1
0
mirror of https://github.com/matrix-org/matrix-authentication-service.git synced 2025-09-11 22:30:47 +03:00
Commit Graph

2904 Commits

Author SHA1 Message Date
Quentin Gliech
851463d377 Fix the email policy documentation indentation 2024-09-03 17:34:30 +02:00
Marcel
b5ed252573 Apply suggestions on wording 2024-09-03 17:33:10 +02:00
Marcel
7fe70aac80 Document policy settings for changing the policy wasm file 2024-09-03 17:33:10 +02:00
Quentin Gliech
30fdb9992b Don't crash the release process if warnings are emitted 2024-08-30 19:45:25 +02:00
Quentin Gliech
b774e50502 docker: remove redundant target platform 2024-08-30 19:45:25 +02:00
github-actions[bot]
7012e3236d 0.11.0-rc.0 v0.11.0-rc.0 2024-08-30 16:23:52 +00:00
Quentin Gliech
6e32addcfd Update redirect URIs when syncing clients from the config
Fixes #3143
2024-08-30 18:21:33 +02:00
dependabot[bot]
0713630a84 build(deps-dev): bump the types group in /frontend with 2 updates
Bumps the types group in /frontend with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react).


Updates `@types/node` from 22.1.0 to 22.5.1
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@types/react` from 18.3.3 to 18.3.5
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: types
- dependency-name: "@types/react"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: types
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 17:02:24 +02:00
dependabot[bot]
520779e4cd build(deps-dev): bump tailwindcss from 3.4.7 to 3.4.10 in /frontend
Bumps [tailwindcss](https://github.com/tailwindlabs/tailwindcss) from 3.4.7 to 3.4.10.
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/v3.4.10/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/compare/v3.4.7...v3.4.10)

---
updated-dependencies:
- dependency-name: tailwindcss
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 17:02:09 +02:00
Quentin Gliech
baac6c5d97 Fix type error post Tanstack Router upgrade 2024-08-30 16:58:35 +02:00
dependabot[bot]
ee599f8bc8 build(deps): bump the tanstack-router group in /frontend with 3 updates
Bumps the tanstack-router group in /frontend with 3 updates: [@tanstack/react-router](https://github.com/TanStack/router/tree/HEAD/packages/react-router), [@tanstack/router-devtools](https://github.com/TanStack/router/tree/HEAD/packages/router-devtools) and [@tanstack/router-vite-plugin](https://github.com/TanStack/router/tree/HEAD/packages/router-vite-plugin).


Updates `@tanstack/react-router` from 1.46.7 to 1.51.6
- [Release notes](https://github.com/TanStack/router/releases)
- [Commits](https://github.com/TanStack/router/commits/v1.51.6/packages/react-router)

Updates `@tanstack/router-devtools` from 1.46.7 to 1.51.6
- [Release notes](https://github.com/TanStack/router/releases)
- [Commits](https://github.com/TanStack/router/commits/v1.51.6/packages/router-devtools)

Updates `@tanstack/router-vite-plugin` from 1.46.6 to 1.51.6
- [Release notes](https://github.com/TanStack/router/releases)
- [Commits](https://github.com/TanStack/router/commits/v1.51.6/packages/router-vite-plugin)

---
updated-dependencies:
- dependency-name: "@tanstack/react-router"
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: tanstack-router
- dependency-name: "@tanstack/router-devtools"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tanstack-router
- dependency-name: "@tanstack/router-vite-plugin"
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: tanstack-router
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 16:58:35 +02:00
dependabot[bot]
ea0d8ad44a build(deps): bump tokio from 1.39.2 to 1.40.0
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.39.2 to 1.40.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.39.2...tokio-1.40.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 16:48:14 +02:00
dependabot[bot]
9520201c4b build(deps): bump rustls-platform-verifier from 0.3.3 to 0.3.4
Bumps [rustls-platform-verifier](https://github.com/rustls/rustls-platform-verifier) from 0.3.3 to 0.3.4.
- [Release notes](https://github.com/rustls/rustls-platform-verifier/releases)
- [Changelog](https://github.com/rustls/rustls-platform-verifier/blob/main/CHANGELOG)
- [Commits](https://github.com/rustls/rustls-platform-verifier/compare/v/0.3.3...v/0.3.4)

---
updated-dependencies:
- dependency-name: rustls-platform-verifier
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 16:47:56 +02:00
dependabot[bot]
11edbbf25c build(deps): bump camino from 1.1.7 to 1.1.9
Bumps [camino](https://github.com/camino-rs/camino) from 1.1.7 to 1.1.9.
- [Release notes](https://github.com/camino-rs/camino/releases)
- [Changelog](https://github.com/camino-rs/camino/blob/main/CHANGELOG.md)
- [Commits](https://github.com/camino-rs/camino/compare/camino-1.1.7...camino-1.1.9)

---
updated-dependencies:
- dependency-name: camino
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 16:47:40 +02:00
dependabot[bot]
8e711ddb4d build(deps): bump reqwest from 0.12.5 to 0.12.7
Bumps [reqwest](https://github.com/seanmonstar/reqwest) from 0.12.5 to 0.12.7.
- [Release notes](https://github.com/seanmonstar/reqwest/releases)
- [Changelog](https://github.com/seanmonstar/reqwest/blob/master/CHANGELOG.md)
- [Commits](https://github.com/seanmonstar/reqwest/compare/v0.12.5...v0.12.7)

---
updated-dependencies:
- dependency-name: reqwest
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 16:47:16 +02:00
dependabot[bot]
a5648da57c build(deps): bump libc from 0.2.155 to 0.2.158
Bumps [libc](https://github.com/rust-lang/libc) from 0.2.155 to 0.2.158.
- [Release notes](https://github.com/rust-lang/libc/releases)
- [Changelog](https://github.com/rust-lang/libc/blob/0.2.158/CHANGELOG.md)
- [Commits](https://github.com/rust-lang/libc/compare/0.2.155...0.2.158)

---
updated-dependencies:
- dependency-name: libc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 16:47:05 +02:00
dependabot[bot]
ef3967c8df build(deps): bump @urql/core in /frontend in the urql group
Bumps the urql group in /frontend with 1 update: [@urql/core](https://github.com/urql-graphql/urql/tree/HEAD/packages/core).


Updates `@urql/core` from 5.0.5 to 5.0.6
- [Release notes](https://github.com/urql-graphql/urql/releases)
- [Changelog](https://github.com/urql-graphql/urql/blob/main/packages/core/CHANGELOG.md)
- [Commits](https://github.com/urql-graphql/urql/commits/@urql/core@5.0.6/packages/core)

---
updated-dependencies:
- dependency-name: "@urql/core"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: urql
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 16:45:03 +02:00
dependabot[bot]
730925ffcb build(deps): bump @fontsource/inconsolata
Bumps the fontsource group in /frontend with 1 update: [@fontsource/inconsolata](https://github.com/fontsource/font-files/tree/HEAD/fonts/google/inconsolata).


Updates `@fontsource/inconsolata` from 5.0.18 to 5.0.19
- [Changelog](https://github.com/fontsource/font-files/blob/main/fonts/google/inconsolata/CHANGELOG.md)
- [Commits](https://github.com/fontsource/font-files/commits/HEAD/fonts/google/inconsolata)

---
updated-dependencies:
- dependency-name: "@fontsource/inconsolata"
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: fontsource
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 16:41:53 +02:00
dependabot[bot]
d92c43a507 build(deps): bump clap from 4.5.13 to 4.5.16
Bumps [clap](https://github.com/clap-rs/clap) from 4.5.13 to 4.5.16.
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/clap-rs/clap/compare/clap_complete-v4.5.13...clap_complete-v4.5.16)

---
updated-dependencies:
- dependency-name: clap
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 16:30:28 +02:00
Quentin Gliech
59d0f786d6 Bump sqlx to 0.8.1 2024-08-30 16:29:41 +02:00
sandhose
8b9a892c48 Translations updates 2024-08-30 16:29:26 +02:00
Michael Telatynski
54d5e94bc4 Iterate cross signing reset flows (#3102)
* Handle UIA fallback authDone API for cross signing reset unlock

* Extract VisualList into a more reusable component

* Redesign cross signing reset unlock flow

* Fix block gap

* Hide reset x-signing flow on account view under a collapsible heading

* i18n

* Iterate

* Downgrade Radix react-collapsible

* Fix class names

* Update snapshots
2024-08-30 15:45:10 +02:00
dependabot[bot]
19cef28151 build(deps): bump the i18next group across 1 directory with 3 updates
Bumps the i18next group with 3 updates in the /frontend directory: [i18next](https://github.com/i18next/i18next), [react-i18next](https://github.com/i18next/react-i18next) and [i18next-parser](https://github.com/i18next/i18next-parser).


Updates `i18next` from 23.12.2 to 23.14.0
- [Release notes](https://github.com/i18next/i18next/releases)
- [Changelog](https://github.com/i18next/i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next/compare/v23.12.2...v23.14.0)

Updates `react-i18next` from 15.0.0 to 15.0.1
- [Changelog](https://github.com/i18next/react-i18next/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/react-i18next/compare/v15.0.0...v15.0.1)

Updates `i18next-parser` from 9.0.1 to 9.0.2
- [Release notes](https://github.com/i18next/i18next-parser/releases)
- [Changelog](https://github.com/i18next/i18next-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/i18next/i18next-parser/compare/9.0.1...9.0.2)

---
updated-dependencies:
- dependency-name: i18next
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: i18next
- dependency-name: react-i18next
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: i18next
- dependency-name: i18next-parser
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: i18next
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 15:41:10 +02:00
dependabot[bot]
0d3569532f build(deps-dev): bump vite
Bumps the vite group with 1 update in the /frontend directory: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).


Updates `vite` from 5.3.5 to 5.4.2
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v5.4.2/packages/vite)

---
updated-dependencies:
- dependency-name: vite
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: vite
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 14:04:12 +02:00
Marcel
6d30bc530f Document the email policy in the reference 2024-08-30 13:57:31 +02:00
dependabot[bot]
9c2f852584 build(deps): bump serde_json from 1.0.122 to 1.0.127
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.122 to 1.0.127.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.122...1.0.127)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 13:56:52 +02:00
dependabot[bot]
10540827f3 build(deps): bump serde from 1.0.204 to 1.0.209
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.204 to 1.0.209.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.204...v1.0.209)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 13:56:19 +02:00
dependabot[bot]
9580a54d0e build(deps): bump minijinja from 2.1.1 to 2.2.0
Bumps [minijinja](https://github.com/mitsuhiko/minijinja) from 2.1.1 to 2.2.0.
- [Release notes](https://github.com/mitsuhiko/minijinja/releases)
- [Changelog](https://github.com/mitsuhiko/minijinja/blob/main/CHANGELOG.md)
- [Commits](https://github.com/mitsuhiko/minijinja/compare/2.1.1...2.2.0)

---
updated-dependencies:
- dependency-name: minijinja
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:40:48 +02:00
dependabot[bot]
f2051cc441 build(deps): bump axios from 1.7.2 to 1.7.4 in /frontend
Bumps [axios](https://github.com/axios/axios) from 1.7.2 to 1.7.4.
- [Release notes](https://github.com/axios/axios/releases)
- [Changelog](https://github.com/axios/axios/blob/v1.x/CHANGELOG.md)
- [Commits](https://github.com/axios/axios/compare/v1.7.2...v1.7.4)

---
updated-dependencies:
- dependency-name: axios
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:38:54 +02:00
dependabot[bot]
b43408bc8d build(deps): bump indexmap from 2.3.0 to 2.4.0
Bumps [indexmap](https://github.com/indexmap-rs/indexmap) from 2.3.0 to 2.4.0.
- [Changelog](https://github.com/indexmap-rs/indexmap/blob/master/RELEASES.md)
- [Commits](https://github.com/indexmap-rs/indexmap/compare/2.3.0...2.4.0)

---
updated-dependencies:
- dependency-name: indexmap
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:37:28 +02:00
dependabot[bot]
4b375c875a build(deps-dev): bump the storybook group across 1 directory with 4 updates
Bumps the storybook group with 3 updates in the /frontend directory: [@storybook/addon-essentials](https://github.com/storybookjs/storybook/tree/HEAD/code/addons/essentials), [@storybook/react](https://github.com/storybookjs/storybook/tree/HEAD/code/renderers/react) and [@storybook/react-vite](https://github.com/storybookjs/storybook/tree/HEAD/code/frameworks/react-vite).


Updates `@storybook/addon-essentials` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/addons/essentials)

Updates `@storybook/react` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/renderers/react)

Updates `@storybook/react-vite` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/frameworks/react-vite)

Updates `storybook` from 8.2.7 to 8.2.9
- [Release notes](https://github.com/storybookjs/storybook/releases)
- [Changelog](https://github.com/storybookjs/storybook/blob/next/CHANGELOG.md)
- [Commits](https://github.com/storybookjs/storybook/commits/v8.2.9/code/lib/cli)

---
updated-dependencies:
- dependency-name: "@storybook/addon-essentials"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/react"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: "@storybook/react-vite"
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: storybook
- dependency-name: storybook
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: storybook
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:37:08 +02:00
dependabot[bot]
a65c9b29cb build(deps): bump docker/bake-action from 5.5.0 to 5.7.0
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 5.5.0 to 5.7.0.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/v5.5.0...v5.7.0)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:36:50 +02:00
dependabot[bot]
6bead191e8 build(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v3.5.0...v3.6.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-08-30 10:36:40 +02:00
github-actions[bot]
d3eb5be63e 0.10.0 v0.10.0 2024-08-19 13:02:25 +00:00
Quentin Gliech
62e01883b6 Small documentation fixes
- Removes mentions of the `mas-cli templates save` command
 - Removes the old `experimental` flags
 - Removes the old `policy.data.passwords` configs
 - Document the `policy.data.client_registration` flags
 - Remove references to the pre-built macOS binaries
 - Explains how to get syn2mas
 - State that you need to prepare the database before importing data
 - Clean up the reverse proxy documentation
 - Clarify that you don't need to provede templates/policy/assets
   manually when running the docker image
2024-08-19 13:53:43 +02:00
Quentin Gliech
c8afc48e46 frontend: remove double separator when password auth is disabled 2024-08-13 11:12:11 +02:00
github-actions[bot]
0d81cfd014 0.10.0-rc.0 v0.10.0-rc.0 2024-08-07 18:22:36 +00:00
Quentin Gliech
29d6383c5d admin: rename the can_request_admin field to admin 2024-08-07 20:13:43 +02:00
Quentin Gliech
6189abe7b4 admin: set can_request_admin API 2024-08-07 20:13:43 +02:00
reivilibre
5d4a4a6fb8 Add rate-limiting for account recovery and registration (#3093)
* Add rate-limiting for account recovery and registration

* Rename login ratelimiter `per_address` to `per_ip` for consistency

Co-authored-by: Quentin Gliech <quenting@element.io>
2024-08-07 17:57:36 +00:00
reivilibre
244f8f5e5e Add configuration for rate-limiting of logins, replacing hardcoded limits (#3090) 2024-08-07 18:36:02 +01:00
Quentin Gliech
1bdad262cd Disallow OAuth 2.0 use of the GraphQL API by default 2024-08-07 18:09:51 +02:00
Quentin Gliech
eb4072f3c3 Document the admin API (#3038)
Co-authored-by: Hugh Nimmo-Smith <hughns@matrix.org>
2024-08-07 17:41:46 +02:00
Quentin Gliech
b4eb93558d admin: add simple snapshot test for the list oauth2 sessions endpoint 2024-08-07 17:41:18 +02:00
Quentin Gliech
dd58fffdef admin: add tests for the get OAuth session API 2024-08-07 17:41:18 +02:00
Quentin Gliech
cf9f201337 admin: get OAuth 2.0 session API 2024-08-07 17:41:18 +02:00
Quentin Gliech
4f52840bf3 admin: list OAuth 2.0 sessions API 2024-08-07 17:41:18 +02:00
Quentin Gliech
83e4aa476f admin: setup base for oauth2 sessions endpoints 2024-08-07 17:41:18 +02:00
Quentin Gliech
19d485a68b admin: model definition for the OAuth 2.0 sessions 2024-08-07 17:41:18 +02:00
sandhose
86fbe5c589 Translations updates 2024-08-07 15:53:23 +02:00