Skip to content
Snippets Groups Projects
  1. Jun 01, 2019
  2. May 13, 2019
  3. May 10, 2019
  4. May 08, 2019
    • Brendan Abolivier's avatar
      Fix bogus imports in tests (#5154) · d216a36b
      Brendan Abolivier authored
      Unverified
      d216a36b
    • Matthew Hodgson's avatar
      add options to require an access_token to GET /profile and /publicRooms on CS API (#5083) · c0e0740b
      Matthew Hodgson authored
      This commit adds two config options:
      
      * `restrict_public_rooms_to_local_users`
      
      Requires auth to fetch the public rooms directory through the CS API and disables fetching it through the federation API.
      
      * `require_auth_for_profile_requests`
      
      When set to `true`, requires that requests to `/profile` over the CS API are authenticated, and only returns the user's profile if the requester shares a room with the profile's owner, as per MSC1301.
      
      MSC1301 also specifies a behaviour for federation (only returning the profile if the server asking for it shares a room with the profile's owner), but that's currently really non-trivial to do in a not too expensive way. Next step is writing down a MSC that allows a HS to specify which user sent the profile query. In this implementation, Synapse won't send a profile query over federation if it doesn't believe it already shares a room with the profile's owner, though.
      
      Groups have been intentionally omitted from this commit.
      c0e0740b
  5. Aug 13, 2018
  6. Aug 10, 2018
  7. Aug 09, 2018
  8. Jul 09, 2018
  9. Apr 30, 2018
    • Adrian Tschira's avatar
      Burminate v1auth · 6495dbb3
      Adrian Tschira authored
      
      This closes #2602
      
      v1auth was created to account for the differences in status code between
      the v1 and v2_alpha revisions of the protocol (401 vs 403 for invalid
      tokens). However since those protocols were merged, this makes the r0
      version/endpoint internally inconsistent, and violates the
      specification for the r0 endpoint.
      
      This might break clients that rely on this inconsistency with the
      specification. This is said to affect the legacy angular reference
      client. However, I feel that restoring parity with the spec is more
      important. Either way, it is critical to inform developers about this
      change, in case they rely on the illegal behaviour.
      
      Signed-off-by: default avatarAdrian Tschira <nota@notafile.com>
      6495dbb3
  10. Mar 13, 2018
  11. Aug 25, 2017
  12. Jul 26, 2016
  13. Mar 11, 2016
  14. Mar 03, 2016
  15. Feb 19, 2016
  16. Jan 11, 2016
    • Daniel Wagner-Hall's avatar
      Introduce a Requester object · 2110e35f
      Daniel Wagner-Hall authored
      This tracks data about the entity which made the request. This is
      instead of passing around a tuple, which requires call-site
      modifications every time a new piece of optional context is passed
      around.
      
      I tried to introduce a User object. I gave up.
      2110e35f
  17. Jan 07, 2016
  18. Nov 04, 2015
    • Daniel Wagner-Hall's avatar
      Allow guests to register and call /events?room_id= · f522f50a
      Daniel Wagner-Hall authored
      This follows the same flows-based flow as regular registration, but as
      the only implemented flow has no requirements, it auto-succeeds. In the
      future, other flows (e.g. captcha) may be required, so clients should
      treat this like the regular registration flow choices.
      f522f50a
  19. Mar 24, 2015
  20. Feb 11, 2015
  21. Jan 28, 2015
  22. Jan 23, 2015
  23. Jan 22, 2015
  24. Oct 15, 2014
  25. Sep 26, 2014
  26. Sep 12, 2014
  27. Sep 03, 2014
  28. Aug 31, 2014
    • Matthew Hodgson's avatar
      change the world: make the default matrix API URL prefix /_matrix rather than... · 8fe912d9
      Matthew Hodgson authored
      change the world: make the default matrix API URL prefix /_matrix rather than /matrix to make it easier for existing websites to mount a HS in their namespace without collisions.
      
      perl -pi -e 's#/matrix#/_matrix#g' ./cmdclient/console.py ./docs/client-server/howto.rst ./docs/client-server/specification.rst ./docs/client-server/swagger_matrix/directory ./docs/client-server/swagger_matrix/events ./docs/client-server/swagger_matrix/login ./docs/client-server/swagger_matrix/presence ./docs/client-server/swagger_matrix/profile ./docs/client-server/swagger_matrix/registration ./docs/client-server/swagger_matrix/rooms ./docs/server-server/specification.rst ./graph/graph.py ./jsfiddles/create_room_send_msg/demo.js ./jsfiddles/event_stream/demo.js ./jsfiddles/example_app/demo.js ./jsfiddles/register_login/demo.js ./jsfiddles/room_memberships/demo.js ./synapse/api/urls.py ./tests/federation/test_federation.py ./tests/handlers/test_presence.py ./tests/handlers/test_typing.py ./tests/rest/test_events.py ./tests/rest/test_presence.py ./tests/rest/test_profile.py ./tests/rest/test_rooms.py ./webclient/components/fileUpload/file-upload-service.js ./webclient/components/matrix/matrix-service.js
      8fe912d9
  29. Aug 19, 2014
  30. Aug 18, 2014
  31. Aug 14, 2014
  32. Aug 13, 2014
  33. Aug 12, 2014
Loading