4e1cebd56f 
								
							
								 
							
						 
						
							
							
								
								Make synchrotron accept /events  
							
							
							
						 
						
							2016-08-12 15:31:44 +01:00  
				
					
						
							
							
								 
						
							
							
								866a5320de 
								
							
								 
							
						 
						
							
							
								
								Dont invoke get_handlers fromClientV1RestServlet  
							
							... 
							
							
							
							hs.get_handlers() can not be invoked from split out processes. Moving
the invocations down a level means that we can slowly split out
individual servlets. 
							
						 
						
							2016-08-12 10:03:19 +01:00  
				
					
						
							
							
								 
						
							
							
								cd41c6ece2 
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #995  from matrix-org/rav/clean_up_cas_login  
							
							... 
							
							
							
							Clean up CAS login code 
							
						 
						
							2016-08-09 10:21:56 +01:00  
				
					
						
							
							
								 
						
							
							
								65666fedd5 
								
							
								 
							
						 
						
							
							
								
								Clean up CAS login code  
							
							... 
							
							
							
							Remove some apparently unused code.
Clean up parse_cas_response, mostly to catch the exception if the CAS response
isn't valid XML. 
							
						 
						
							2016-08-08 17:17:25 +01:00  
				
					
						
							
							
								 
						
							
							
								0682ca04b3 
								
							
								 
							
						 
						
							
							
								
								Fix CAS login  
							
							... 
							
							
							
							Attempting to log in with CAS was giving a 500 error. 
							
						 
						
							2016-08-08 17:01:30 +01:00  
				
					
						
							
							
								 
						
							
							
								436bffd15f 
								
							
								 
							
						 
						
							
							
								
								Implement deleting devices  
							
							
							
						 
						
							2016-07-26 07:35:48 +01:00  
				
					
						
							
							
								 
						
							
							
								c68518dfbb 
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #933  from matrix-org/rav/type_annotations  
							
							... 
							
							
							
							Type annotations 
							
						 
						
							2016-07-20 12:26:32 +01:00  
				
					
						
							
							
								 
						
							
							
								e967bc86e7 
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #932  from matrix-org/rav/register_refactor  
							
							... 
							
							
							
							Further registration refactoring 
							
						 
						
							2016-07-20 11:03:33 +01:00  
				
					
						
							
							
								 
						
							
							
								1e2a7f18a1 
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #922  from matrix-org/erikj/file_api2  
							
							... 
							
							
							
							Feature: Add filter to /messages. Add 'contains_url' to filter. 
							
						 
						
							2016-07-20 10:40:48 +01:00  
				
					
						
							
							
								 
						
							
							
								3413f1e284 
								
							
								 
							
						 
						
							
							
								
								Type annotations  
							
							... 
							
							
							
							Add some type annotations to help PyCharm (in particular) to figure out the
types of a bunch of things. 
							
						 
						
							2016-07-19 18:56:16 +01:00  
				
					
						
							
							
								 
						
							
							
								40cbffb2d2 
								
							
								 
							
						 
						
							
							
								
								Further registration refactoring  
							
							... 
							
							
							
							* `RegistrationHandler.appservice_register` no longer issues an access token:
  instead it is left for the caller to do it. (There are two of these, one in
  `synapse/rest/client/v1/register.py`, which now simply calls
  `AuthHandler.issue_access_token`, and the other in
  `synapse/rest/client/v2_alpha/register.py`, which is covered below).
* In `synapse/rest/client/v2_alpha/register.py`, move the generation of
  access_tokens into `_create_registration_details`. This means that the normal
  flow no longer needs to call `AuthHandler.issue_access_token`; the
  shared-secret flow can tell `RegistrationHandler.register` not to generate a
  token; and the appservice flow continues to work despite the above change. 
							
						 
						
							2016-07-19 18:46:19 +01:00  
				
					
						
							
							
								 
						
							
							
								f863a52cea 
								
							
								 
							
						 
						
							
							
								
								Add device_id support to /login  
							
							... 
							
							
							
							Add a 'devices' table to the storage, as well as a 'device_id' column to
refresh_tokens.
Allow the client to pass a device_id, and initial_device_display_name, to
/login. If login is successful, then register the device in the devices table
if it wasn't known already. If no device_id was supplied, make one up.
Associate the device_id with the access token and refresh token, so that we can
get at it again later. Ensure that the device_id is copied from the refresh
token to the access_token when the token is refreshed. 
							
						 
						
							2016-07-18 16:39:44 +01:00  
				
					
						
							
							
								 
						
							
							
								dcfd71aa4c 
								
							
								 
							
						 
						
							
							
								
								Refactor login flow  
							
							... 
							
							
							
							Make sure that we have the canonical user_id *before* calling
get_login_tuple_for_user_id.
Replace login_with_password with a method which just validates the password,
and have the caller call get_login_tuple_for_user_id. This brings the password
flow into line with the other flows, and will give us a place to register the
device_id if necessary. 
							
						 
						
							2016-07-18 15:23:54 +01:00  
				
					
						
							
							
								 
						
							
							
								a98d215204 
								
							
								 
							
						 
						
							
							
								
								Add filter param to /messages API  
							
							
							
						 
						
							2016-07-14 16:30:56 +01:00  
				
					
						
							
							
								 
						
							
							
								0136a522b1 
								
							
								 
							
						 
						
							
							
								
								Bug fix: expire invalid access tokens  
							
							
							
						 
						
							2016-07-13 15:00:37 +02:00  
				
					
						
							
							
								 
						
							
							
								67f2c901ea 
								
							
								 
							
						 
						
							
							
								
								Add rest servlet. Fix SQL.  
							
							
							
						 
						
							2016-07-06 15:56:59 +01:00  
				
					
						
							
							
								 
						
							
							
								a17e7caeb7 
								
							
								 
							
						 
						
							
							
								
								Merge branch 'erikj/shared_secret' into erikj/test2  
							
							
							
						 
						
							2016-07-06 14:46:31 +01:00  
				
					
						
							
							
								 
						
							
							
								76b18df3d9 
								
							
								 
							
						 
						
							
							
								
								Check that there are no null bytes in user and passsword  
							
							
							
						 
						
							2016-07-06 11:17:53 +01:00  
				
					
						
							
							
								 
						
							
							
								0da24cac8b 
								
							
								 
							
						 
						
							
							
								
								Add null separator to hmac  
							
							
							
						 
						
							2016-07-06 11:05:16 +01:00  
				
					
						
							
							
								 
						
							
							
								651faee698 
								
							
								 
							
						 
						
							
							
								
								Add an admin option to shared secret registration  
							
							
							
						 
						
							2016-07-05 17:30:22 +01:00  
				
					
						
							
							
								 
						
							
							
								caf33b2d9b 
								
							
								 
							
						 
						
							
							
								
								Protect password when registering using shared secret  
							
							
							
						 
						
							2016-07-05 17:18:19 +01:00  
				
					
						
							
							
								 
						
							
							
								2d21d43c34 
								
							
								 
							
						 
						
							
							
								
								Add purge_history API  
							
							
							
						 
						
							2016-07-05 10:28:51 +01:00  
				
					
						
							
							
								 
						
							
							
								bb069079bb 
								
									
								
							
								 
							
						 
						
							
							
								
								Fix style violations  
							
							... 
							
							
							
							Signed-off-by: Kent Shikama <kent@kentshikama.com> 
							
						 
						
							2016-07-04 22:07:11 +09:00  
				
					
						
							
							
								 
						
							
							
								2e5a31f197 
								
							
								 
							
						 
						
							
							
								
								Use .get() instead of [] to access password_hash  
							
							
							
						 
						
							2016-07-04 22:00:13 +09:00  
				
					
						
							
							
								 
						
							
							
								fc8007dbec 
								
									
								
							
								 
							
						 
						
							
							
								
								Optionally include password hash in createUser endpoint  
							
							... 
							
							
							
							Signed-off-by: Kent Shikama <kent@kentshikama.com> 
							
						 
						
							2016-07-03 15:08:15 +09:00  
				
					
						
							
							
								 
						
							
							
								f328d95cef 
								
							
								 
							
						 
						
							
							
								
								Feature: Add deactivate account admin API  
							
							... 
							
							
							
							Allows server admins to "deactivate" accounts, which:
- Revokes all access tokens
- Removes all threepids
- Removes password
The API is a POST to `/admin/deactivate/<user_id>` 
							
						 
						
							2016-06-30 15:40:58 +01:00  
				
					
						
							
							
								 
						
							
							
								a70688445d 
								
							
								 
							
						 
						
							
							
								
								Implement purge_media_cache admin API  
							
							
							
						 
						
							2016-06-29 14:57:59 +01:00  
				
					
						
							
							
								 
						
							
							
								95f305c35a 
								
							
								 
							
						 
						
							
							
								
								Remove redundant exception log in /events  
							
							
							
						 
						
							2016-06-09 11:15:04 +01:00  
				
					
						
							
							
								 
						
							
							
								690029d1a3 
								
							
								 
							
						 
						
							
							
								
								Don't make rooms visibile by default  
							
							
							
						 
						
							2016-06-08 14:47:42 +01:00  
				
					
						
							
							
								 
						
							
							
								efeabd3180 
								
							
								 
							
						 
						
							
							
								
								Log user that is making /publicRooms calls  
							
							
							
						 
						
							2016-06-08 14:23:15 +01:00  
				
					
						
							
							
								 
						
							
							
								6a0afa582a 
								
							
								 
							
						 
						
							
							
								
								Load push rules in storage layer, so that they get cached  
							
							
							
						 
						
							2016-06-03 11:10:00 +01:00  
				
					
						
							
							
								 
						
							
							
								1f31cc37f8 
								
							
								 
							
						 
						
							
							
								
								Working unsubscribe links going straight to the HS  
							
							... 
							
							
							
							and authed by macaroons that let you delete pushers and nothing else 
							
						 
						
							2016-06-02 17:21:31 +01:00  
				
					
						
							
							
								 
						
							
							
								3a3fb2f6f9 
								
							
								 
							
						 
						
							
							
								
								Merge branch 'dbkr/split_out_auth_handler' into dbkr/email_unsubscribe  
							
							
							
						 
						
							2016-06-02 13:35:25 +01:00  
				
					
						
							
							
								 
						
							
							
								4a10510cd5 
								
							
								 
							
						 
						
							
							
								
								Split out the auth handler  
							
							
							
						 
						
							2016-06-02 13:31:45 +01:00  
				
					
						
							
							
								 
						
							
							
								991af8b0d6 
								
							
								 
							
						 
						
							
							
								
								WIP on unsubscribing email notifs without logging in  
							
							
							
						 
						
							2016-06-01 17:40:52 +01:00  
				
					
						
							
							
								 
						
							
							
								d240796ded 
								
							
								 
							
						 
						
							
							
								
								Basic, un-cached support for secondary_directory_servers  
							
							
							
						 
						
							2016-05-31 17:20:07 +01:00  
				
					
						
							
							
								 
						
							
							
								887c6e6f05 
								
							
								 
							
						 
						
							
							
								
								Split out the room list handler  
							
							... 
							
							
							
							So I can use it from federation bits without pulling in all the handlers. 
							
						 
						
							2016-05-31 11:05:16 +01:00  
				
					
						
							
							
								 
						
							
							
								332d7e9b97 
								
							
								 
							
						 
						
							
							
								
								Allow clients to specify a server_name to avoid 'No known servers'  
							
							... 
							
							
							
							Multiple server_names are supported via ?server_name=foo&server_name=bar 
							
						 
						
							2016-05-19 13:50:52 +01:00  
				
					
						
							
							
								 
						
							
							
								0cb441fedd 
								
							
								 
							
						 
						
							
							
								
								Move typing handler out of the Handlers object  
							
							
							
						 
						
							2016-05-17 15:58:46 +01:00  
				
					
						
							
							
								 
						
							
							
								3b86ecfa79 
								
							
								 
							
						 
						
							
							
								
								Move the presence handler out of the Handlers object  
							
							
							
						 
						
							2016-05-16 18:56:37 +01:00  
				
					
						
							
							
								 
						
							
							
								40aa6e8349 
								
							
								 
							
						 
						
							
							
								
								Create user with expiry  
							
							... 
							
							
							
							- Add unittests for client, api and handler
Signed-off-by: Negar Fazeli <negar.fazeli@ericsson.com> 
							
						 
						
							2016-05-13 15:34:15 +02:00  
				
					
						
							
							
								 
						
							
							
								52ecbc2843 
								
							
								 
							
						 
						
							
							
								
								Make pyjwt dependency optional  
							
							
							
						 
						
							2016-04-25 14:30:15 +01:00  
				
					
						
							
							
								 
						
							
							
								b9675ef6e6 
								
							
								 
							
						 
						
							
							
								
								Merge pull request  #687  from nikriek/jwt-fix  
							
							... 
							
							
							
							Fix issues with JWT login 
							
						 
						
							2016-04-21 17:42:25 +01:00  
				
					
						
							
							
								 
						
							
							
								565c2edb0a 
								
							
								 
							
						 
						
							
							
								
								Fix issues with JWT login  
							
							
							
						 
						
							2016-04-21 18:10:48 +02:00  
				
					
						
							
							
								 
						
							
							
								a04c076b7f 
								
							
								 
							
						 
						
							
							
								
								Make the /set part mandatory  
							
							
							
						 
						
							2016-04-12 13:54:41 +01:00  
				
					
						
							
							
								 
						
							
							
								7b39bcdaae 
								
							
								 
							
						 
						
							
							
								
								Mis-named function  
							
							
							
						 
						
							2016-04-12 13:35:08 +01:00  
				
					
						
							
							
								 
						
							
							
								d937f342bb 
								
							
								 
							
						 
						
							
							
								
								Split into separate servlet classes  
							
							
							
						 
						
							2016-04-12 13:33:30 +01:00  
				
					
						
							
							
								 
						
							
							
								8a76094965 
								
							
								 
							
						 
						
							
							
								
								Add get endpoint for pushers  
							
							... 
							
							
							
							As per https://github.com/matrix-org/matrix-doc/pull/308  
							
						 
						
							2016-04-11 18:00:03 +01:00  
				
					
						
							
							
								 
						
							
							
								08a8514b7a 
								
							
								 
							
						 
						
							
							
								
								Remove spurious comment  
							
							
							
						 
						
							2016-03-30 15:05:33 +01:00  
				
					
						
							
							
								 
						
							
							
								fddb6fddc1 
								
							
								 
							
						 
						
							
							
								
								Require user to have left room to forget room  
							
							... 
							
							
							
							This dramatically simplifies the forget API code - in particular it no
longer generates a leave event. 
							
						 
						
							2016-03-30 11:03:00 +01:00