Quentin Gliech
21964cbeab
Setup cargo-deny
...
Also try to remove a bunch of duplicate crates
2023-08-14 11:22:52 +02:00
dependabot[bot]
84ca78cf6f
build(deps): bump serde from 1.0.181 to 1.0.183
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.181 to 1.0.183.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.181...v1.0.183 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-08 20:35:57 +02:00
dependabot[bot]
4cdb24ffe4
build(deps): bump serde from 1.0.180 to 1.0.181
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.180 to 1.0.181.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.180...v1.0.181 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-04 23:18:07 +02:00
Quentin Gliech
9b5eddbf97
Merge branch 'main' into quenting/user-lock
2023-08-03 15:20:05 +02:00
dependabot[bot]
ddb45b02ea
build(deps): bump serde from 1.0.177 to 1.0.180
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.177 to 1.0.180.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.177...v1.0.180 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-08-03 15:18:17 +02:00
Quentin Gliech
40b49cdd10
Add a way to lock users
2023-08-03 14:06:34 +02:00
dependabot[bot]
31159c0907
build(deps): bump serde from 1.0.176 to 1.0.177
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.176 to 1.0.177.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.176...v1.0.177 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-27 23:28:07 +02:00
Quentin Gliech
e79da4a949
Bump Rust dependencies and remove unused ones
2023-07-27 17:23:08 +02:00
dependabot[bot]
85659c6c36
build(deps): bump serde from 1.0.171 to 1.0.174
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.171 to 1.0.174.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.171...v1.0.174 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-22 00:17:55 +02:00
Quentin Gliech
802cf142fd
Remove the last authentication from the browser session model
2023-07-21 19:50:30 +02:00
Quentin Gliech
ba0f7ea62c
Upgrade all Rust dependencies
...
This includes breaking changes of sqlx 0.7.0
2023-07-17 19:04:06 +02:00
dependabot[bot]
c068460cd7
build(deps): bump thiserror from 1.0.40 to 1.0.41
...
Bumps [thiserror](https://github.com/dtolnay/thiserror ) from 1.0.40 to 1.0.41.
- [Release notes](https://github.com/dtolnay/thiserror/releases )
- [Commits](https://github.com/dtolnay/thiserror/compare/1.0.40...1.0.41 )
---
updated-dependencies:
- dependency-name: thiserror
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-05 01:15:00 +02:00
dependabot[bot]
725078941a
build(deps): bump serde from 1.0.165 to 1.0.166
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.165 to 1.0.166.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.165...v1.0.166 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-04 00:59:48 +02:00
dependabot[bot]
88e1a677e5
build(deps): bump serde from 1.0.164 to 1.0.165
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.164 to 1.0.165.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.164...v1.0.165 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-07-03 15:43:13 +02:00
Quentin Gliech
de13d3ef19
CLI tool to sync the upstream IDPs with the config
2023-06-26 17:24:56 +02:00
Quentin Gliech
9d5c2a40a1
Pass the claims import preferences on the storage layer
2023-06-26 17:24:56 +02:00
Quentin Gliech
c183830489
Ground work to import upstream OIDC claims on registration.
2023-06-26 17:24:56 +02:00
Quentin Gliech
2a514cf452
Add a admin flag to the compatibility session
...
Also adds a CLI tool to issue a compatibility token.
2023-06-16 15:24:38 +02:00
Quentin Gliech
7e90564d16
Bump Rust dependencies
2023-06-14 12:02:16 +02:00
Quentin Gliech
1993f4cfca
Bump Rust dependencies
2023-05-25 18:15:44 +02:00
Quentin Gliech
047a91907d
Split the mutations and make them use an input object instead of different parameters
2023-04-25 16:39:15 +02:00
Quentin Gliech
a55976eeeb
Fix Device to ScopeToken conversion and test it
2023-04-24 10:42:38 +02:00
Quentin Gliech
d34e01fc67
Provision and delete Matrix devices in OAuth sessions
2023-04-24 10:42:38 +02:00
Quentin Gliech
4baa15bbd3
Bump Rust depdenencies
2023-04-18 23:01:43 +02:00
dependabot[bot]
f232e57a93
build(deps): bump thiserror from 1.0.39 to 1.0.40
...
Bumps [thiserror](https://github.com/dtolnay/thiserror ) from 1.0.39 to 1.0.40.
- [Release notes](https://github.com/dtolnay/thiserror/releases )
- [Commits](https://github.com/dtolnay/thiserror/compare/1.0.39...1.0.40 )
---
updated-dependencies:
- dependency-name: thiserror
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-04-14 12:40:00 +02:00
Kévin Commaille
ccc9884726
Allow redirect URIs with any port for loopback interfaces
2023-04-14 10:22:49 +02:00
Hugh Nimmo-Smith
43bcaf5308
Lint
2023-04-06 16:24:18 +02:00
Hugh Nimmo-Smith
f53369aeae
Handle imported Synapse access/refresh tokens
2023-04-06 16:24:18 +02:00
dependabot[bot]
6fbd352591
build(deps): bump serde from 1.0.156 to 1.0.158
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.156 to 1.0.158.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.156...v1.0.158 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-03-21 17:26:05 +01:00
dependabot[bot]
3372a8ff9a
build(deps): bump serde from 1.0.155 to 1.0.156
...
Bumps [serde](https://github.com/serde-rs/serde ) from 1.0.155 to 1.0.156.
- [Release notes](https://github.com/serde-rs/serde/releases )
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.155...v1.0.156 )
---
updated-dependencies:
- dependency-name: serde
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-03-15 14:51:14 +01:00
Quentin Gliech
83cb9158a0
Fix clippy errors
2023-03-14 10:47:35 +01:00
Quentin Gliech
c6f31d0102
Bump Rust dependencies
2023-03-14 10:47:35 +01:00
Quentin Gliech
97635375cc
handlers: Add test for the compatibility login API
2023-02-24 15:52:21 +01:00
dependabot[bot]
bdce2210ea
build(deps): bump crc from 3.0.0 to 3.0.1
...
Bumps [crc](https://github.com/mrhooray/crc-rs ) from 3.0.0 to 3.0.1.
- [Release notes](https://github.com/mrhooray/crc-rs/releases )
- [Commits](https://github.com/mrhooray/crc-rs/compare/3.0.0...3.0.1 )
---
updated-dependencies:
- dependency-name: crc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-02-02 11:45:20 +01:00
Quentin Gliech
39c126318f
Fix the authorization grant template
...
It previously relied on the client being in the authorization grant,
which is not the case anymore. This commit also adds a test to ensure
we're not breaking this template in the future.
2023-01-31 16:50:48 +01:00
Quentin Gliech
3f4ad789bf
storage-pg: write tests for the OAuth2 repositories
2023-01-25 17:24:34 +01:00
Quentin Gliech
d14ca156ad
storage: split the repository trait
2023-01-24 16:05:14 +01:00
Quentin Gliech
876bc9fcb3
handlers: extract the PgRepository from the request
...
Also fix a bunch of clippy errors & doctests
2023-01-18 18:22:13 +01:00
Quentin Gliech
9005931e2a
handlers: box the rng and clock, and extract it from the state
2023-01-18 17:49:59 +01:00
Quentin Gliech
3798f25f7d
Fix rustdoc lints
2023-01-18 12:25:49 +01:00
Quentin Gliech
73a921cc30
Split the storage trait from the implementation
2023-01-18 10:38:22 +01:00
Quentin Gliech
488a666a8d
storage: remaining oauth2 repositories
...
- authorization grants
- access tokens
- refresh tokens
2023-01-12 18:26:04 +01:00
Quentin Gliech
36396c0b45
storage: repository pattern for the compat layer
2023-01-12 15:41:26 +01:00
Quentin Gliech
9f0c9f1466
storage: cleanup access/refresh token lookups
2023-01-11 12:14:52 +01:00
Quentin Gliech
920869b583
storage: do less joins in compat sessions
2023-01-10 18:49:35 +01:00
Quentin Gliech
35787aa072
data-model: have more structs use a state machine
2023-01-09 18:02:32 +01:00
Quentin Gliech
39cd9a2578
data-model: don't embed the client in the auth grant
2023-01-09 10:49:51 +01:00
Quentin Gliech
fb7c6f4dd1
storage: do less joins on authorization grants and refresh tokens
2023-01-05 16:49:19 +01:00
Quentin Gliech
603a26eabd
storage: oauth2 session repository
2023-01-05 16:44:56 +01:00
Quentin Gliech
e26f75246d
storage: Load with less joins
...
This is done to simplify some queries, to avoid loading more data than
necessary, and in preparation of a proper cache layer
2023-01-04 18:06:17 +01:00