chris/ruwuma
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,311 Commits 1 Branch 0 Tags
Commit Graph

5311 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
gnieto
7565588be7
signatures: Prevent accepting events without at least one valid signature 
`verify_event` has been changed recently to be more aligned with the
spec. In the previous algorithm, it returned an error if the event was
not signed by at least one of the required entities.

The new algortihm is iterating over all the signtures for the required
entities *and* skipping unknown algorithms. If an event is signed only
by unkonwn algorithms, the event would be accepted and not verifications
will happen. In order to prevent that, we check that, at least, a single
key is checked. This covers the 2nd point in: https://spec.matrix.org/v1.6/appendices/#checking-for-a-signature

A few more test cases were added:

- The event is properly signed, but key map contains a key with an
  unknown algorithm. Under this circumstances, the event should be
  allowed.
- An event signed by multiple keys for an entity, should verify all
  those signatures
- An event signed by a single key with an unkown algorithm by the
  required entity, should fail
 2023-03-02 09:34:57 +00:00
Jason Volk
87237bf100 signatures: Comply with the specified signature checking algorithm. 
Based on research https://github.com/ruma/ruma/pull/1491#issuecomment-1445042510 by @zecakeh
 2023-03-01 22:25:06 +01:00
Jason Volk
920a412da1 signatures: Skip keys which don't split so other keys can be used instead. 2023-03-01 22:25:06 +01:00
Ivan Enderlin
2edfe5bc5f
client-api: Add missing sync::sync_events::v4::Response::txn_id field 
In the [specification], if the request contains a `txn_id` value, the response
must echo the same `txn_id`. Unfortunately, this field is missing from
`sync::sync_events::v4::Response::txn_id`. This patch addresses that problem by
adding the missing field.

[specification]: 89cf0341b5/proposals/3575-sync.md
 2023-03-01 09:02:53 +00:00
Jason Volk
bcb97b139d
signatures: Allow additional key version-string characters in compat mode 
This complies with the published specification by default, with optional compatibility for additional federation keys in use.

Co-authored-by: Jonathan de Jong <jonathan@automatia.nl>
 2023-03-01 09:54:38 +01:00
Jonas Platte
f9a40e137e
events: Remove reaction bundling 
It was removed from the MSC.
https://github.com/matrix-org/matrix-spec-proposals/pull/2677
 2023-02-28 20:01:04 +01:00
Kévin Commaille
57083ef3f8 ci: Unpin nightly version 2023-02-28 18:44:57 +01:00
Kévin Commaille
30c5326c20 ci: Bump clap 2023-02-28 18:44:57 +01:00
Kévin Commaille
cc47a7268b events: Updates location event types 
Even if the MSC hasn't been updated, refactor a bit to match other
extensible events types.
 2023-02-27 20:28:38 +01:00
Kévin Commaille
61c23491c6 events: Update types according to changes in MSC3381 2023-02-27 20:28:38 +01:00
Kévin Commaille
fbf99fcc53 events: Update types according to changes in MSC3554 2023-02-27 20:28:38 +01:00
Kévin Commaille
08aa2ca04c events: Update types according to changes in MSC3245 2023-02-27 20:28:38 +01:00
Kévin Commaille
41be6ac18b events: Update types according to MSC3927 and changes in MSC3246 2023-02-27 20:28:38 +01:00
Kévin Commaille
60f754322e events: Update types according to changes in MSC3553 2023-02-27 20:28:38 +01:00
Kévin Commaille
5985bbe803 events: Update types according to changes in MSC3552 2023-02-27 20:28:38 +01:00
Kévin Commaille
2de1cecec6 events: Update types according to changes in MSC3551 2023-02-27 20:28:38 +01:00
Kévin Commaille
8477efb2ef events: Update types according to changes in MSCs 1767, 3954, 3955 and 3956 2023-02-27 20:28:38 +01:00
Kévin Commaille
ba237a9cfd client-api: Add convenience constructors for enabling lazy-loading in filters 2023-02-27 20:20:07 +01:00
Kévin Commaille
a435a83cdd ci: Pin rust nightly for clippy 
To work around lint issue with clap
 2023-02-27 20:10:36 +01:00
Kévin Commaille
e490c8893d events: Remove the serde alias for the blurhash field in events 
Some clients send both the stable and unstable version so deserialization fails.
 2023-02-27 17:04:39 +01:00
Kévin Commaille
f29bbebf08 events: Make the json_object macro syntax easier to read 2023-02-23 19:31:08 +01:00
Kévin Commaille
32901da35f events: Reorganize tests 
Move tests to the proper files, streamline test names and remove
duplicates.
 2023-02-23 19:31:08 +01:00
Jonas Platte
54d27f1083
events: Implement {From,Into}Iterator for ReceiptEventContent 2023-02-22 17:32:40 +01:00
Jonas Platte
53f9cf52ed
events: Implement {From,Into}Iterator for DirectEventContent 2023-02-22 17:32:39 +01:00
Jonas Platte
45857ed6fa
appservice: Implement useful traits for ReceiptContent 2023-02-22 17:32:39 +01:00
Jonas Platte
c2d8b4f4b9
events: Update changelog 2023-02-22 14:41:02 +01:00
Jonas Platte
11d5020565 events: Don't require threads to contain m.in_reply_to 2023-02-22 14:38:23 +01:00
Jonas Platte
145356217d
Release ruma-client-api 0.16.2 2023-02-16 19:37:28 +01:00
Jonas Platte
b50ef4864c
client-api: Don't serialize None as null in report_content 2023-02-16 19:25:07 +01:00
Kévin Commaille
7a84fb2d3f readme: Advertise support for Matrix 1.6 2023-02-15 13:39:56 +01:00
Kévin Commaille
361b4d2ab1
Release ruma 0.8.2 2023-02-15 13:22:51 +01:00
Kévin Commaille
8cd72fa892
Release ruma-state-res 0.9.1 2023-02-15 13:12:49 +01:00
Kévin Commaille
8f74ec4b1a
Release ruma-signatures 0.13.1 2023-02-15 13:08:31 +01:00
Kévin Commaille
8b0608b6af
Release ruma-server-util 0.1.1 2023-02-15 13:06:29 +01:00
Kévin Commaille
15e8dca7f7
Release ruma-push-gateway-api 0.7.1 2023-02-15 13:04:55 +01:00
Kévin Commaille
6b40ba70e3
Release ruma-identity-service-api 0.7.1 2023-02-15 13:02:50 +01:00
Kévin Commaille
2874d12bc7
Release ruma-federation-api 0.7.1 2023-02-15 13:01:09 +01:00
Kévin Commaille
5fae3ff34e
Release ruma-client-api 0.16.1 2023-02-15 12:59:01 +01:00
Kévin Commaille
bd8e676f93
Release ruma-appservice-api 0.8.1 2023-02-15 12:57:23 +01:00
Kévin Commaille
f17f288a3f
Release ruma-common 0.11.3 2023-02-15 12:44:42 +01:00
Kévin Commaille
446c6ab753
Release ruma-identifiers-validation 0.9.1 2023-02-15 12:41:47 +01:00
Kévin Commaille
a859567487 docs: Migrate spec links to v1.6 2023-02-15 09:59:05 +01:00
Kévin Commaille
fc7cc74789 docs: Don't use since with the deprecated attribute 2023-02-14 22:50:20 +01:00
Kévin Commaille
729d003c88 fixup! events: Deprecate MessageAuthenticationCode::HkdfHmacSha256 2023-02-14 22:19:47 +01:00
Kévin Commaille
4718a88bfe fixup! events: Deprecate MessageAuthenticationCode::HkdfHmacSha256 2023-02-14 22:19:47 +01:00
Kévin Commaille
4323fe8b3f events: Deprecate MessageAuthenticationCode::HkdfHmacSha256 
According to MSC3783 / Matrix 1.6
 2023-02-14 22:19:47 +01:00
Kévin Commaille
798c25e32a events: Move MessageAuthenticationCode::HkdfHmacSha256V2 out of unstable-msc3783 2023-02-14 22:19:47 +01:00
Kévin Commaille
fa06f2f839 federation-api: Move support for partial state in send_join out of unstable-msc3706 
According to Matrix v1.6
 2023-02-14 22:18:05 +01:00
Kévin Commaille
1f83b19653 federation-api: Move get_event_by_timestamp out of unstable-msc3030 
According to Matrix 1.6
 2023-02-14 22:05:37 +01:00
Kévin Commaille
9f92794294 client-api: Move get_event_by_timestamp out of unstable-msc3030 
According to Matrix 1.6
 2023-02-14 22:05:37 +01:00