Commit Graph

1442 Commits (c5a9dc75396102c8a982e1e86dd0ebdb7fb0db4a)

Author SHA1 Message Date
Hugh Nimmo-Smith c5a9dc7539 Update QR examples to match description 1 month ago
Hugh Nimmo-Smith 83071d97b9 Use base URL in QR code and m.login.protocols message 1 month ago
Hugh Nimmo-Smith a4af2d6ad2 Update QR code format under "type" 0x03
The byte immediately following the `MATRIX` prefix is repurposed as a type which gives a more sensible way to namespace in future.

This also means that we can call the second byte the "intent" very clearly rather than having to call it "mode" to match the existing cross verification QR spec.
1 month ago
Hugh Nimmo-Smith af0a6bfdde Update unstable prefixes including on QR code 2 months ago
Hugh Nimmo-Smith 1d45957f74 GitHub doesn't like the link syntax I used 2 months ago
Hugh Nimmo-Smith 3f1321b908 Clarifications around public key in QR 3 months ago
Hugh Nimmo-Smith 82e775f4e4 Clarify 4KB 3 months ago
Hugh Nimmo-Smith 7d768f70fe Revert removal of public key from example QRs 3 months ago
Hugh Nimmo-Smith 740da4b5cc Reinstate note about long poll for future 3 months ago
Hugh Nimmo-Smith 95be8fd0b1 Remove another reference to reciprocate 3 months ago
Hugh Nimmo-Smith fce6f15065 Wording on new/existing device 3 months ago
Hugh Nimmo-Smith 66a9124bd2 QR code clarifications
Clarify original thinking behind QR format.
Add notes about versioning and unstable prefixes
3 months ago
Hugh Nimmo-Smith 9ea6d7db65 Move QR format part of proposal to where it sits in the flow 3 months ago
Hugh Nimmo-Smith 6612944f15 Fix description of discovery steps 3 months ago
Hugh Nimmo-Smith da56332948 Add alternative about unauthenticated device creating "redirect channel" 3 months ago
Hugh Nimmo-Smith 9dab408720 Rendezvous authentication and optionality
Make rendezvous API optional and return 404.
Make authentication on creating rendezvous optional and return 403.
Add client header filtering for unsafe content.
Clean up for readability.
3 months ago
Hugh Nimmo-Smith e032ea78b9 And example for `device_already_exists` outcome 3 months ago
Hugh Nimmo-Smith 4416161081 Split out steps and reorder for clarity 3 months ago
Hugh Nimmo-Smith ced446612c More consistency on SecureSend/SecureReceive 3 months ago
Hugh Nimmo-Smith a92f12865a Fix more references to OAuth and MSC4341 3 months ago
Hugh Nimmo-Smith 1ec7d9cc39 Remove further references to rendezvous server 3 months ago
Hugh Nimmo-Smith ad71936919 Add note bout message prefix 3 months ago
Hugh Nimmo-Smith 2eba2182ed Make 429 errcode be M_LIMIT_EXCEEDED 3 months ago
Hugh Nimmo-Smith 6f05cf2bce Make rendezvous API more like rests of Client-Server API 3 months ago
Hugh Nimmo-Smith d6a491b28a All nonces start at 0 3 months ago
Hugh Nimmo-Smith 3bbba4026d Fix incorrect string 3 months ago
Hugh Nimmo-Smith 98aedb5556 Suggestions from @uhoreg 3 months ago
Hugh Nimmo-Smith 0e1dd7c033 Add table of contents 3 months ago
Hugh Nimmo-Smith 34ade3c1ac Min and mix rendezvous timeouts
See https://github.com/matrix-org/matrix-spec-proposals/pull/4108#discussion_r1575855901
3 months ago
Hugh Nimmo-Smith 2dc580e85f Feedback from review
See https://github.com/matrix-org/matrix-spec-proposals/pull/4108#discussion_r1954778980
3 months ago
Hugh Nimmo-Smith bb5f080baa Update links from spec 1.10 to 1.15 3 months ago
Hugh Nimmo-Smith 3545ca0498 Update to match spec 1.15 and MSC4341 3 months ago
Hugh Nimmo-Smith 0b315f5439
Update 4108-oidc-qr-login.md
Co-authored-by: Denis Kasak <dkasak@termina.org.uk>
1 year ago
Hugh Nimmo-Smith 87f8317a90 Use server name rather than base URL and clarify well-known discovery 2 years ago
Hugh Nimmo-Smith 73da95a970
Fix originator of m.login.declined
Co-authored-by: Damir Jelić <poljar@termina.org.uk>
2 years ago
Hugh Nimmo-Smith f49fd7f582
Fix m.login.failure reason typo
Co-authored-by: Damir Jelić <poljar@termina.org.uk>
2 years ago
Hugh Nimmo-Smith 02f18e1a30
Fix description of 304 GET response 2 years ago
Hugh Nimmo-Smith 0ca3dea0bd The If-Match header on PUT requests contains the ETag 2 years ago
Hugh Nimmo-Smith 76f175b011 Use unstable prefix for errcode 2 years ago
Hugh Nimmo-Smith fe939bed89 Cross signing is mandatory
The user must having cross signing set up and the private keys available on the existing device for the process to complete.
2 years ago
Hugh Nimmo-Smith fbb30ec812
Set max payload size to 4KB and fix content-type as text/plain (#4134)
* Set max payload size and fix content-type as text/plain

* Set max payload size to 4KB
2 years ago
Hugh Nimmo-Smith 4f9a4a42e6 Rendezvous sessions should have a fixed lifetime and allow enough time to complete login 2 years ago
Hugh Nimmo-Smith e12945c5fd Fix POST endpoint and Location references 2 years ago
Hugh Nimmo-Smith 25e8fcb2c3 Remove references to rendezvous session ID 2 years ago
Hugh Nimmo-Smith 289a810f60
Add missing device id check step to sequence diagram 2 years ago
Denis Kasak aa37af9b38
Tweaks to the QR code login crypto (#4129)
- Derive separate encryption keys and nonces for the two sides of the secure channel
- Spell out HKDF parameters in text too
- Misc style fixes

---------

Co-authored-by: Damir Jelić <poljar@termina.org.uk>
Co-authored-by: Hugh Nimmo-Smith <hughns@element.io>
2 years ago
Hugh Nimmo-Smith ad31acf891 More formatting 2 years ago
Hugh Nimmo-Smith d8c62ed866 Whitespace 2 years ago
Hugh Nimmo-Smith e1f7367b55 Formatting 2 years ago
Hugh Nimmo-Smith a81491ca2b Add error codes 2 years ago