- Jan 26, 2024
-
-
a 6+ year old deprecated field that isnt even spelled right, and no clients use it must still be sent according to spec Signed-off-by:strawberry <strawberry@puppygock.gay>
-
Signed-off-by: -
Signed-off-by: -
this can most definitely be improved but this is a decent attempt. the only annoying this is i couldn't just use a Vec<IPAddress> which would have significantly simplified all of this, but serde can't deserialise it on the config side i guess. i may find a better way to do this in the future, but this should cover most areas anyways. Signed-off-by: -
Signed-off-by: -
still cantt respect allow_redirect yet Signed-off-by: -
as far as i can tell, it will return a normal error in the auth token handling code so this is fine. we also shouldnt assume all errors from this are access_token related. Signed-off-by: -
first attempt at forcing an endpoint to be authenticated Signed-off-by: -
Signed-off-by: -
latest rocksdb now has WriteBufferManager support i hope no one is using sqlite with conduwuit, but if they are let's bump it to latest git too for the latest sqlite version available. Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
from https://gitlab.com/famedly/conduit/-/merge_requests/564 Signed-off-by:
-
im not sure what the TODO is trying to say here, but since it's many years old and conduwuit is fast, i dont see an issue with this. Signed-off-by: -
these are benign errors that are from things like conduwuit fetching remote media from dead servers Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
this is not finished yet Signed-off-by: -
default for RocksDB is -1 and conduwuit already raises the soft and hard nofile limits at startup. Signed-off-by:
-
- Jan 18, 2024
-
-
akin to synapse's `prevent_media_downloads_from` Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
Signed-off-by:
-
- Jan 17, 2024
-
-
Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
in short, the `/report` endpoint now checks if: - the reporting room in the URI matches the PDU/event reported - sender user is in the room reported - raises report reasoning to 750 characters (spec doesn't say to limit these, but thorough and informative reports for server admins are not a bad thing) - (hopefully) fixes some broken formatting - add a random short delay before sending a successful response to the client to make it more annoying to enumerate for events on our server (security by obscurity but spec suggests it) basically, secure reports better lol see https://spec.matrix.org/v1.9/client-server-api/#post_matrixclientv3roomsroomidreporteventid Signed-off-by:
-
Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
Signed-off-by: -
Signed-off-by:
-
