conduit

Commit Graph

Author	SHA1	Message	Date
Matthias Ahouansou	fd19dda5cb	ci: use nightly rustfmt we were using this before, but it broke when refactoring the flake out into separate files	2 years ago
Matthias Ahouansou	c453d45598	fix(keys): only use keys valid at the time of PDU or transaction, and actually refresh keys Previously, we only fetched keys once, only requesting them again if we have any missing, allowing for ancient keys to be used to sign PDUs and transactions Now we refresh keys that either have or are about to expire, preventing attacks that make use of leaked private keys of a homeserver We also ensure that when validating PDUs or transactions, that they are valid at the origin_server_ts or time of us receiving the transaction respectfully As to not break event authorization for old rooms, we need to keep old keys around We move verify_keys which we no longer see in direct requests to the origin to old_verify_keys We keep old_verify_keys indefinitely as mentioned above, as to not break event authorization (at least until a future MSC addresses this)	2 years ago
Matthias Ahouansou	144d548ef7	fix: permission checks for aliases	2 years ago
Benjamin Lee	7b259272ce	fix: do not return redacted events from search	2 years ago
Matthias Ahouansou	48c1f3bdba	fix: userid checks for incoming EDUs	2 years ago
Matthias Ahouansou	ba2a5a6115	chore: bump all dependencies	2 years ago
Matthias Ahouansou	1dbb3433e0	fix(media): use csp instead of modifying content-type	2 years ago
Matthias Ahouansou	b46000fadc	feat: recurse relationships	2 years ago
Matthias Ahouansou	19154a9f70	refactor: add server_user to globals	2 years ago
Matthias Ahouansou	ec8dfc283c	fix(membership): fallback to locally signed event if the join wasn't a restricted one on send_join response	2 years ago
Matthias Ahouansou	6c2eb4c786	feat(admin): remove alias command	2 years ago
Matthias Ahouansou	9374b74e77	refactor: let ruma-server-util handle X-Matrix parsing	2 years ago
Matthias Ahouansou	59d7674b2a	fix: clarify that 3pids are currently unsupported	2 years ago
tony	6bcc2f80b8	add command to set the allow registration status Co-Authored-By: Matthias Ahouansou <matthias@ahouansou.cz>	2 years ago
mikoto	a888c7cb16	OpenID routes Co-Authored-By: Matthias Ahouansou <matthias@ahouansou.cz>	2 years ago
Timo Kösters	965b6df83d	fix: make media response match spec	2 years ago
Matthias Ahouansou	8876d54d78	feat(admin): add hash-and-sign-event command	2 years ago
Matthias Ahouansou	d8badaf64b	fix(membership): always set reason & allow new events if reason changed	2 years ago
Matthias Ahouansou	256dae983b	chore: bump rust and fix new lints that come with it	2 years ago
Matthias Ahouansou	9db1f5a13c	fix(admin): don't allow creation of remote users	2 years ago
Jakub Kubík	c1f695653b	feat: support hosting .well-known from Conduit Co-authored-by: Matthias Ahouansou <matthias@ahouansou.cz>	2 years ago
Matthias Ahouansou	63ba157ef6	feat(auth): check if X-Matrix destination is correct if present	2 years ago
Matthias Ahouansou	dfe2916357	feat(federation): add destination field to X-Matrix header	2 years ago
Matthias Ahouansou	df0ad2d07c	fix(appservices): don't forward events relating to remote users, and forward events relating to remote aliases	2 years ago
Ossi Herrala	aff97e4032	Update image crate	2 years ago
Ossi Herrala	a56139549f	Trust-DNS has been renamed to Hickory-DNS	2 years ago
Matthias Ahouansou	74db555336	fix(membership): perform stricter checks when choosing an authorized user	2 years ago
Matthias Ahouansou	3086271139	feat(appservice): ensure users/aliases outside of namespaces are not accessed	2 years ago
Matthias Ahouansou	e40aed3a7d	fix(state-accessor): hold the state_lock when checking if a user can invite	2 years ago
Matthias Ahouansou	1c4ae8d268	fix(redaction): use content.redacts when checking v11 events	2 years ago
Valentin Lorentz	89c1c2109c	Link to the specification from user_can_redact's documentation	2 years ago
Matthias Ahouansou	00d6aeddb6	refactor(redactions): move checks inside conduit ruma was already accidentally performing these checks for us, but this shouldn't be the case	2 years ago
Matthias Ahouansou	6c9c1b5afe	fix(appservices): don't perform identity assertion when auth is optional	2 years ago
Matthias Ahouansou	4b288fd22f	chore: remove default database backend has been sqlite for far too long, and having a default for this is just asking for trouble	2 years ago
Valentin Lorentz	2d8c551cd5	Fix doc	2 years ago
Valentin Lorentz	eb6801290b	Document copy_redacts	2 years ago
Matthias Ahouansou	7a7c09785e	feat(pdu): copy top level redact to content and vice versa	2 years ago
Matthias Ahouansou	54e0e2a14c	fix(appservices): don't use identity assertion on account management endpoints	2 years ago
Matthias Ahouansou	475a68cbb9	refactor: disable federation at the router level	2 years ago
Matthias Ahouansou	92817213d5	Add missing import	2 years ago
Matthias Ahouansou	ab8592526f	Replace panic!() with unreachable!()	2 years ago
Matthias Ahouansou	561a103140	chore(config): bump default room version to v10	2 years ago
Matthias Ahouansou	9e6ce8326f	Remove TODO	2 years ago
Matthias Ahouansou	e88d137bd7	Replace panic!() with unreachable!()	2 years ago
Matthias Ahouansou	fe78cc8262	refactor(state_accessor): add method to check if a user can invite another user	2 years ago
Matthias Ahouansou	2c73c3adbb	fix(sync): send phoney leave event where room state is unknown on invite rejection	2 years ago
Matthias Ahouansou	9497713a79	fix(membership): check if server is in room to decide whether to do remote leaves	2 years ago
Matthias Ahouansou	110b7e10e6	fix: do not allow administration of remote users	2 years ago
Matthias Ahouansou	fb4217486f	feat(membership): check if user already has the membership that is requested to be set	2 years ago
Matthias Ahouansou	0f6b771cdd	fix(membership): remove join_authorized_via_users_server field on state update	2 years ago

1 2 3 4 5 ...

1386 Commits (ffc57f89977a8e44becdecbfb39b3868feb6e433)