0e21f00d17
Return reason for invalid_client_metadata in HTTP response ( #298 )
2022-07-08 21:11:54 +00:00
ba90ee2614
Bump dependencies
2022-07-04 18:27:18 +02:00
be3662d7dc
Bump lettre from 0.10.0-rc.7 to 0.10.0
...
Bumps [lettre](https://github.com/lettre/lettre ) from 0.10.0-rc.7 to 0.10.0.
- [Release notes](https://github.com/lettre/lettre/releases )
- [Changelog](https://github.com/lettre/lettre/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lettre/lettre/compare/v0.10.0-rc.7...v0.10.0 )
---
updated-dependencies:
- dependency-name: lettre
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-07-04 18:17:07 +02:00
4870d1e899
Fix some false-positive clippy lints
...
Those were introduced in clippy 1.62 (under clippy::pedantic) and are in
proc-macro generated code
2022-07-01 16:36:35 +02:00
52a400eb9e
Bump serde_json from 1.0.81 to 1.0.82
...
Bumps [serde_json](https://github.com/serde-rs/json ) from 1.0.81 to 1.0.82.
- [Release notes](https://github.com/serde-rs/json/releases )
- [Commits](https://github.com/serde-rs/json/compare/v1.0.81...v1.0.82 )
---
updated-dependencies:
- dependency-name: serde_json
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-30 19:12:20 +02:00
43f0336b92
Bump axum from 0.5.9 to 0.5.10
...
Bumps [axum](https://github.com/tokio-rs/axum ) from 0.5.9 to 0.5.10.
- [Release notes](https://github.com/tokio-rs/axum/releases )
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md )
- [Commits](https://github.com/tokio-rs/axum/compare/axum-v0.5.9...axum-v0.5.10 )
---
updated-dependencies:
- dependency-name: axum
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-29 09:35:58 +02:00
821182acd1
Bump dependencies and bumps MSRV to 1.60
2022-06-27 23:37:21 +02:00
27fa4fef4f
Bump dependencies
2022-06-27 11:33:21 +02:00
fee9d46dfc
Bump sqlx from 0.5.13 to 0.6.0
2022-06-27 11:11:29 +02:00
2ed22a618a
Bump anyhow from 1.0.57 to 1.0.58
...
Bumps [anyhow](https://github.com/dtolnay/anyhow ) from 1.0.57 to 1.0.58.
- [Release notes](https://github.com/dtolnay/anyhow/releases )
- [Commits](https://github.com/dtolnay/anyhow/compare/1.0.57...1.0.58 )
---
updated-dependencies:
- dependency-name: anyhow
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-23 18:33:39 +02:00
50af460e22
Use unstable prefix for MSC3824 ( #251 )
2022-06-19 18:37:50 +00:00
9e3f43f1f0
Move from MSC3824 actions to org.matrix.msc3824.delegated_oidc_compatibility flag ( #250 )
...
Co-authored-by: Quentin Gliech <quenting@element.io >
2022-06-15 15:49:03 +00:00
5632f6ba99
feat: support for MSC3824 action param on SSO redirect ( #248 )
...
Co-authored-by: Quentin Gliech <quenting@element.io >
2022-06-14 11:34:56 +00:00
482bfeecc2
Bump axum-extra from 0.3.3 to 0.3.4
...
Bumps [axum-extra](https://github.com/tokio-rs/axum ) from 0.3.3 to 0.3.4.
- [Release notes](https://github.com/tokio-rs/axum/releases )
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md )
- [Commits](https://github.com/tokio-rs/axum/compare/axum-extra-v0.3.3...axum-extra-v0.3.4 )
---
updated-dependencies:
- dependency-name: axum-extra
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-09 12:39:21 +02:00
3f9863e7d3
Bump tracing from 0.1.34 to 0.1.35
...
Bumps [tracing](https://github.com/tokio-rs/tracing ) from 0.1.34 to 0.1.35.
- [Release notes](https://github.com/tokio-rs/tracing/releases )
- [Commits](https://github.com/tokio-rs/tracing/compare/tracing-0.1.34...tracing-0.1.35 )
---
updated-dependencies:
- dependency-name: tracing
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-09 11:40:21 +02:00
b1a17194b7
Bump axum from 0.5.6 to 0.5.7
...
Bumps [axum](https://github.com/tokio-rs/axum ) from 0.5.6 to 0.5.7.
- [Release notes](https://github.com/tokio-rs/axum/releases )
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md )
- [Commits](https://github.com/tokio-rs/axum/compare/axum-v0.5.6...axum-v0.5.7 )
---
updated-dependencies:
- dependency-name: axum
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-09 11:40:05 +02:00
a0573feedb
Bump tower-http from 0.3.3 to 0.3.4
...
Bumps [tower-http](https://github.com/tower-rs/tower-http ) from 0.3.3 to 0.3.4.
- [Release notes](https://github.com/tower-rs/tower-http/releases )
- [Commits](https://github.com/tower-rs/tower-http/compare/tower-http-0.3.3...tower-http-0.3.4 )
---
updated-dependencies:
- dependency-name: tower-http
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-07 14:05:50 +02:00
274739b537
Bump tokio from 1.19.0 to 1.19.2
...
Bumps [tokio](https://github.com/tokio-rs/tokio ) from 1.19.0 to 1.19.2.
- [Release notes](https://github.com/tokio-rs/tokio/releases )
- [Commits](https://github.com/tokio-rs/tokio/commits )
---
updated-dependencies:
- dependency-name: tokio
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-07 14:05:45 +02:00
13e78e3caf
Bump lettre from 0.10.0-rc.6 to 0.10.0-rc.7
...
Bumps [lettre](https://github.com/lettre/lettre ) from 0.10.0-rc.6 to 0.10.0-rc.7.
- [Release notes](https://github.com/lettre/lettre/releases )
- [Changelog](https://github.com/lettre/lettre/blob/master/CHANGELOG.md )
- [Commits](https://github.com/lettre/lettre/compare/v0.10.0-rc.6...v0.10.0-rc.7 )
---
updated-dependencies:
- dependency-name: lettre
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-07 14:05:39 +02:00
b94983ca41
Bump tokio from 1.18.2 to 1.19.0
...
Bumps [tokio](https://github.com/tokio-rs/tokio ) from 1.18.2 to 1.19.0.
- [Release notes](https://github.com/tokio-rs/tokio/releases )
- [Commits](https://github.com/tokio-rs/tokio/compare/tokio-1.18.2...tokio-1.19.0 )
---
updated-dependencies:
- dependency-name: tokio
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-04 15:52:31 +02:00
e694932daf
Handle password strength verification through OPA
2022-06-03 16:14:26 +02:00
7c8893e596
Switch the policies to a violation list based approach
...
This allows policies to give proper feedback on form fields
2022-06-03 13:37:20 +02:00
071055ad18
Embed the default policy in the binary
2022-06-03 13:37:20 +02:00
a2b53f0395
Run OPA policies during registration
2022-06-03 13:37:20 +02:00
aab1f49374
Support for applying OPA policies during client registration
2022-06-03 13:37:20 +02:00
959466a5ba
Bump serde_with from 1.13.0 to 1.14.0
...
Bumps [serde_with](https://github.com/jonasbb/serde_with ) from 1.13.0 to 1.14.0.
- [Release notes](https://github.com/jonasbb/serde_with/releases )
- [Commits](https://github.com/jonasbb/serde_with/compare/v1.13.0...v1.14.0 )
---
updated-dependencies:
- dependency-name: serde_with
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-02 16:29:41 +02:00
7cba5f7e67
Bump hyper from 0.14.18 to 0.14.19
...
Bumps [hyper](https://github.com/hyperium/hyper ) from 0.14.18 to 0.14.19.
- [Release notes](https://github.com/hyperium/hyper/releases )
- [Changelog](https://github.com/hyperium/hyper/blob/master/CHANGELOG.md )
- [Commits](https://github.com/hyperium/hyper/compare/v0.14.18...v0.14.19 )
---
updated-dependencies:
- dependency-name: hyper
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-06-02 16:29:30 +02:00
e0c4b39482
Add an email field in the registration form
2022-06-02 16:18:55 +02:00
125afd61c0
Make email verification mandatory
2022-06-02 16:18:55 +02:00
89597dbf81
Switch email verification to a code-based flow
2022-06-02 16:18:55 +02:00
35fa7c732a
Implementation of MSC3824 actions for compat ( #221 )
...
Co-authored-by: Quentin Gliech <quenting@element.io >
2022-05-31 09:49:52 +00:00
bfc20b6faa
Have a better error on registration if the username is already taken
2022-05-23 14:36:38 +02:00
f05bd80e14
Advertise m.login.token as compat login method
2022-05-23 10:42:25 +02:00
99ac59bc5d
Make the sign out buttons keep the current action context
2022-05-23 10:42:25 +02:00
af4f01b769
Check timings when validating an SSO login
...
- exchanging a token twice should not work
- exchanging a token more than 30s after its fullfillment should not
work
- exchanging a pending token should not work
- fullfilling a login more than 30min after its creation should not
work
- also have better errors in some cases
2022-05-23 10:42:25 +02:00
7ce0d894f7
Perform some checks on the redirectUrl
2022-05-23 10:42:25 +02:00
1d61a94da4
Have a consent screen before continuing the SSO login
2022-05-23 10:42:25 +02:00
033d60eb73
Legacy login via m.login.sso
2022-05-23 10:42:25 +02:00
8e731c49d9
Bump axum-extra from 0.3.2 to 0.3.3
...
Bumps [axum-extra](https://github.com/tokio-rs/axum ) from 0.3.2 to 0.3.3.
- [Release notes](https://github.com/tokio-rs/axum/releases )
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md )
- [Commits](https://github.com/tokio-rs/axum/compare/axum-extra-v0.3.2...axum-extra-v0.3.3 )
---
updated-dependencies:
- dependency-name: axum-extra
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-05-19 10:22:57 +02:00
0fcecfa7fb
Handle legacy /refresh
2022-05-19 10:17:49 +02:00
309c89fc4f
Handle legacy token expiration & refresh tokens
2022-05-19 10:17:49 +02:00
c4fa87e457
Better data-model for compat sessions & devices
2022-05-19 10:17:49 +02:00
076d4b8d13
Split compat and api routers
2022-05-19 10:17:49 +02:00
01cdb9a02a
Appease cargo fmt
2022-05-19 10:17:49 +02:00
660b2d5232
Handle legacy /logout
2022-05-19 10:17:49 +02:00
1aff98bdb3
Working legacy login endpoint
2022-05-19 10:17:49 +02:00
1ebdd0b731
WIP: Handle /login
2022-05-19 10:17:49 +02:00
b288b32011
Bump axum-macros from 0.2.1 to 0.2.2
...
Bumps [axum-macros](https://github.com/tokio-rs/axum ) from 0.2.1 to 0.2.2.
- [Release notes](https://github.com/tokio-rs/axum/releases )
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md )
- [Commits](https://github.com/tokio-rs/axum/compare/axum-macros-v0.2.1...axum-macros-v0.2.2 )
---
updated-dependencies:
- dependency-name: axum-macros
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-05-19 09:02:17 +02:00
1129448e59
Bump axum from 0.5.5 to 0.5.6
...
Bumps [axum](https://github.com/tokio-rs/axum ) from 0.5.5 to 0.5.6.
- [Release notes](https://github.com/tokio-rs/axum/releases )
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md )
- [Commits](https://github.com/tokio-rs/axum/compare/axum-v0.5.5...axum-v0.5.6 )
---
updated-dependencies:
- dependency-name: axum
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-05-17 17:42:34 +02:00
ae7392218a
Bump axum-extra from 0.3.1 to 0.3.2
...
Bumps [axum-extra](https://github.com/tokio-rs/axum ) from 0.3.1 to 0.3.2.
- [Release notes](https://github.com/tokio-rs/axum/releases )
- [Changelog](https://github.com/tokio-rs/axum/blob/main/CHANGELOG.md )
- [Commits](https://github.com/tokio-rs/axum/compare/axum-extra-v0.3.1...axum-extra-v0.3.2 )
---
updated-dependencies:
- dependency-name: axum-extra
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
2022-05-17 17:05:26 +02:00