Skip to content
Snippets Groups Projects
  1. Apr 14, 2021
  2. Apr 06, 2021
  3. Feb 17, 2021
  4. Feb 16, 2021
  5. Oct 29, 2020
    • Erik Johnston's avatar
      Add ability for access tokens to belong to one user but grant access to another user. (#8616) · f21e24ff
      Erik Johnston authored
      We do it this way round so that only the "owner" can delete the access token (i.e. `/logout/all` by the "owner" also deletes that token, but `/logout/all` by the "target user" doesn't).
      
      A future PR will add an API for creating such a token.
      
      When the target user and authenticated entity are different the `Processed request` log line will be logged with a: `{@admin:server as @bob:server} ...`. I'm not convinced by that format (especially since it adds spaces in there, making it harder to use `cut -d ' '` to chop off the start of log lines). Suggestions welcome.
      Unverified
      f21e24ff
  6. Aug 27, 2020
  7. Aug 26, 2020
  8. Aug 24, 2020
  9. Aug 11, 2020
  10. Jan 09, 2020
  11. Dec 18, 2019
  12. Aug 23, 2019
  13. Jul 12, 2019
  14. Jul 10, 2019
  15. Jun 20, 2019
  16. May 10, 2019
  17. Dec 14, 2018
    • Neil Johnson's avatar
      create support user (#4141) · d2f7c4e6
      Neil Johnson authored
      Allow for the creation of a support user.
      
      A support user can access the server, join rooms, interact with other users, but does not appear in the user directory nor does it contribute to monthly active user limits.
      Unverified
      d2f7c4e6
  18. Aug 23, 2018
  19. Aug 13, 2018
  20. Aug 10, 2018
  21. Jul 09, 2018
  22. May 29, 2018
  23. May 22, 2018
  24. Nov 01, 2017
  25. Nov 30, 2016
  26. Jul 26, 2016
  27. Jul 18, 2016
    • Richard van der Hoff's avatar
      Add device_id support to /login · f863a52c
      Richard van der Hoff authored
      Add a 'devices' table to the storage, as well as a 'device_id' column to
      refresh_tokens.
      
      Allow the client to pass a device_id, and initial_device_display_name, to
      /login. If login is successful, then register the device in the devices table
      if it wasn't known already. If no device_id was supplied, make one up.
      
      Associate the device_id with the access token and refresh token, so that we can
      get at it again later. Ensure that the device_id is copied from the refresh
      token to the access_token when the token is refreshed.
      f863a52c
  28. Feb 19, 2016
  29. Jan 27, 2016
  30. Jan 07, 2016
  31. Jan 06, 2016
  32. Aug 25, 2015
  33. Aug 20, 2015
  34. Jun 03, 2015
  35. Apr 01, 2015
  36. Mar 24, 2015
Loading