52 Commits

Author	SHA1	Message	Date
Quentin Gliech	5126d36b2e	Add upstream OAuth 2.0 providers name and branding	2023-11-20 17:23:02 +01:00
Quentin Gliech	7315dd9a7a	Allow endpoints and discovery mode override for upstream oauth2 providers ... This time, at the configuration and database level	2023-11-17 16:18:39 +01:00
Quentin Gliech	89420a2cfc	Refactor the upstream link provider template logic ... Also adds tests for new account registration through an upstream oauth2 provider	2023-11-13 14:11:30 +01:00
Quentin Gliech	9c94e11e68	Check for existing users ahead of time on upstream OAuth2 registration	2023-11-13 14:11:30 +01:00
Quentin Gliech	6ded397977	Use minijinja templates to map OIDC claims to user attributes	2023-11-08 12:05:58 +01:00
Quentin Gliech	a404398c2c	Polish all forms and add nice page headings to most screens	2023-10-30 15:55:15 +01:00
Quentin Gliech	9b5c8fb44b	Allow running the authentication service on a different base path	2023-10-06 14:07:55 +02:00
Quentin Gliech	1feafc1d13	handlers/templates: infer the language from the Accept-Language browser header	2023-10-05 19:29:23 +02:00
Quentin Gliech	995bdfc13b	templates: replace tera with minijinja	2023-10-05 19:29:23 +02:00
Quentin Gliech	0bb34ed3e0	Add the Sentry event ID in error response headers	2023-09-08 15:19:43 +02:00
Quentin Gliech	ae3213fe87	Make the email verification state more configurable on upstream OAuth 2.0 registration ... This also marks the email as primary	2023-08-31 14:20:06 +02:00
Quentin Gliech	23571e87ea	Run the registration policy on upstream OAuth registration	2023-08-30 19:39:39 +02:00
Quentin Gliech	5d3b8cd92f	Store the browser user-agent when starting a browser session	2023-08-29 17:38:01 +02:00
Quentin Gliech	d9a12de8a3	Save the authentication method on each authorization ... This will help us logging out of the upstream.	2023-08-28 17:14:59 +02:00
Quentin Gliech	a39f71c181	Handle cookies better by setting the right flags & expiration	2023-08-25 14:35:46 +02:00
Quentin Gliech	ca3460b49e	Skip the "continue" screens on upstream IDP logins for new accounts	2023-08-25 10:56:10 +02:00
Quentin Gliech	40b49cdd10	Add a way to lock users	2023-08-03 14:06:34 +02:00
Quentin Gliech	802cf142fd	Remove the last authentication from the browser session model	2023-07-21 19:50:30 +02:00
Quentin Gliech	e1a5471262	Fix the upstream oauth registration form	2023-06-30 11:24:26 +02:00
Quentin Gliech	9d5c2a40a1	Pass the claims import preferences on the storage layer	2023-06-26 17:24:56 +02:00
Quentin Gliech	31788a95f2	Save the imported attributes	2023-06-26 17:24:56 +02:00
Quentin Gliech	c183830489	Ground work to import upstream OIDC claims on registration.	2023-06-26 17:24:56 +02:00
Quentin Gliech	8a2be43fe7	Proactively provision users on registration & sync threepids	2023-04-14 10:22:22 +02:00
Quentin Gliech	87914cbcb3	Capture better errors in Sentry	2023-01-31 16:25:15 +01:00
Quentin Gliech	875025467e	Log more errors and setup Sentry integration	2023-01-30 18:04:44 +01:00
Quentin Gliech	6a8c79c497	storage: impl Repository for Box<impl Repository + ?Sized>	2023-01-24 09:51:49 +01:00
Quentin Gliech	a9facab131	Box the repository everywhere	2023-01-20 17:53:04 +01:00
Quentin Gliech	876bc9fcb3	handlers: extract the PgRepository from the request ... Also fix a bunch of clippy errors & doctests	2023-01-18 18:22:13 +01:00
Quentin Gliech	9005931e2a	handlers: box the rng and clock, and extract it from the state	2023-01-18 17:49:59 +01:00
Quentin Gliech	142fdbd45a	storage: make the Clock a trait	2023-01-18 12:20:30 +01:00
Quentin Gliech	73a921cc30	Split the storage trait from the implementation	2023-01-18 10:38:22 +01:00
Quentin Gliech	195203823a	storage: wrap the postgres repository in a struct	2023-01-13 18:03:37 +01:00
Quentin Gliech	35787aa072	data-model: have more structs use a state machine	2023-01-09 18:02:32 +01:00
Quentin Gliech	53172d6a3f	strorage: browser session and user password repositories	2023-01-03 15:58:01 +01:00
Quentin Gliech	13a9d03647	storage: user and user email repository	2023-01-02 15:28:44 +01:00
Quentin Gliech	870a37151f	storage: upstream oauth session repository + unit tests	2022-12-30 15:39:51 +01:00
Quentin Gliech	5969b574e2	WIP: repository pattern for upstream oauth2 links	2022-12-30 10:16:22 +01:00
Quentin Gliech	533cabe005	Use the new password manager	2022-12-14 16:04:36 +01:00
Quentin Gliech	56d43b0166	storage: finish cleaning up the errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	0ea9089f7f	template: more cleanups	2022-12-08 15:29:15 +01:00
Quentin Gliech	68890b7291	handlers: remove most usage of anyhow	2022-12-08 15:29:15 +01:00
Quentin Gliech	b7cad48bbd	storage: unify user operations errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	f7f65e314b	storage: unify the compat login errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	1ddc05ff01	storage: start unifying database errors	2022-12-08 15:29:15 +01:00
Quentin Gliech	feebbd0e97	data-model: simplify users and sessions	2022-12-08 15:29:15 +01:00
Quentin Gliech	23fd833d45	Save the post auth action during upstream OAuth login	2022-12-05 19:39:51 +01:00
Quentin Gliech	4d93f4d4f0	Refactor the upstream oauth session cookie	2022-12-05 19:39:51 +01:00
Quentin Gliech	2e7112ef13	GraphQL API	2022-12-05 19:39:51 +01:00
Quentin Gliech	07636dd9e7	Tidy up upstream linking templates	2022-12-05 19:39:51 +01:00
Quentin Gliech	fcb6190a56	Simplify route error handling	2022-12-05 19:39:51 +01:00