matrix-spec-proposals

Commit Graph

Author	SHA1	Message	Date
Kegan Dougal	3ff65a57fa	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	99ee9f86f0	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	b2eab83fdc	Apply suggestions from code review Co-authored-by: Travis Ralston <travisr@matrix.org>	2 months ago
Kegan Dougal	71e83cbb4a	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	3c26e3b2ad	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	8f0e3ceb78	Update proposals/4354-sticky-events.md Co-authored-by: Timo <16718859+toger5@users.noreply.github.com>	2 months ago
Kegan Dougal	b135726ea4	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	b9ed93f2d1	Move around k:v map bits to Addendum	2 months ago
Kegan Dougal	b94096a2ac	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	cec1815564	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	eced090df4	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	81cf7282ff	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	b44ccaa42b	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	06d7aa59b8	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	ba01efd5f4	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	caf3fcd819	Update 4354-sticky-events.md	2 months ago
Kegan Dougal	ce37b02f40	Update 4354-sticky-events.md	3 months ago
Kegan Dougal	d14448c7a6	Update 4354-sticky-events.md	3 months ago
Kegan Dougal	6524be23c1	Update 4354-sticky-events.md	3 months ago
Kegan Dougal	c925a4cfbe	Update 4354-sticky-events.md	3 months ago
Kegan Dougal	c75e19c5c0	Update 4354-sticky-events.md	3 months ago
Kegan Dougal	8d101fd958	Update 4354-sticky-events.md	3 months ago
Kegan Dougal	97c9c5b70f	Update 4354-sticky-events.md	3 months ago
Kegan Dougal	192c6b46f8	Update 4354-sticky-events.md	3 months ago
Kegan Dougal	7725f74d04	Update proposals/4354-sticky-events.md Co-authored-by: Johannes Marbach <n0-0ne+github@mailbox.org>	3 months ago
Kegan Dougal	33ec282c3f	Update proposals/4354-sticky-events.md Co-authored-by: Johannes Marbach <n0-0ne+github@mailbox.org>	3 months ago
Kegan Dougal	b6e8159abd	Syntax	3 months ago
Kegan Dougal	29e9bf736a	Update 4354-sticky-events.md	3 months ago
Kegan Dougal	3baf0d89c8	Update 4354-sticky-events.md	3 months ago
Kegan Dougal	50d76e6af2	Update 4354-sticky-events.md	3 months ago
Kegan Dougal	94b1a875db	Remove prev_batch It wasn't particulalry useful for clients, and doesn't help equivocation much.	3 months ago
Kegan Dougal	57ccc48805	Sticky Events	3 months ago
Patrick Cloke	05bc4b4c13	MSC4175: Profile field for user time zone (#4175 ) * MSC4175: Profile field for user time zone * Expand security section. * Fix typos. Co-authored-by: Will Hunt <will@half-shot.uk> * Updates. * Update with concerns * Add additional required info * Typo fix * Review comments. Co-authored-by: Travis Ralston <travisr@matrix.org> * Typo fix Co-authored-by: Hubert Chathi <hubert@uhoreg.ca> * Add examples --------- Co-authored-by: Will Hunt <will@half-shot.uk> Co-authored-by: Travis Ralston <travisr@matrix.org> Co-authored-by: Hubert Chathi <hubert@uhoreg.ca>	3 months ago
Travis Ralston	71cb0bdbb5	MSC4311: Ensuring the create event is available on invites (#4311 ) * MSC: Ensuring the create event is available on invites and knocks * Clarify that we're not replacing auth checks on create events * Acknowledge disparity in unaffected room formats * This isn't a word despite what spellcheck thinks * add migration steps * Just use the normal stripped_state format * Rewrite problem statement and solution components to match new scope * review: improve intro * review: clarify format * review: fix knocks * review: fix room_id calculation * review: rework migration wording * Fully format all events in stripped state * Spelling * Make migration normative * Apply suggestions from code review Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Adjust requirements on servers --------- Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>	3 months ago
Tulir Asokan	0b27750479	MSC4142: Remove unintentional intentional mentions in replies (#4142 ) * Proposal for removing unintentional intentional mentions in replies Signed-off-by: Tulir Asokan <tulir@maunium.net> * Explicitly specify that clients can add more mentions Signed-off-by: Tulir Asokan <tulir@maunium.net> --------- Signed-off-by: Tulir Asokan <tulir@maunium.net>	3 months ago
Travis Ralston	e7475e0c5b	Placeholder for MSC4289 unembargo (#4328 ) * Placeholder for MSC4289 unembargo * Incorporate pre-FCP embargoed MSC content Cover security@ email too	4 months ago
Travis Ralston	75f585d1df	MSC4304: Room Version 12 (#4304 ) * Create 4304-placeholder.md * MSC: Room Version 12 spellcheck Update 4304-room-version-12.md Encourage servers to deviate from the SHOULD in the spec Apply suggestions from code review Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> --------- Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>	4 months ago
Kegan Dougal	d9ec3387c0	MSC4297: State Resolution 2.1 (#4297 ) * Placeholder * Add MSC4297: SR2.1 manually `git apply` hates me --------- Co-authored-by: Travis Ralston <travisr@matrix.org>	4 months ago
Johannes Marbach	2bb34224dd	Clarify capability behaviour with respect to avatar_url and displayname in MSC4133 (#4327 )	4 months ago
Travis Ralston	f6df298869	Clarify `/upgrade` behaviour in MSC4289 to match implementation (#4315 ) Discovered while writing the spec PR.	4 months ago
Travis Ralston	0dcb9d063b	Editorial: Fix dates & unstable prefix of MSC4291 (#4314 ) * Fix dates & unstable prefix of MSC4291 * circular dep is circular * fix the correct circular dep	5 months ago
Matthew Hodgson	3d68238b0f	MSC4289: Explicitly privilege room creators (#4289 ) * msc4289 placeholder * Populate MSC --------- Co-authored-by: Travis Ralston <travisr@matrix.org>	5 months ago
Matthew Hodgson	b1f4ea8c3d	MSC4291: Room IDs as hashes of the create event (#4291 ) * msc4291 placeholder * Add MSC4291: Room IDs as hashes of the create event Co-authored-by: Travis Ralston <travpc@gmail.com> Co-authored-by: Alexey Rusakov <Kitsune-Ral@users.sf.net> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> Co-authored-by: Matthias Ahouansou <matthias@ahouansou.cz> * Fix image src * Review comments * Add prose on blocking alternative * Add MSC4311 note * Update proposals/4291-room-ids-as-hashes.md Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> * 11th hour review --------- Co-authored-by: Kegan Dougal <7190048+kegsay@users.noreply.github.com> Co-authored-by: Travis Ralston <travpc@gmail.com> Co-authored-by: Alexey Rusakov <Kitsune-Ral@users.sf.net> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> Co-authored-by: Matthias Ahouansou <matthias@ahouansou.cz> Co-authored-by: Tulir Asokan <tulir@maunium.net> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> Co-authored-by: Travis Ralston <travisr@matrix.org>	5 months ago
Richard van der Hoff	45fb4ba63e	Proposal to fix the auth events (#4307 )	5 months ago
Erik Johnston	6e3e1622b5	MSC4222: Adding `state_after` to `/sync` (#4222 ) * First draft of MSC4222 * Fix indentation * Fix json * Include msc number in unstable prefixes * Update proposals/4222-sync-v2-state-after.md Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> * Update proposals/4222-sync-v2-state-after.md Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> * Apply suggestions from code review As discussed during the MSC clinic hour Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Re-word the paragraphs about rebuilding the history of state * Add more details about why /v3/sync's current behaviour is insufficient. * Clarify state_after limitation regarding state removal * Update proposals/4222-sync-v2-state-after.md Co-authored-by: Alexey Rusakov <Kitsune-Ral@users.sf.net> --------- Co-authored-by: Hugh Nimmo-Smith <hughns@users.noreply.github.com> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> Co-authored-by: fkwp <fkwp@users.noreply.github.com> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> Co-authored-by: Andy Balaam <andy.balaam@matrix.org> Co-authored-by: fkwp <github-fkwp@w4ve.de> Co-authored-by: Travis Ralston <travisr@matrix.org> Co-authored-by: Alexey Rusakov <Kitsune-Ral@users.sf.net>	5 months ago
Tulir Asokan	07ee4ffef7	MSC4210: Remove legacy mentions (#4210 ) * Remove legacy mentions Signed-off-by: Tulir Asokan <tulir@maunium.net> * Add another potential issue Signed-off-by: Tulir Asokan <tulir@maunium.net> * Add new room version to alternatives Signed-off-by: Tulir Asokan <tulir@maunium.net> * Specify that including `m.mentions` in all events is still necessary Signed-off-by: Tulir Asokan <tulir@maunium.net> * Add links to current spec --------- Signed-off-by: Tulir Asokan <tulir@maunium.net>	5 months ago
Travis Ralston	c8d22786c3	typo	8 months ago
Quentin Gliech	b2ea1a7f9e	MSC2967: API scopes (#2967 ) * API Scopes MSC * Proposed insufficient privilege response format * Remove realm as not required * Clarifications + update on latest device management proposal * Revised namespace structure + unstable prefixes * Revise prefix for device ID * Reference to MSC3861 + cleanup * Add scope for guest access and tidy up * No need for UIA scope * Update proposals/2967-api-scopes.md Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com> * Clarification about encoding of device ID within URN scope * Rework MSC - Remove insufficient privilege response - Remove guest scopes - Reword some parts * Update proposals/2967-api-scopes.md Co-authored-by: Travis Ralston <travpc@gmail.com> * Reword as dbkr suggested * Reword how unstable subdivisions are used * Remove confusing sentence * Gather all the links at the bottom of the document * Tyding up, define exactly how device IDs are handled * Don't use a table for a single row * Typo Co-authored-by: David Baker <dbkr@users.noreply.github.com> * Fix math rendering * Fix the math * Minor rewording on device uniqueness Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Simplify wording around the ASCII range Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Typo Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Scope vs scope token is confusing Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Reword how the device ID is requested * Explain why we keep the device ID generation on the client * MSCXXXX is a better placeholder Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> * The scope MUST have a device ID * Clarify that device IDs are still unique per user Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com> --------- Co-authored-by: Hugh Nimmo-Smith <hughns@users.noreply.github.com> Co-authored-by: Patrick Cloke <clokep@users.noreply.github.com> Co-authored-by: Travis Ralston <travpc@gmail.com> Co-authored-by: David Baker <dbkr@users.noreply.github.com> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>	8 months ago
Quentin Gliech	d83a46e498	MSC2966: Usage of OAuth 2.0 Dynamic Client Registration in Matrix (#2966 ) * OAuth 2.0 Dynamic Registration MSC * contacts is required non-empty * Make client_uri mandatory * Rework MSC - makes some metadata optional - better explain how each metadata field is used - better explain what the restrictions on redirect_uris are - remove the signed metadata part - mention the client metadata JSON document alternative * Mention the `token_endpoint_auth_method` client metadata * Update proposals/2966-oauth2-dynamic-registration.md Co-authored-by: Tonkku <4409524+tonkku107@users.noreply.github.com> * State that the homeserver should display the tos_uri and policy_uri * Make the wording for the refresh token clearer * Clarify that native callbacks with no slashes are allowed * Give an example where the server ignores an unsupported grant type * Add security considerations * must -> MUST, should -> SHOULD, may -> MAY * Clarify the client should store the client_id * Simplify definition of client_uri, already covered by the RFC * Explain the point of the MSC earlier Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Remove empty section * Explicitly state that the client_uri is required * Apply suggestions from code review Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * Fix the web/native client sub-sub-sub sections * Clarify the localhost port-less redirect URIs * The server should return a 201 on successful registration * Explain better the restrictions on URIs * Allow custom ports in the redirect URI * Client regs won't grow exponentially * Explain how to mitigate the problem of client registrations growing over time. * Add missing metadata in the dynamic registration response * Make 'metadata localization' its own sub-sub-sub-sub-section Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> * Server may still deduplicate registrations Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> * Suggest different strategies to mitigate the growing number of client registrations * Let the server delete client registrations that have no active sessions * Really, shoud MUST do a new client reg * Make sure the summary doesn't sound authoritative * Put the links at the end of the file * Explain what is Matrix-specific, what is not --------- Co-authored-by: Hugh Nimmo-Smith <hughns@users.noreply.github.com> Co-authored-by: Tonkku <4409524+tonkku107@users.noreply.github.com> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>	8 months ago
Quentin Gliech	52db4c684a	MSC2964: Usage of OAuth 2.0 authorization code grant and refresh token grant (#2964 ) * OAuth 2.0 profile MSC * Refer to OP rather than AS to avoid clash with Application Service * Title update and intro about architectural change * Add section on endpoints that would now be outside of scope and so removed * Spelling * Section on proposed endpoints that would no longer be relevant * Consistency with MSC3861 and cleanup * Standardise terminology on OpenID Provider = OP * Update proposals/2964-oauth2-profile.md Co-authored-by: Dominik Henneke <dominik.henneke@nordeck.net> * Notes on QR and browserless * OpenID id_token endpoint is still needed * Notes about confusion with existing OIDC and OpenID capabilities * Additional endpoints to be removed * Add 3pid endpoints that would be removed * Changes to GET /account/3pid * Alternative proposal for 3PID handling * Add section on removing UIA * Refer to UIA as API * We now have proposal for 3PID and guest access * Logout semantics * Remove TBDs that are done * More done items * Remove dependency loop * Rework proposal to only cover the authorization code flow * Fix a bunch of todos * Fix typos * Fix the response_mode being an authorization request parameter * Apply suggestions from code review Co-authored-by: Tonkku <tonkku.kallio3@gmail.com> * Remove unused images * Expand the security considerations section * Clarify that using PKCE with S256 is mandatory * Apply suggestions from code review Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> * All Matrix clients are public clients, no need to be too specific * Add PAR/RAR in 'alternatives' section * Replace horizontal rules with subsections * Clarify how the client should handle access token refresh failures * Explain why clients should use the fragment response_mode better * Explain the scope better in the example * Clarify that `code_verifier` should be cryptographically random Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> * Typo Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com> --------- Co-authored-by: Hugh Nimmo-Smith <hughns@users.noreply.github.com> Co-authored-by: Hugh Nimmo-Smith <hughns@element.io> Co-authored-by: Dominik Henneke <dominik.henneke@nordeck.net> Co-authored-by: Tonkku <tonkku.kallio3@gmail.com> Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com> Co-authored-by: Andrew Morgan <1342360+anoadragon453@users.noreply.github.com>	8 months ago

1 2 3 4 5 ...

1473 Commits (3ff65a57fa11aa40bac80df323fde3ab44680d7a)