Remove stripped state and require full state for federated invites #42

Open

nex wants to merge 4 commits from nex/feat/invite-v1.16 into conduwuit-changes

pull from: nex/feat/invite-v1.16

merge into: continuwuation:conduwuit-changes

continuwuation:conduwuit-changes

continuwuation:nex/feat/antispam

continuwuation:ginger/msc4222

continuwuation:dash_uwu/axum-0.8

continuwuation:nex/feat/msc4373-edu-filter

continuwuation:renovate/configure

continuwuation:nex/feat/oidc-stuff

continuwuation:nex/no-timeout-default

continuwuation:nex/cwy-as-callbacks

continuwuation:jade/hack-join-rules

continuwuation:jade/eq-recipts

continuwuation:main

continuwuation:morguldir/invalid-predecessor

continuwuation:msc4121

continuwuation:relations-request-direction

continuwuation:url-preview-ts

continuwuation:deprecated-user-login-field

Conversation 0 Commits 4 Files changed 4 +9 -151

nex commented 2025-12-23 19:54:33 +00:00

Owner

Copy link

No description provided.

nex added 2 commits 2025-12-23 19:54:33 +00:00

fix: Federation invite endpoint now uses full-sized PDUs ... 864079bf0e

Also removed v1 invite code because it's unused

fix: Knocks also should be full state events e60876b6ff

nex added a new dependency 2025-12-23 19:55:30 +00:00

continuwuation/continuwuity#1239 - WIP: feat: Enhance invite security checks & do away with stripped state

nex added 1 commit 2025-12-23 23:12:50 +00:00

fix: Use RawJsonValue to allow the caller to decide what to parse as 9c6cce1fa0

nex added 1 commit 2025-12-24 00:23:55 +00:00

fix: Correctly type Request impl 3a6f29fda2

nex removed a dependency 2026-01-16 13:09:32 +00:00

continuwuation/continuwuity#1239 - WIP: feat: Enhance invite security checks & do away with stripped state

This pull request can be merged automatically.

This branch is out-of-date with the base branch

You are not authorized to merge this pull request.

View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.

git fetch -u origin nex/feat/invite-v1.16:nex/feat/invite-v1.16

git switch nex/feat/invite-v1.16

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch conduwuit-changes

git merge --no-ff nex/feat/invite-v1.16

git switch nex/feat/invite-v1.16

git rebase conduwuit-changes

git switch conduwuit-changes

git merge --ff-only nex/feat/invite-v1.16

git switch nex/feat/invite-v1.16

git rebase conduwuit-changes

git switch conduwuit-changes

git merge --no-ff nex/feat/invite-v1.16

git switch conduwuit-changes

git merge --squash nex/feat/invite-v1.16

git switch conduwuit-changes

git merge --ff-only nex/feat/invite-v1.16

git switch conduwuit-changes

git merge nex/feat/invite-v1.16

git push origin conduwuit-changes

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels   

bug

Something isn't working

  

documentation

Improvements or additions to documentation

  

duplicate

This issue or pull request already exists

  

enhancement

New feature or request

  

good first issue

Good for newcomers

  

help wanted

Extra attention is needed

  

invalid

This doesn't seem right

  

question

Further information is requested

  

wontfix

This will not be worked on

No labels

bug

documentation

duplicate

enhancement

good first issue

help wanted

invalid

question

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

continuwuation/ruwuma!42

No description provided.