1
0
mirror of https://github.com/matrix-org/matrix-authentication-service.git synced 2025-11-20 12:02:22 +03:00
Commit Graph

1549 Commits

Author SHA1 Message Date
Quentin Gliech
d58dab702b oauth2-types: urn:ietf:params:oauth:grant-type:jwt-bearer 2022-12-05 19:39:51 +01:00
Quentin Gliech
989e464dd0 WIP: Provider list on the login page 2022-12-05 19:39:51 +01:00
Quentin Gliech
df83cdc9a1 mas-cli manage set-password subcommand 2022-12-05 19:39:51 +01:00
Quentin Gliech
2e7112ef13 GraphQL API 2022-12-05 19:39:51 +01:00
Quentin Gliech
07636dd9e7 Tidy up upstream linking templates 2022-12-05 19:39:51 +01:00
Quentin Gliech
fcb6190a56 Simplify route error handling 2022-12-05 19:39:51 +01:00
Quentin Gliech
28bfce7e45 Save the ID token during an upstream authorization 2022-12-05 19:39:51 +01:00
Quentin Gliech
bf432a31e1 OIDC account linking and login 2022-12-05 19:39:51 +01:00
Quentin Gliech
22a337cd45 WIP: handle account linking 2022-12-05 19:39:51 +01:00
Quentin Gliech
cde9187adc Lookup and save upstream links 2022-12-05 19:39:51 +01:00
Quentin Gliech
e8c8d0bf8a Remove the ServerLayer from mas-http 2022-12-05 19:39:51 +01:00
Quentin Gliech
4227fa7a83 Add a global HTTP client factory 2022-12-05 19:39:51 +01:00
Quentin Gliech
d514a8922c Cleanup HTTP client building 2022-12-05 19:39:51 +01:00
Quentin Gliech
16088fc11c Refactor the provider client credentials extraction 2022-12-05 19:39:51 +01:00
Quentin Gliech
bedcf44741 WIP: upstream OIDC provider support 2022-12-05 19:39:51 +01:00
Quentin Gliech
7f9be07e8d Move the BoxCloneSyncService to mas-http 2022-12-05 19:39:51 +01:00
dependabot[bot]
51ef2a2e55 Bump tower-http from 0.3.4 to 0.3.5
Bumps [tower-http](https://github.com/tower-rs/tower-http) from 0.3.4 to 0.3.5.
- [Release notes](https://github.com/tower-rs/tower-http/releases)
- [Commits](https://github.com/tower-rs/tower-http/compare/tower-http-0.3.4...tower-http-0.3.5)

---
updated-dependencies:
- dependency-name: tower-http
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-03 12:12:29 +01:00
dependabot[bot]
20c9fb2d98 Bump axum-extra from 0.4.1 to 0.4.2
Bumps [axum-extra](https://github.com/tokio-rs/axum) from 0.4.1 to 0.4.2.
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/axum/compare/axum-extra-v0.4.1...axum-extra-v0.4.2)

---
updated-dependencies:
- dependency-name: axum-extra
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-12-03 12:12:16 +01:00
Quentin Gliech
95a879585b Make the OIDC issuer a string instead of a URL 2022-12-02 18:04:07 +01:00
Quentin Gliech
68b477cae1 Apply suggestions from code review
Co-authored-by: Kévin Commaille <76261501+zecakeh@users.noreply.github.com>
2022-12-01 14:34:19 +01:00
Quentin Gliech
0ca4366f75 Use associated error type in claims validator instead of anyhow. 2022-12-01 14:34:19 +01:00
Kévin Commaille
f71f68c926 Add OneOrMany contains claim validator 2022-12-01 11:28:07 +01:00
Kévin Commaille
a2a3b3954e Add equality claim validator 2022-12-01 11:28:07 +01:00
Kévin Commaille
db25574a96 Make sure Scope and InvalidScope are reexported from mas-oidc-client 2022-12-01 10:45:38 +01:00
Kévin Commaille
66055b044e Make sure all types of oauth2-types are documented 2022-12-01 10:45:38 +01:00
dependabot[bot]
c02f59bbaf Bump async-graphql from 5.0.1 to 5.0.2
Bumps [async-graphql](https://github.com/async-graphql/async-graphql) from 5.0.1 to 5.0.2.
- [Release notes](https://github.com/async-graphql/async-graphql/releases)
- [Changelog](https://github.com/async-graphql/async-graphql/blob/master/CHANGELOG.md)
- [Commits](https://github.com/async-graphql/async-graphql/commits)

---
updated-dependencies:
- dependency-name: async-graphql
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-30 22:19:48 +01:00
dependabot[bot]
c0ab8c1b10 Bump axum-extra from 0.4.0 to 0.4.1
Bumps [axum-extra](https://github.com/tokio-rs/axum) from 0.4.0 to 0.4.1.
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/axum/compare/axum-extra-v0.4.0...axum-extra-v0.4.1)

---
updated-dependencies:
- dependency-name: axum-extra
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-30 00:07:19 +01:00
dependabot[bot]
f6fee1aaf8 Bump axum from 0.6.0 to 0.6.1
Bumps [axum](https://github.com/tokio-rs/axum) from 0.6.0 to 0.6.1.
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/axum/compare/axum-v0.6.0...axum-v0.6.1)

---
updated-dependencies:
- dependency-name: axum
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-29 23:48:02 +01:00
dependabot[bot]
a9cbb41a97 Bump async-trait from 0.1.58 to 0.1.59
Bumps [async-trait](https://github.com/dtolnay/async-trait) from 0.1.58 to 0.1.59.
- [Release notes](https://github.com/dtolnay/async-trait/releases)
- [Commits](https://github.com/dtolnay/async-trait/compare/0.1.58...0.1.59)

---
updated-dependencies:
- dependency-name: async-trait
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-29 22:33:19 +01:00
dependabot[bot]
e492d8c653 Bump clap from 4.0.27 to 4.0.29
Bumps [clap](https://github.com/clap-rs/clap) from 4.0.27 to 4.0.29.
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/clap-rs/clap/compare/v4.0.27...v4.0.29)

---
updated-dependencies:
- dependency-name: clap
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-29 22:33:03 +01:00
dependabot[bot]
c4e8a9c9b9 Bump async-graphql from 5.0.0 to 5.0.1
Bumps [async-graphql](https://github.com/async-graphql/async-graphql) from 5.0.0 to 5.0.1.
- [Release notes](https://github.com/async-graphql/async-graphql/releases)
- [Changelog](https://github.com/async-graphql/async-graphql/blob/master/CHANGELOG.md)
- [Commits](https://github.com/async-graphql/async-graphql/commits)

---
updated-dependencies:
- dependency-name: async-graphql
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-29 09:38:36 +01:00
Quentin Gliech
dfcca89d30 Bump axum to 0.6.0 2022-11-29 09:37:12 +01:00
dependabot[bot]
b8489936ba Bump clap from 4.0.26 to 4.0.27
Bumps [clap](https://github.com/clap-rs/clap) from 4.0.26 to 4.0.27.
- [Release notes](https://github.com/clap-rs/clap/releases)
- [Changelog](https://github.com/clap-rs/clap/blob/master/CHANGELOG.md)
- [Commits](https://github.com/clap-rs/clap/compare/v4.0.26...v4.0.27)

---
updated-dependencies:
- dependency-name: clap
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-29 09:10:29 +01:00
dependabot[bot]
e0021af09c Bump async-graphql from 4.0.16 to 5.0.0
Bumps [async-graphql](https://github.com/async-graphql/async-graphql) from 4.0.16 to 5.0.0.
- [Release notes](https://github.com/async-graphql/async-graphql/releases)
- [Changelog](https://github.com/async-graphql/async-graphql/blob/master/CHANGELOG.md)
- [Commits](https://github.com/async-graphql/async-graphql/commits/v5.0.0)

---
updated-dependencies:
- dependency-name: async-graphql
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-29 09:10:21 +01:00
dependabot[bot]
6ccfa6d9cb Bump insta from 1.21.1 to 1.21.2
Bumps [insta](https://github.com/mitsuhiko/insta) from 1.21.1 to 1.21.2.
- [Release notes](https://github.com/mitsuhiko/insta/releases)
- [Changelog](https://github.com/mitsuhiko/insta/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mitsuhiko/insta/compare/1.21.1...1.21.2)

---
updated-dependencies:
- dependency-name: insta
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-29 09:10:16 +01:00
dependabot[bot]
11efae004e Bump serde from 1.0.147 to 1.0.148
Bumps [serde](https://github.com/serde-rs/serde) from 1.0.147 to 1.0.148.
- [Release notes](https://github.com/serde-rs/serde/releases)
- [Commits](https://github.com/serde-rs/serde/compare/v1.0.147...v1.0.148)

---
updated-dependencies:
- dependency-name: serde
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-29 09:10:09 +01:00
dependabot[bot]
8076990c3b Bump serde_json from 1.0.88 to 1.0.89
Bumps [serde_json](https://github.com/serde-rs/json) from 1.0.88 to 1.0.89.
- [Release notes](https://github.com/serde-rs/json/releases)
- [Commits](https://github.com/serde-rs/json/compare/v1.0.88...v1.0.89)

---
updated-dependencies:
- dependency-name: serde_json
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-24 08:32:02 +01:00
Kévin Commaille
90d0e12b7f Create mas-oidc-client crate
Methods to interact as an RP with an OIDC OP.
2022-11-21 16:12:35 +01:00
Kévin Commaille
c590e8df92 Don't leak secrets in requests Debug format 2022-11-21 16:12:35 +01:00
Kévin Commaille
5cff55c099 Export NoKeyWorked error type 2022-11-21 16:12:35 +01:00
dependabot[bot]
f1bd7675a1 Bump bytes from 1.2.1 to 1.3.0
Bumps [bytes](https://github.com/tokio-rs/bytes) from 1.2.1 to 1.3.0.
- [Release notes](https://github.com/tokio-rs/bytes/releases)
- [Changelog](https://github.com/tokio-rs/bytes/blob/master/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/bytes/commits)

---
updated-dependencies:
- dependency-name: bytes
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-21 15:09:28 +01:00
Quentin Gliech
809f836bb4 Migrate to axum 0.6.0-rc.5 2022-11-21 15:04:16 +01:00
dependabot[bot]
41a3d72ace Bump axum from 0.6.0-rc.4 to 0.6.0-rc.5
Bumps [axum](https://github.com/tokio-rs/axum) from 0.6.0-rc.4 to 0.6.0-rc.5.
- [Release notes](https://github.com/tokio-rs/axum/releases)
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tokio-rs/axum/compare/axum-v0.6.0-rc.4...axum-v0.6.0-rc.5)

---
updated-dependencies:
- dependency-name: axum
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-21 15:04:16 +01:00
Quentin Gliech
9ccc8b1acb Disable the Prometheus feature by default
It remains enabled in the Docker image, but this avoids having to have
protoc installed to build the binary
2022-11-19 00:11:04 +01:00
Quentin Gliech
ef42c2d6a9 Also disable otlp exporter by default 2022-11-18 23:47:47 +01:00
dependabot[bot]
e75cd4fd05 Bump tokio from 1.21.2 to 1.22.0
Bumps [tokio](https://github.com/tokio-rs/tokio) from 1.21.2 to 1.22.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases)
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.21.2...tokio-1.22.0)

---
updated-dependencies:
- dependency-name: tokio
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-11-18 23:22:14 +01:00
Quentin Gliech
9c0ece7512 Do not embed the templates and static files in the binary 2022-11-18 22:37:55 +01:00
Quentin Gliech
834214bcac Do not embed the WASM-compiled policies in the binary 2022-11-18 22:37:55 +01:00
Quentin Gliech
a86798d2b3 Switch to camino's Utf8Path* instead of std::path::Path* 2022-11-18 19:02:26 +01:00
Quentin Gliech
c76a1dd2e7 Bump the latest axum rc 2022-11-18 14:57:22 +01:00