synapse

Commit Graph

Author	SHA1	Message	Date
Eric Eastwood	1c802de626	Re-introduce the outbound federation proxy (#15913 ) Allow configuring the set of workers to proxy outbound federation traffic through (`outbound_federation_restricted_to`). This is useful when you have a worker setup with `federation_sender` instances responsible for sending outbound federation requests and want to make sure all outbound federation traffic goes through those instances. Before this change, the generic workers would still contact federation themselves for things like profile lookups, backfill, etc. This PR allows you to set more strict access controls/firewall for all workers and only allow the `federation_sender`'s to contact the outside world.	11 months ago
Eric Eastwood	c9bf644fa0	Revert "Federation outbound proxy" (#15910 ) Revert "Federation outbound proxy (#15773)" This reverts commit `b07b14b494`.	11 months ago
Eric Eastwood	b07b14b494	Federation outbound proxy (#15773 ) Allow configuring the set of workers to proxy outbound federation traffic through (`outbound_federation_restricted_to`). This is useful when you have a worker setup with `federation_sender` instances responsible for sending outbound federation requests and want to make sure all outbound federation traffic goes through those instances. Before this change, the generic workers would still contact federation themselves for things like profile lookups, backfill, etc. This PR allows you to set more strict access controls/firewall for all workers and only allow the `federation_sender`'s to contact the outside world. The original code is from @erikjohnston's branches which I've gotten in-shape to merge.	11 months ago
dependabot[bot]	9bb2eac719	Bump black from 22.12.0 to 23.1.0 (#15103 )	1 year ago
Patrick Cloke	42aea0d8af	Add final type hint to tests.unittest. (#15072 ) Adds a return type to HomeServerTestCase.make_homeserver and deal with any variables which are no longer Any.	1 year ago
Sean Quah	78b99de7c2	Prefer `make_awaitable` over `defer.succeed` in tests (#12505 ) When configuring the return values of mocks, prefer awaitables from `make_awaitable` over `defer.succeed`. `Deferred`s are only awaitable once, so it is inappropriate for a mock to return the same `Deferred` multiple times. Also update `run_in_background` to support functions that return arbitrary awaitables. Signed-off-by: Sean Quah <seanq@element.io>	2 years ago
Dirk Klimpel	54e74cc15f	Add type hints to `tests/rest/client` (#12072 )	2 years ago
Patrick Cloke	94b620a5ed	Use direct references for configuration variables (part 6). (#10916 )	2 years ago
David Robertson	ecd823d766	Flatten tests/rest/client/{v1,v2_alpha} too (#10667 )	2 years ago
reivilibre	642a42edde	Flatten the synapse.rest.client package (#10600 )	2 years ago
Marcus	8070b893db	update black to 21.6b0 (#10197 ) Reformat all files with the new version. Signed-off-by: Marcus Hoffmann <bubu@bubu1.eu>	3 years ago
Erik Johnston	9d25a0ae65	Split presence out of master (#9820 )	3 years ago
Jonathan de Jong	4b965c862d	Remove redundant "coding: utf-8" lines (#9786 ) Part of #9744 Removes all redundant `# -- coding: utf-8 --` lines from files, as python 3 automatically reads source code as utf-8 now. `Signed-off-by: Jonathan de Jong <jonathan@automatia.nl>`	3 years ago
Patrick Cloke	0b3112123d	Use mock from the stdlib. (#9772 )	3 years ago
Richard van der Hoff	394516ad1b	Remove spurious "SynapseRequest" result from `make_request" This was never used, so let's get rid of it.	3 years ago
Patrick Cloke	30fba62108	Apply an IP range blacklist to push and key revocation requests. (#8821 ) Replaces the `federation_ip_range_blacklist` configuration setting with an `ip_range_blacklist` setting with wider scope. It now applies to: * Federation * Identity servers * Push notifications * Checking key validitity for third-party invite events The old `federation_ip_range_blacklist` setting is still honored if present, but with reduced scope (it only applies to federation and identity servers).	3 years ago
Jonathan de Jong	ca60822b34	Simplify the way the `HomeServer` object caches its internal attributes. (#8565 ) Changes `@cache_in_self` to use underscore-prefixed attributes.	3 years ago
Richard van der Hoff	acfe3b3065	Remove redundant `HomeserverTestCase.render`	3 years ago
Patrick Cloke	38e1fac886	Fix some spelling mistakes / typos. (#7811 )	3 years ago
Erik Johnston	4ca3ef10b9	Fixup tests	4 years ago
Amber Brown	c334ca67bb	Integrate presence from hotfixes (#3694 )	5 years ago
Erik Johnston	9da9826b85	Remove old tests.	8 years ago
Erik Johnston	9959d9ece8	Remove redundated BaseHomeServer	8 years ago
Daniel Wagner-Hall	2110e35fd6	Introduce a Requester object This tracks data about the entity which made the request. This is instead of passing around a tuple, which requires call-site modifications every time a new piece of optional context is passed around. I tried to introduce a User object. I gave up.	8 years ago
Matthew Hodgson	6c28ac260c	copyrights	8 years ago
Daniel Wagner-Hall	468a2ed4ec	Return non-room events from guest /events calls	8 years ago
Daniel Wagner-Hall	ca2f90742d	Open up /events to anonymous users for room events only Squash-merge of PR #345 from daniel/anonymousevents	8 years ago
Daniel Wagner-Hall	f522f50a08	Allow guests to register and call /events?room_id= This follows the same flows-based flow as regular registration, but as the only implemented flow has no requirements, it auto-succeeds. In the future, other flows (e.g. captcha) may be required, so clients should treat this like the regular registration flow choices.	8 years ago
Mark Haines	fb46937413	Support clients supplying older tokens, fix short poll test	8 years ago
Mark Haines	bb4dddd6c4	Move NullSource out of synapse and into tests since it is only used by the tests	8 years ago
Daniel Wagner-Hall	e255c2c32f	s/user_id/user/g for consistency	8 years ago
Daniel Wagner-Hall	6a4b650d8a	Attempt to validate macaroons A couple of weird caveats: * If we can't validate your macaroon, we fall back to checking that your access token is in the DB, and ignoring the failure * Even if we can validate your macaroon, we still have to hit the DB to get the access token ID, which we pretend is a device ID all over the codebase. This mostly adds the interesting code, and points out the two pieces we need to delete (and necessary conditions) in order to fix the above caveats.	8 years ago
Daniel Wagner-Hall	a9d8bd95e7	Stop looking up "admin", which we never read	8 years ago
Daniel Wagner-Hall	a0b181bd17	Remove completely unused concepts from codebase Removes device_id and ClientInfo device_id is never actually written, and the matrix.org DB has no non-null entries for it. Right now, it's just cluttering up code. This doesn't remove the columns from the database, because that's fiddly.	8 years ago
Daniel Wagner-Hall	13a6517d89	s/by_token/by_access_token/g We're about to have two kinds of token, access and refresh	8 years ago
Erik Johnston	ddf7979531	Add receipts_key to StreamToken	9 years ago
Mark Haines	17167898c8	Fix the presence tests	9 years ago
Mark Haines	88f1ea36ce	Oops, get_rooms_for_user returns a namedtuple, not a room_id	9 years ago
Mark Haines	8eca5bd50a	Fix the presence tests	9 years ago
Mark Haines	f1b83d88a3	Discard unused NotifierUserStreams	9 years ago
Mark Haines	63878c0379	Don't bother checking for updates if the stream token hasn't advanced for a user	9 years ago
David Baker	ce2766d19c	Fix tests	9 years ago
Erik Johnston	6d74e46621	Fix tests	9 years ago
Kegan Dougal	0ebd632d39	Fix unit tests	9 years ago
Mark Haines	896253e085	Factor out some of the common homeserver setup code into a setup_test_homeserver function in utils.	9 years ago
Kegan Dougal	5a7dd05818	Modify auth.get_user_by_req for authing appservices directly. Add logic to map the appservice token to the autogenned appservice user ID. Add unit tests for all forms of get_user_by_req (user/appservice, valid/bad/missing tokens)	9 years ago
Mark Haines	388581e087	Extract the id token of the token when authing users, include the token and device_id in the internal meta data for the event along with the transaction id when sending events	9 years ago
Mark Haines	c59bcabf0b	Return the device_id from get_auth_by_req	9 years ago
Mark Haines	5759bec43c	Replace hs.parse_userid with UserID.from_string	9 years ago
Mark Haines	7256def8e4	Merge rest servlets into the client json resource object	9 years ago

9 Commits (1c802de626de3293049206cb788af15cbc8ea17f)