7bd6c87eca 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #2668  from turt2live/travis/whoami  
							
							... 
							
							
							
							Add a route for determining who you are 
							
						 
						
							2017-11-14 09:54:21 +00:00  
				
					
						
							
							
								 
						
							
							
								812c191939 
								
							
								 
							
						 
						
							
							
								
								Remove redundent call  
							
							... 
							
							
							
							Signed-off-by: Travis Ralston <travpc@gmail.com> 
							
						 
						
							2017-11-13 12:44:21 -07:00  
				
					
						
							
							
								 
						
							
							
								2d314b771f 
								
							
								 
							
						 
						
							
							
								
								Add a route for determining who you are  
							
							... 
							
							
							
							Useful for applications which may have an access token, but no idea as to who owns it.
Signed-off-by: Travis Ralston <travpc@gmail.com> 
							
						 
						
							2017-11-12 23:39:38 -07:00  
				
					
						
							
							
								 
						
							
							
								5d15abb120 
								
							
								 
							
						 
						
							
							
								
								Bit more logging  
							
							
							
						 
						
							2017-11-10 16:58:04 +00:00  
				
					
						
							
							
								 
						
							
							
								46790f50cf 
								
							
								 
							
						 
						
							
							
								
								Cache failures in url_preview handler  
							
							... 
							
							
							
							Reshuffle the caching logic in the url_preview handler so that failures are
cached (and to generally simplify things and fix the logcontext leaks). 
							
						 
						
							2017-11-10 16:50:50 +00:00  
				
					
						
							
							
								 
						
							
							
								e508145c9b 
								
							
								 
							
						 
						
							
							
								
								Add some more comments appservice user registration  
							
							... 
							
							
							
							Explain why we don't validate userids registered via app services 
							
						 
						
							2017-11-10 12:39:45 +00:00  
				
					
						
							
							
								 
						
							
							
								e0ebd1e4bd 
								
							
								 
							
						 
						
							
							
								
								Downcase userids for shared-secret registration  
							
							
							
						 
						
							2017-11-10 12:39:05 +00:00  
				
					
						
							
							
								 
						
							
							
								9b599bc18d 
								
							
								 
							
						 
						
							
							
								
								Downcase userid on registration  
							
							... 
							
							
							
							Force username to lowercase before attempting to register
https://github.com/matrix-org/synapse/issues/2660  
							
						 
						
							2017-11-09 22:20:01 +00:00  
				
					
						
							
							
								 
						
							
							
								4e2b2508af 
								
							
								 
							
						 
						
							
							
								
								Register group servlet  
							
							
							
						 
						
							2017-11-09 15:49:42 +00:00  
				
					
						
							
							
								 
						
							
							
								e8814410ef 
								
							
								 
							
						 
						
							
							
								
								Have an explicit API to update room config  
							
							
							
						 
						
							2017-11-08 16:13:27 +00:00  
				
					
						
							
							
								 
						
							
							
								94ff2cda73 
								
									
								
							
								 
							
						 
						
							
							
								
								Revert "Modify group room association API to allow modification of is_public"  
							
							
							
						 
						
							2017-11-08 15:43:34 +00:00  
				
					
						
							
							
								 
						
							
							
								3db5ff69b2 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #2576  from maximevaillancourt/exclude-noscript-url-preview  
							
							... 
							
							
							
							Ignore <noscript> tags when generating URL preview descriptions 
							
						 
						
							2017-11-07 11:09:22 +00:00  
				
					
						
							
							
								 
						
							
							
								6c3a02072b 
								
							
								 
							
						 
						
							
							
								
								support inhibit_login in /register  
							
							... 
							
							
							
							Allow things to pass inhibit_login when registering to ... inhibit logins. 
							
						 
						
							2017-11-02 16:31:07 +00:00  
				
					
						
							
							
								 
						
							
							
								4c8f94ac94 
								
							
								 
							
						 
						
							
							
								
								Allow password_auth_providers to return a callback  
							
							... 
							
							
							
							... so that they have a way to record access tokens. 
							
						 
						
							2017-11-01 16:51:03 +00:00  
				
					
						
							
							
								 
						
							
							
								4f0488b307 
								
							
								 
							
						 
						
							
							
								
								Merge remote-tracking branch 'origin/develop' into rav/refactor_accesstoken_delete  
							
							
							
						 
						
							2017-11-01 16:20:19 +00:00  
				
					
						
							
							
								 
						
							
							
								e5e930aec3 
								
									
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #2615  from matrix-org/rav/break_auth_device_dep  
							
							... 
							
							
							
							Break dependency of auth_handler on device_handler 
							
						 
						
							2017-11-01 16:06:31 +00:00  
				
					
						
							
							
								 
						
							
							
								dd13310fb8 
								
							
								 
							
						 
						
							
							
								
								Move access token deletion into auth handler  
							
							... 
							
							
							
							Also move duplicated deactivation code into the auth handler.
I want to add some hooks when we deactivate an access token, so let's bring it
all in here so that there's somewhere to put it. 
							
						 
						
							2017-11-01 15:46:22 +00:00  
				
					
						
							
							
								 
						
							
							
								0bb253f37b 
								
							
								 
							
						 
						
							
							
								
								Apparently this is python  
							
							
							
						 
						
							2017-11-01 14:02:52 +00:00  
				
					
						
							
							
								 
						
							
							
								59e7e62c4b 
								
							
								 
							
						 
						
							
							
								
								Log login requests  
							
							... 
							
							
							
							Carefully though, to avoid logging passwords 
							
						 
						
							2017-11-01 13:58:01 +00:00  
				
					
						
							
							
								 
						
							
							
								74c56f794c 
								
							
								 
							
						 
						
							
							
								
								Break dependency of auth_handler on device_handler  
							
							... 
							
							
							
							I'm going to need to make the device_handler depend on the auth_handler, so I
need to break this dependency to avoid a cycle.
It turns out that the auth_handler was only using the device_handler in one
place which was an edge case which we can more elegantly handle by throwing an
error rather than fixing it up. 
							
						 
						
							2017-11-01 10:27:06 +00:00  
				
					
						
							
							
								 
						
							
							
								20fe347906 
								
							
								 
							
						 
						
							
							
								
								Modify group room association API to allow modification of is_public  
							
							... 
							
							
							
							also includes renamings to make things more consistent. 
							
						 
						
							2017-10-31 17:04:28 +00:00  
				
					
						
							
							
								 
						
							
							
								1b65ae00ac 
								
							
								 
							
						 
						
							
							
								
								Refactor some logic from LoginRestServlet into AuthHandler  
							
							... 
							
							
							
							I'm going to need some more flexibility in handling login types in password
auth providers, so as a first step, move some stuff from LoginRestServlet into
AuthHandler.
In particular, we pass everything other than SAML, JWT and token logins down to
the AuthHandler, which now has responsibility for checking the login type and
fishing the password out of the login dictionary, as well as qualifying the
user_id if need be. Ideally SAML, JWT and token would go that way too, but
there's no real need for it right now and I'm trying to minimise impact.
This commit *should* be non-functional. 
							
						 
						
							2017-10-31 10:48:41 +00:00  
				
					
						
							
							
								 
						
							
							
								4d83632009 
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #2591  from matrix-org/rav/device_delete_auth  
							
							... 
							
							
							
							Device deletion: check UI auth matches access token 
							
						 
						
							2017-10-27 12:30:10 +01:00  
				
					
						
							
							
								 
						
							
							
								110b373e9c 
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #2589  from matrix-org/rav/as_deactivate_account  
							
							... 
							
							
							
							Allow ASes to deactivate their own users 
							
						 
						
							2017-10-27 12:29:32 +01:00  
				
					
						
							
							
								 
						
							
							
								d8c26162a1 
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #2582  from matrix-org/luke/group-is-public  
							
							... 
							
							
							
							Add is_public to groups table to allow for private groups 
							
						 
						
							2017-10-27 11:41:13 +01:00  
				
					
						
							
							
								 
						
							
							
								7a6546228b 
								
							
								 
							
						 
						
							
							
								
								Device deletion: check UI auth matches access token  
							
							... 
							
							
							
							(otherwise there's no point in the UI auth) 
							
						 
						
							2017-10-27 00:04:31 +01:00  
				
					
						
							
							
								 
						
							
							
								785bd7fd75 
								
							
								 
							
						 
						
							
							
								
								Allow ASes to deactivate their own users  
							
							
							
						 
						
							2017-10-27 00:01:00 +01:00  
				
					
						
							
							
								 
						
							
							
								595fe67f01 
								
							
								 
							
						 
						
							
							
								
								delint  
							
							
							
						 
						
							2017-10-26 17:20:24 +01:00  
				
					
						
							
							
								 
						
							
							
								9b2feef9eb 
								
							
								 
							
						 
						
							
							
								
								Add is_public to groups table to allow for private groups  
							
							... 
							
							
							
							Prevent group API access to non-members for private groups
Also make all the group code paths consistent with `requester_user_id` always being the User ID of the requesting user. 
							
						 
						
							2017-10-26 16:51:32 +01:00  
				
					
						
							
							
								 
						
							
							
								8299b323ee 
								
							
								 
							
						 
						
							
							
								
								add release endpoints for /thirdparty  
							
							
							
						 
						
							2017-10-26 16:58:20 +02:00  
				
					
						
							
							
								 
						
							
							
								9b436c8b4c 
								
							
								 
							
						 
						
							
							
								
								register some /unstable endpoints in /r0 as well  
							
							
							
						 
						
							2017-10-26 15:22:50 +02:00  
				
					
						
							
							
								 
						
							
							
								5287e57c86 
								
							
								 
							
						 
						
							
							
								
								Ignore noscript tags when generating URL previews  
							
							
							
						 
						
							2017-10-25 20:44:34 -04:00  
				
					
						
							
							
								 
						
							
							
								eaaabc6c4f 
								
							
								 
							
						 
						
							
							
								
								replace 'except:' with 'except Exception:'  
							
							... 
							
							
							
							what could possibly go wrong 
							
						 
						
							2017-10-23 15:52:32 +01:00  
				
					
						
							
							
								 
						
							
							
								d03cfc4258 
								
							
								 
							
						 
						
							
							
								
								Fix a logcontext leak in the media repo  
							
							
							
						 
						
							2017-10-23 14:34:27 +01:00  
				
					
						
							
							
								 
						
							
							
								631d7b87b5 
								
							
								 
							
						 
						
							
							
								
								Remove pointless create() method  
							
							... 
							
							
							
							It just calls the constructor, so we may as well kill it rather than having
random codepaths. 
							
						 
						
							2017-10-20 22:14:55 +01:00  
				
					
						
							
							
								 
						
							
							
								bd5718d0ad 
								
							
								 
							
						 
						
							
							
								
								Fix typo in thumbnail generation  
							
							
							
						 
						
							2017-10-19 10:27:18 +01:00  
				
					
						
							
							
								 
						
							
							
								fe6e9f580b 
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #2550  from krombel/fix_thumbnail_2548  
							
							... 
							
							
							
							fix thumbnailing (#2548 ) 
							
						 
						
							2017-10-17 15:35:18 +01:00  
				
					
						
							
							
								 
						
							
							
								4e242b3e20 
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #2545  from matrix-org/dbkr/auto_join_rooms  
							
							... 
							
							
							
							Add config option to auto-join new users to rooms 
							
						 
						
							2017-10-17 11:45:49 +01:00  
				
					
						
							
							
								 
						
							
							
								a6245478c8 
								
							
								 
							
						 
						
							
							
								
								fix thumbnailing ( #2548 )  
							
							... 
							
							
							
							in commit 0e28281a 
							
						 
						
							2017-10-17 12:45:33 +02:00  
				
					
						
							
							
								 
						
							
							
								c05e6015cc 
								
							
								 
							
						 
						
							
							
								
								Add config option to auto-join new users to rooms  
							
							... 
							
							
							
							New users who register on the server will be dumped into all rooms in
auto_join_rooms in the config. 
							
						 
						
							2017-10-16 17:57:27 +01:00  
				
					
						
							
							
								 
						
							
							
								85f5674e44 
								
							
								 
							
						 
						
							
							
								
								Delint  
							
							
							
						 
						
							2017-10-16 15:52:17 +01:00  
				
					
						
							
							
								 
						
							
							
								2c5972f87f 
								
							
								 
							
						 
						
							
							
								
								Implement GET /groups/$groupId/invited_users  
							
							
							
						 
						
							2017-10-16 15:31:11 +01:00  
				
					
						
							
							
								 
						
							
							
								1b6b0b1e66 
								
							
								 
							
						 
						
							
							
								
								Add try/finally block to close t_byte_source  
							
							
							
						 
						
							2017-10-13 15:34:08 +01:00  
				
					
						
							
							
								 
						
							
							
								6b725cf56a 
								
							
								 
							
						 
						
							
							
								
								Remove old comment  
							
							
							
						 
						
							2017-10-13 15:23:41 +01:00  
				
					
						
							
							
								 
						
							
							
								2b24416e90 
								
							
								 
							
						 
						
							
							
								
								Don't reuse source but instead copy from primary media store to backup  
							
							
							
						 
						
							2017-10-13 14:11:34 +01:00  
				
					
						
							
							
								 
						
							
							
								b92a8e6e4a 
								
							
								 
							
						 
						
							
							
								
								PEP8  
							
							
							
						 
						
							2017-10-13 13:58:57 +01:00  
				
					
						
							
							
								 
						
							
							
								31aa7bd8d1 
								
							
								 
							
						 
						
							
							
								
								Move type into key  
							
							
							
						 
						
							2017-10-13 13:47:38 +01:00  
				
					
						
							
							
								 
						
							
							
								ad1911bbf4 
								
							
								 
							
						 
						
							
							
								
								Comment  
							
							
							
						 
						
							2017-10-13 13:47:05 +01:00  
				
					
						
							
							
								 
						
							
							
								c021c39cbd 
								
							
								 
							
						 
						
							
							
								
								Remove spurious addition  
							
							
							
						 
						
							2017-10-13 13:46:53 +01:00  
				
					
						
							
							
								 
						
							
							
								1f43d22397 
								
							
								 
							
						 
						
							
							
								
								Don't needlessly rename variable  
							
							
							
						 
						
							2017-10-13 11:42:07 +01:00