- Aug 15, 2018
-
-
Neil Johnson authored
-
Neil Johnson authored
-
- Aug 13, 2018
-
-
Neil Johnson authored
-
Neil Johnson authored
Revert "support admin_email config and pass through into blocking errors, return AuthError in all cases" This reverts commit 0d43f991.
-
Neil Johnson authored
-
Amber Brown authored
-
- Aug 10, 2018
-
-
black authored
-
- Aug 04, 2018
-
-
Neil Johnson authored
-
- Aug 03, 2018
-
-
Neil Johnson authored
-
Neil Johnson authored
-
- Aug 02, 2018
-
-
Neil Johnson authored
-
- Aug 01, 2018
-
-
Amber Brown authored
-
- Jul 09, 2018
-
-
Amber Brown authored
-
- Jun 28, 2018
-
-
Matthew Hodgson authored
-
Matthew Hodgson authored
-
- Dec 06, 2016
-
-
Richard van der Hoff authored
Make sure that a user cannot pretend to be a guest by adding 'guest = True' caveats.
-
- Sep 12, 2016
-
-
Mark Haines authored
-
- Jul 20, 2016
-
-
Richard van der Hoff authored
Record the device_id when we add a client ip; it's somewhat redundant as we could get it via the access_token, but it will make querying rather easier.
-
- Jul 13, 2016
-
-
Negar Fazeli authored
-
- May 13, 2016
-
-
Negi Fazeli authored
- Add unittests for client, api and handler Signed-off-by:
Negar Fazeli <negar.fazeli@ericsson.com>
-
- Feb 19, 2016
-
-
Mark Haines authored
-
- Jan 11, 2016
-
-
Daniel Wagner-Hall authored
This tracks data about the entity which made the request. This is instead of passing around a tuple, which requires call-site modifications every time a new piece of optional context is passed around. I tried to introduce a User object. I gave up.
-
- Jan 05, 2016
-
-
Daniel Wagner-Hall authored
-
- Nov 04, 2015
-
-
Daniel Wagner-Hall authored
This follows the same flows-based flow as regular registration, but as the only implemented flow has no requirements, it auto-succeeds. In the future, other flows (e.g. captcha) may be required, so clients should treat this like the regular registration flow choices.
-
- Sep 01, 2015
-
-
Daniel Wagner-Hall authored
-
- Aug 26, 2015
-
-
Daniel Wagner-Hall authored
-
Daniel Wagner-Hall authored
A couple of weird caveats: * If we can't validate your macaroon, we fall back to checking that your access token is in the DB, and ignoring the failure * Even if we can validate your macaroon, we still have to hit the DB to get the access token ID, which we pretend is a device ID all over the codebase. This mostly adds the interesting code, and points out the two pieces we need to delete (and necessary conditions) in order to fix the above caveats.
-
- Aug 25, 2015
-
-
Daniel Wagner-Hall authored
-
Daniel Wagner-Hall authored
Removes device_id and ClientInfo device_id is never actually written, and the matrix.org DB has no non-null entries for it. Right now, it's just cluttering up code. This doesn't remove the columns from the database, because that's fiddly.
-
- Aug 20, 2015
-
-
Daniel Wagner-Hall authored
We're about to have two kinds of token, access and refresh
-
- Feb 09, 2015
-
-
Kegan Dougal authored
-
Kegan Dougal authored
Add logic to map the appservice token to the autogenned appservice user ID. Add unit tests for all forms of get_user_by_req (user/appservice, valid/bad/missing tokens)
-