
fix: Matrix media repo
2 years ago
Timo Kösters
3df21e8257
fix: old media used spaces in content disposition without quotes
2 years ago
The one with the braid
a6797ca0a2
fix: add missing msc3916 unstable feature in version response
...
Fixes : #473
Signed-off-by: The one with the braid <info@braid.business>
2 years ago
Leonardo José
cdd03dfec0
Fix parsing of CONFIG_WELL_KNOW_* env variables into the internal configuration object
2 years ago
Matthias Ahouansou
cbd3b07ca7
feat(media): use authenticated endpoints when fetching remote media
2 years ago
Matthias Ahouansou
27d6d94355
feat: add support for authenticated media requests
2 years ago
Matthias Ahouansou
a3716a7d5a
chore: upgrade request client matrix version
...
this is needed so that new endpoints use stable paths
2 years ago
avdb13
423b0928d5
use ruma content disposition type in place of string
...
Co-Authored-By: Matthias Ahouansou <matthias@ahouansou.cz>
2 years ago
Matthias Ahouansou
6455e918be
fix: don't always assume ruma can generate reference hashes
2 years ago
Matthias Ahouansou
ea3e7045b4
fix: don't fail the entire transaction if any PDU's format is invalid
2 years ago
Matthias Ahouansou
d95345377b
fix: remove TLS name override when no SRV record is present (but properly)
...
The previous attempt only did so when no IP could be resolved, which isn't enough
2 years ago
Matthias Ahouansou
11187b3fad
fix: remove TLS name override when no SRV record is present
...
this could have been an issue in cases where there was previously a SRV record, but later got removed
2 years ago
Matthias Ahouansou
35ed731a46
feat(config): split on __, allowing for setting individual values in a table
2 years ago
Matthias Ahouansou
ba8429cafe
fix: don't cache server name lookups indefinitely
2 years ago
Matthias Ahouansou
2f45a907f9
fix: don't ignore ACLs when there is no content
...
despite this being very bad behavior, it is required by the spec
2 years ago
Matthias Ahouansou
62f1da053f
feat(appservice): support timestamped messaging
2 years ago
Matthias Ahouansou
602c56cae9
chore: bump ruma
2 years ago
Matthias Ahouansou
9014e43ce1
chore: bump rust to 1.79.0 and apply new lints
2 years ago
Matthias Ahouansou
fd19dda5cb
ci: use nightly rustfmt
...
we were using this before, but it broke when refactoring the flake out into separate files
2 years ago
Matthias Ahouansou
c453d45598
fix(keys): only use keys valid at the time of PDU or transaction, and actually refresh keys
...
Previously, we only fetched keys once, only requesting them again if we have any missing, allowing for ancient keys to be used to sign PDUs and transactions
Now we refresh keys that either have or are about to expire, preventing attacks that make use of leaked private keys of a homeserver
We also ensure that when validating PDUs or transactions, that they are valid at the origin_server_ts or time of us receiving the transaction respectfully
As to not break event authorization for old rooms, we need to keep old keys around
We move verify_keys which we no longer see in direct requests to the origin to old_verify_keys
We keep old_verify_keys indefinitely as mentioned above, as to not break event authorization (at least until a future MSC addresses this)
2 years ago
Matthias Ahouansou
144d548ef7
fix: permission checks for aliases
2 years ago
Benjamin Lee
7b259272ce
fix: do not return redacted events from search
2 years ago
Matthias Ahouansou
48c1f3bdba
fix: userid checks for incoming EDUs
2 years ago
Matthias Ahouansou
ba2a5a6115
chore: bump all dependencies
2 years ago
Matthias Ahouansou
1dbb3433e0
fix(media): use csp instead of modifying content-type
2 years ago
Matthias Ahouansou
b46000fadc
feat: recurse relationships
2 years ago
Matthias Ahouansou
19154a9f70
refactor: add server_user to globals
2 years ago
Matthias Ahouansou
ec8dfc283c
fix(membership): fallback to locally signed event if the join wasn't a restricted one on send_join response
2 years ago
Matthias Ahouansou
6c2eb4c786
feat(admin): remove alias command
2 years ago
Matthias Ahouansou
9374b74e77
refactor: let ruma-server-util handle X-Matrix parsing
2 years ago
Matthias Ahouansou
59d7674b2a
fix: clarify that 3pids are currently unsupported
2 years ago
tony
6bcc2f80b8
add command to set the allow registration status
...
Co-Authored-By: Matthias Ahouansou <matthias@ahouansou.cz>
2 years ago
mikoto
a888c7cb16
OpenID routes
...
Co-Authored-By: Matthias Ahouansou <matthias@ahouansou.cz>
2 years ago
Timo Kösters
965b6df83d
fix: make media response match spec
2 years ago
Matthias Ahouansou
8876d54d78
feat(admin): add hash-and-sign-event command
2 years ago
Matthias Ahouansou
d8badaf64b
fix(membership): always set reason & allow new events if reason changed
2 years ago
Matthias Ahouansou
256dae983b
chore: bump rust
...
and fix new lints that come with it
2 years ago
Matthias Ahouansou
9db1f5a13c
fix(admin): don't allow creation of remote users
2 years ago
Jakub Kubík
c1f695653b
feat: support hosting .well-known from Conduit
...
Co-authored-by: Matthias Ahouansou <matthias@ahouansou.cz>
2 years ago
Matthias Ahouansou
63ba157ef6
feat(auth): check if X-Matrix destination is correct if present
2 years ago