timedout
511bb8bf55
perf: Attempt to prevent people joining known busted rooms
2026-03-07 17:03:41 +00:00
Shane Jaroch
da182c162d
fix(registration): discrepancy between 401 response and 500 log statement
2026-03-04 16:18:38 +00:00
Ben Botwin
5eb74bc1dd
feat: Readded support for reading registration tokens from a file
...
Co-authored-by: Ginger <ginger@gingershaped.computer>
2026-03-04 15:06:26 +00:00
Ginger
83883a002c
fix(complement): Fix complement conflicting with first-run
...
- Disabled first-run mode when running Complement tests
- Updated logging config under complement to be a bit less verbose
- Changed test result and log output locations
2026-03-04 15:04:37 +00:00
timedout
37888fb670
fix: Limit body read size of remote requests (CWE-409)
...
Reviewed-By: Jade Ellis <jade@ellis.link>
2026-03-03 19:54:34 +00:00
Niklas Wojtkowiak
8a254a33cc
fix(api): restore backwards compatibility for RTC foci config
2026-02-23 23:01:15 +00:00
Niklas Wojtkowiak
8ddb7c70c0
feat(api): implement MSC4143 RTC transports discovery endpoint
...
Add dedicated \`GET /_matrix/client/v1/rtc/transports\` and \`GET /_matrix/client/unstable/org.matrix.msc4143/rtc/transports\` endpoints for MatrixRTC focus discovery (MSC4143), replacing the deprecated well-known approach.
Move RTC foci configuration from \`[global.well_known]\` into a new \`[global.matrix_rtc]\` config section with a \`foci\` field. Remove \`rtc_foci\` from the \`.well-known/matrix/client\` response. Update LiveKit setup documentation accordingly.
Closes #1431
2026-02-23 23:01:15 +00:00
Niklas Wojtkowiak
18d2662b01
fix(config): remove allow_public_room_directory_without_auth
2026-02-23 17:59:13 +00:00
Jade Ellis
47e2733ea1
refactor: Make stream utils generic over the error type
2026-02-23 16:36:46 +00:00
Jade Ellis
6637e4c6a7
fix: Clean up cache, prevent several race conditions
...
We use one map which is only ever held for a short time.
2026-02-23 16:36:46 +00:00
nexy7574
dd70094719
feat: Make max_active_txns actually configurable
2026-02-23 16:36:45 +00:00
Shane Jaroch
526d862296
fix: more aggressive user agent for URL preview
...
adding "facebookexternalhit" alongside "embedbot" fixes many errors, such as YouTube Music's:
"Your browser is deprecated. Please upgrade."
add admin command to clear URL stuck and broken data (per URL currently)
add command to clear all saved URL previews.
sync resolver docs.
2026-02-23 15:24:14 +00:00
Shannon Sterz
3de026160e
docs: express forbidden_remote_server_names as valid regex
...
this field expects a regex not a glob, so the correct value should be
".*" if one wants to block all remote server names. otherwise, setting
"*" as documented results in an error on start because the configuration
could not be properly parsed.
2026-02-21 16:27:59 +00:00
Ginger
9fe761513d
chore: Clippy & prek fixes
2026-02-21 11:27:39 -05:00
Jade Ellis
b6c5991e1f
chore(deps): Update rand
...
A couple indirect deps are still on rand_core 0.6 but we can deal
2026-02-20 22:57:45 +00:00
Terry
7ecac93ddc
fix: Remove rocksdb secondary mode
2026-02-18 23:11:53 +00:00
Terry
23d77b614f
fix: Remove ability to set rocksdb as read only
2026-02-18 23:11:53 +00:00
timedout
d40893730c
chore: Lighten the phrasing
2026-02-17 02:07:19 +00:00
timedout
f458f6ab76
chore: Disable presence by default, and add warnings to other heavy ops
2026-02-17 02:07:19 +00:00
Jade Ellis
40536b13da
feat: Add experimental http3 support
...
Only enabled in Docker builds for now, due to build config required. Not
sure if more work is needed for 0RTT.
2026-02-16 02:56:49 +00:00
Ginger
576348a445
fix: Set default value of allow_registration to true
2026-02-15 18:05:42 +00:00
timedout
d15ac1d3c1
fix: Use 404 instead of 400 (and include sender)
2026-02-15 15:55:36 +00:00
Jade Ellis
26aac1408e
fix: Correct user agent changes
...
Correct the domain
Remove "embed" in the UA because the
global UA was modified, rather than
just the one for preview requests
2026-02-15 15:21:06 +00:00
Trash Panda
be8f62396a
feat(core): Change default user agent
2026-02-15 15:21:06 +00:00
Trash Panda
40996a6602
feat(core): Add config option for the url preview user agent
2026-02-15 15:21:05 +00:00
Jade Ellis
89ad809270
docs: Correct comment on rtc_focus_server_urls
2026-02-13 19:52:39 +00:00
Chris W Jones
5506997ca0
feat: Add config option for livekit
...
This adds a new config option under `global.well_known` for livekit
server URLs. It also updates the well_known client API endpoint to
return this list.
Closes #1355
2026-02-13 19:52:39 +00:00
Jade Ellis
7369b58d91
feat: Try log original server error
2026-02-08 17:23:09 +00:00
Jade Ellis
c85e710760
fix: Add option to mark certain config sections as optional
...
Fixes #1290
2026-01-20 17:36:22 +00:00
K900
cb79a3b9d7
refactor(treewide): get rid of compile time build environment introspection
...
It's cursed and not very useful. Still a few uses of ctor left, but oh well.
2026-01-19 19:44:28 +00:00
Ginger
6c5d658ef2
fix: Fix explosions with new tracing
2026-01-15 09:28:26 -05:00
Jade Ellis
7375f7a68e
feat: Improve the display of the configuration in the admin room
2026-01-12 16:20:38 +00:00
Jade Ellis
74db426c6b
fix: Correct federation timeouts
2026-01-09 19:51:29 +00:00
Jade Ellis
d3ee9c407a
fix: Apply timeouts in more places
2026-01-09 19:42:13 +00:00
Ginger
8cf2d175d6
fix: Update package and crate metadata
2026-01-08 19:28:27 +00:00
Ginger
112403e470
chore( !783 ): Remove config file check for no static token or captcha
2026-01-07 14:22:37 +00:00
Ginger
ea0a124981
chore( !783 ): Update config file documentation, depluralize token subcommand
2026-01-07 14:22:37 +00:00
Ginger
42f4ec34cd
feat( !783 ): Initial implementation
...
Adds support for extra limited-use registration tokens
stored in the database, and a new service to manage them.
2026-01-07 14:22:37 +00:00
timedout
5ac82f36f3
feat: Consolidate antispam checks into a service
...
Also adds support for the spam checker join rule, and Draupnir callbacks
2026-01-05 20:10:28 +00:00
timedout
0956779802
feat: Add Meowlnir invite interception support
...
Co-authored-by: Jade Ellis <jade@ellis.link>
2026-01-05 20:10:27 +00:00
timedout
7502a944d7
feat: Add user locking and unlocking commands and functionality
...
Also corrects the response code returned by UserSuspended
2026-01-05 19:30:16 +00:00
Jade Ellis
aed15f246a
refactor: Clean up logging issues
...
Primary issues: Double escapes (debug fmt), spans without levels
2026-01-05 18:28:57 +00:00
Terry
f8c1e9bcde
feat: Config defined admin list
...
Closes !1246
2025-12-31 19:35:40 +00:00
timedout
7c741e62cf
fix: Forbid creators in power levels
2025-12-30 17:34:43 +00:00
Jade Ellis
5e0edd5a1c
feat: Allow configuring the OTLP protocol
2025-12-29 23:33:12 +00:00
Jade Ellis
f163264a82
docs: Update example domains
2025-12-29 23:33:12 +00:00
Jade Ellis
bf91ce5c7f
feat: Mark v12 as stable
2025-12-21 17:15:16 +00:00
Jade Ellis
6f67c27538
fix: Ensure that room ID is present on state events sent to client
...
routes
Mostly fixes !1094
The remaining issue is federation routes
2025-12-21 17:12:35 +00:00
Jade Ellis
987c5eeb03
refactor: Promote handling unsigned data out of timeline
...
Also fixes:
- Transaction IDs leaking in event route
- Age not being set for event relations or threads
- Both of the above for search results
Notes down concern with relations table
2025-12-21 17:12:33 +00:00
Odd E. Ebbesen
867d0ab671
fix(reload): Store paths to config files for admin reload
...
Paths given via --config at startup are now stored inside the config
struct at runtime, to make it possible to reload config without setting
an env var for the config file location.
2025-12-16 14:58:33 +00:00