1
0
mirror of https://github.com/matrix-org/matrix-authentication-service.git synced 2025-11-20 12:02:22 +03:00
Commit Graph

95 Commits

Author SHA1 Message Date
Quentin Gliech
3901829ccd Prometheus exporter & other stuff 2022-09-28 11:13:53 +02:00
Quentin Gliech
cc6c6e8bdb Remove the config dependency from the email, templates & handlers crates 2022-09-02 16:01:11 +02:00
Quentin Gliech
8c25dc03ce Move the Encrypter from the config to the keystore 2022-09-02 15:37:46 +02:00
Quentin Gliech
e1d50b818e Add a dedicated keystore crate 2022-09-02 15:37:46 +02:00
Quentin Gliech
29f1b134ae Make the JWK generic over the parameters 2022-09-02 15:37:46 +02:00
Quentin Gliech
c1ed726dc8 Enable the clippy::str_to_string lint 2022-08-08 10:06:20 +02:00
Quentin Gliech
ba6a382f2c Authorization grant policy (#288)
Co-authored-by: Hugh Nimmo-Smith <hughns@matrix.org>
2022-07-21 16:18:59 +00:00
Quentin Gliech
29c5357b18 Fix error introduced by crypto crate upgrade 2022-07-04 18:46:29 +02:00
Quentin Gliech
fee9d46dfc Bump sqlx from 0.5.13 to 0.6.0 2022-06-27 11:11:29 +02:00
Quentin Gliech
eb22c33a7d Remove the login policy (since it is not implemented yet) 2022-06-03 13:37:20 +02:00
Quentin Gliech
7c8893e596 Switch the policies to a violation list based approach
This allows policies to give proper feedback on form fields
2022-06-03 13:37:20 +02:00
Quentin Gliech
071055ad18 Embed the default policy in the binary 2022-06-03 13:37:20 +02:00
Quentin Gliech
aab1f49374 Support for applying OPA policies during client registration 2022-06-03 13:37:20 +02:00
Quentin Gliech
1aff98bdb3 Working legacy login endpoint 2022-05-19 10:17:49 +02:00
Quentin Gliech
9bbb60bcdd Bump Rust dependencies 2022-04-06 19:47:12 +02:00
Quentin Gliech
ed49624c3a Axum migration: WIP client authentication 2022-04-06 17:35:29 +02:00
Quentin Gliech
7c8f8722cd Axum migration: signed cookies, errors, CSRF tokens, sessions 2022-04-06 17:35:29 +02:00
Quentin Gliech
62f633a716 Move clients to the database 2022-03-08 19:07:46 +01:00
Quentin Gliech
035e2d7829 Implement private_key_jwks client authentication
This involves a lot of things, including:
 - better VerifyingKeystore trait
 - better errors in the JOSE crate
 - getting rid of async_trait in some JOSE traits
2022-02-17 15:42:44 +01:00
Quentin Gliech
a45381828c Loads of docs & enabling more clippy lints 2022-02-01 12:02:32 +01:00
Quentin Gliech
dd7449b92e Deny missing docs in the config crates 2022-02-01 10:48:38 +01:00
Quentin Gliech
7e24cd0948 Move secrets and oauth2 clients config 2022-02-01 09:34:55 +01:00
Quentin Gliech
c0e5b66ea4 Move public base URL from oauth2 config to http config 2022-02-01 09:34:55 +01:00
Quentin Gliech
f96c5b0cec Reorganise config crate 2022-02-01 09:34:55 +01:00
Quentin Gliech
05f0756c13 Improve the configuration schema 2022-01-28 11:51:14 +01:00
Quentin Gliech
79d7561d93 Allow loading private keys from files 2022-01-26 18:29:11 +01:00
Quentin Gliech
c3ac36190d Support more key formats in config 2022-01-26 11:10:11 +01:00
Quentin Gliech
1355be8fb8 Add AWS SES backend to send email 2022-01-24 16:31:53 +01:00
Quentin Gliech
93cbad34f5 Actually send emails 2022-01-19 18:00:45 +01:00
Quentin Gliech
f0a7e96875 Add tests for private_key_jwt client auth 2022-01-06 10:04:43 +01:00
Quentin Gliech
a965e488e2 Support private_key_jwt client auth
Which includes having a verifying keystore out of JWKS (and soon out of
a JWKS URI)
2022-01-05 21:07:18 +01:00
Quentin Gliech
f933ace007 New JWT/JOSE crate
Still WIP, needs to handle time related claims
2022-01-04 22:28:00 +01:00
Quentin Gliech
c4a979245b Move to Rust edition 2021
Also bump MSRV to 1.56 and use the same clippy lints in every crate
2021-12-09 22:54:35 +01:00
Quentin Gliech
d8df34db4c Frontend/static files building & serving 2021-12-09 22:09:39 +01:00
Quentin Gliech
c53318eca0 Refactor templates loading & implement templates hot-reload 2021-12-09 14:07:09 +01:00
Quentin Gliech
8df4b315f2 Fix multiple clippy warnings/errors 2021-12-06 10:08:49 +01:00
Quentin Gliech
cf8793da27 Zipkin and Jaeger support 2021-10-14 19:38:57 +02:00
Quentin Gliech
f016019553 Make the OTEL propagator configurable 2021-10-14 18:55:47 +02:00
Quentin Gliech
f9036aecd4 Make telemetry configurable
Also allows opting-out of the OTLP exporter to remove the dependency to
protoc when building.
2021-10-13 16:48:16 +02:00
Quentin Gliech
27ae6a5167 Initial OpenTelemetry tracing support 2021-10-13 13:56:42 +02:00
Quentin Gliech
a1c7b7f82d Add missing file forgotten in ff41ae5762 2021-09-24 09:20:22 +02:00
Quentin Gliech
ff41ae5762 Templates config 2021-09-23 23:51:17 +02:00
Quentin Gliech
3159a9972f Allow loading multiple configuration files 2021-09-17 12:22:03 +02:00
Quentin Gliech
bd441ceef7 Allow splitting database connection options 2021-09-17 12:03:00 +02:00
Quentin Gliech
a44e33931c Split the service in multiple crates 2021-09-16 14:43:56 +02:00