919cc7e5eb
Update libsignal to 0.23
2023-05-04 14:10:51 -07:00
e38911b2c5
Always check prekey signatures when new prekeys are uploaded
2023-05-04 11:31:45 -07:00
bc68b67cdf
account crawler: remove obsolete accelerated mode
2023-05-04 11:27:16 -05:00
42a9f1b3e4
account crawler: remove `set*Dynamo` methods
2023-05-04 11:27:16 -05:00
08333d5989
Implement /v2/backup/auth/check
2023-05-04 11:23:33 -05:00
0e0c0c5dfe
return 400 instead of 503 for bad verification session-id
2023-05-04 09:22:51 -07:00
59ebe65643
Add counter to /v2/attachments
2023-05-04 09:22:18 -07:00
57b6c10dd1
Remove obsolete dynamic configuration
2023-05-03 13:20:44 -05:00
3ee5ac4514
Fix a late-breaking merge conflict
2023-05-02 16:12:26 -04:00
be176f98ad
metric for take-prekey yielding an empty result
2023-05-02 13:03:49 -07:00
12b58a31a1
Retire integration with legacy contact discovery system
2023-05-02 15:57:03 -04:00
8d468d17e3
Add a temporary counter for profile key credential types
2023-05-02 15:56:19 -04:00
e135d50d82
Add counter for `ContactDiscoverWriter` updates
2023-05-01 13:42:14 -05:00
487b5edc75
Handle potentially null payment method when canceling subscription
2023-05-01 13:42:05 -05:00
47ad5779ad
new /v2/accounts endpoint to distribute PNI key material without changing phone number
2023-04-21 12:20:57 -07:00
4fb89360ce
Allow registration via recovery password for reglock enabled accounts
2023-04-20 09:21:04 -07:00
6dfdbeb7bb
Check for no-op APNs token changes
2023-04-19 17:01:01 -04:00
d0ccbd5526
Simplify a check for no-op FCM token changes
2023-04-19 17:01:01 -04:00
031ee57371
Convert "set push token" request objects to records
2023-04-19 17:01:01 -04:00
2043678739
Remove the `removeSignalingKey` API endpoint
2023-04-19 17:00:47 -04:00
dd27e3b0c8
Convert attachment descriptors to records
2023-04-19 17:00:34 -04:00
1083d8bde0
Remove the legacy group credential endpoint
2023-04-19 17:00:14 -04:00
d1eb247d8c
Clarify the purpose of an `addListener` method
2023-04-18 12:04:54 -04:00
fd5e9ea016
Drop the old (and now unused!) `redis-dispatch` module
2023-04-18 12:04:54 -04:00
11829d1f9f
Refactor provisioning plumbing to use Lettuce
2023-04-18 12:04:54 -04:00
c485d317fb
Mock apnPushNotificationScheduler
2023-04-17 10:55:15 -07:00
350682b83a
Lock account and send notification when someone passes phone verification but fails reglock
2023-04-17 10:30:36 -07:00
0fe6485038
Add a configuration to make rate limiters fail open
2023-04-14 13:08:14 -05:00
a553093046
integration tests initial setup
2023-04-13 11:12:34 -07:00
61af1ba029
Clean up prohibited username references
2023-04-10 15:21:02 -07:00
8847cb92ac
Don't block when scheduling background apns pushes
2023-04-10 13:51:36 -05:00
33a6577b6e
Decrease message delivery executor thread count to 20
2023-04-07 10:56:23 -05:00
23d5006f70
Add prefix to executor metric names
2023-04-05 09:51:53 -05:00
2697872bdd
Use Apache StringUtils#join
2023-04-05 09:51:30 -05:00
7b331edcde
Separate username and signature truncation fields
2023-04-05 09:51:00 -05:00
e4da59c236
Generic credential auth endpoint for call links
2023-04-04 10:28:35 -07:00
48ebafa4e0
DynamoDBExtension refactor and helpers for our schema ( #1327 )
...
There's a lot of boilerplate involved in setting up a DynamoDBExtension, and some tests were creating several extensions
rather than one with several tables, which is probably slower than it has to be.
This change adds a new DynamoDbExtensionSchema class in which we can define the Dynamo schema for tests, and refactors
DynamoDbExtension to make it easy to instantiate a single extension with all the tables one wants (and no more, both to
minimize test startup time and to ensure we explicitly test our dependencies and lack thereof).
Tests requiring a DynamoDbExtension with a table schema that's not part of the normal Signal schema can instantiate a
DynamoDbExtension.RawSchema instead.
Test timings are unaffected, at least on my machine. Before:
```[INFO] service ............................................ SUCCESS [01:18 min]```
After:
```[INFO] service ............................................ SUCCESS [01:18 min]```
Co-authored-by: Jonathan Klabunde Tomer <jkt@viola.signal.org>
2023-04-03 13:08:43 -07:00
391b070cff
KeysController: return correct number of unsigned prekeys
...
When GET /v2/keys was orignally added in b263f47d4d9403
2023-04-03 14:32:45 -04:00
781cd0ca3f
Truncate SVR2 IDs to 16 bytes rather than 10.
2023-03-30 17:19:18 -06:00
3ccfeb490b
Add retry after exceptions during a cluster topology change event callback
2023-03-29 11:41:19 -05:00
0cc84131de
Add `enabled` to SVR2 configuration
2023-03-29 11:40:21 -05:00
4fa08fb189
Add secure value recovery 2 to `AccountsManager#delete()`
2023-03-29 11:40:21 -05:00
2a551d1d41
Add `SecureValueRecovery2Client`
2023-03-29 11:40:21 -05:00
391aa9c518
Wrap runtime exceptions during WebSocket auth into AuthenticationException
2023-03-29 10:08:55 -05:00
f5c62a3d85
Migrate from bounded elastic to dedicated executor for message delivery
2023-03-22 12:57:44 -05:00
6075d5137b
Add `/v2/accounts/data_report`
2023-03-22 12:57:21 -05:00
890293e429
change v1/challenge response for invalid captcha
2023-03-21 17:38:30 -05:00
05b43a878b
Register unlink device command
2023-03-21 17:35:57 -05:00
fe9c3982a1
Remove prepended username from `/v2/backup/auth` response
2023-03-21 17:35:42 -05:00
ee53260d72
Add filter-provided captcha score thresholds
2023-03-21 17:34:58 -05:00
a8eb27940d
Add per-action captcha site-key configuration
...
- reject captcha requests without valid actions
- require specific site keys for each action
2023-03-21 17:34:58 -05:00
a3a7d7108b
Change reglock expiration check to be > 0 instead of >= 0
2023-03-21 12:46:35 -07:00
35606a9afd
Send "account already exists" flag when creating registration sessions
2023-03-20 15:18:55 -04:00
2052e62c01
Use a purpose-specific method when checking verification codes via the legacy registration API
2023-03-20 15:18:38 -04:00
292f69256e
Refactor WebSocket message sending error and completion to subscriber from “doOn…”
2023-03-17 12:42:57 -05:00
fbdcb942e8
Add unlink user command
2023-03-16 11:17:36 -05:00
c14ef7e6cf
migrate token bucket redis record format from json to hash: phase 2
2023-03-16 09:15:22 -07:00
a04fe133b6
Fix a typo in a method name
2023-03-15 16:01:14 -07:00
483e444174
migrate token bucket redis record format from json to hash: phase 1
2023-03-15 16:01:06 -07:00
ebf8aa7b15
fixing embedded redis based tests
2023-03-15 13:56:40 -07:00
7c52be2ac1
Bump old registration default ratelimiter to match Bravo
2023-03-15 09:44:02 -07:00
2683f1c6e7
Encode username hash to base64 string without padding
2023-03-13 15:35:27 -07:00
4c85e7ba66
Moving RateLimiter logic to Redis Lua and adding async API
2023-03-13 14:50:26 -07:00
46fef4082c
Add metrics for registration lock flow
2023-03-09 09:07:21 -08:00
c06313dd2e
Drop tagging for legacy user agents
2023-03-09 10:43:45 -06:00
59bc2c5535
Add by-action captcha score config
...
Enable setting different captcha score thresholds for different captcha
actions via configuration
2023-03-09 10:43:16 -06:00
437bc1358b
Use server timestamp for queue score
2023-03-06 11:31:11 -06:00
179f3df847
Allow `DisabledPermittedAuthenticatedAccount` at `/v1/accounts/me`
2023-03-03 13:17:17 -06:00
8a889516b0
Improve `LoggingUnhandledExceptionMapper` combination with `CompletionExceptionMapper`
2023-03-03 13:17:07 -06:00
7de5c0a27d
Keep counts of open websockets by client platform
2023-03-03 13:16:24 -06:00
71d234e1e4
Update default rate limiter config
2023-03-02 10:27:07 -06:00
b5fb33e21e
Remove unused metrics
2023-03-02 10:14:58 -06:00
db198237f3
Expand `try`-`finally` scope of deleted accounts reconciliation lock
2023-02-28 12:42:18 -06:00
d0ccae129a
Remove obsolete metric
2023-02-27 16:33:34 -06:00
ecbef9c6ee
Add micrometer metrics to RateLimiter
2023-02-27 16:33:27 -06:00
ef2cc6620e
Add `@Produces` annotation for validation error response
2023-02-27 16:33:18 -06:00
b8f363b187
Add documentation to challenge controller
2023-02-24 17:41:15 -06:00
c3f4956ead
OpenAPI support
2023-02-24 13:03:30 -08:00
047f4a1c00
Update metric name
2023-02-24 13:07:07 -06:00
41c0fe9ffa
Adding a uniform configuration for all json/yaml mapper use cases: part 2
2023-02-24 09:28:55 -08:00
6edb0d49e9
Adding a uniform configuration for all json/yaml mapper use cases: bugfix
2023-02-23 20:01:32 -08:00
b9b4e3fdd8
Adding a uniform configuration for all json/yaml mapper use cases: part 1
2023-02-23 16:38:48 -08:00
6ee9c6ad46
Remove deprecated registration service response fields
2023-02-23 12:41:56 -08:00
7529c35013
Rate limiters code refactored
2023-02-23 10:49:06 -08:00
378b32d44d
Add missing token field to OutgoingMessageEntity
2023-02-23 11:18:07 -05:00
e1fcd3e3f6
Remove Lettuce command latency recorder
2023-02-23 10:17:31 -06:00
d7ad8dd448
Add micrometer timer to `FaultTolerantPubSubConnection`
2023-02-23 10:17:24 -06:00
859f2302a9
Remove unused metrics
2023-02-23 10:17:24 -06:00
a6d11789e9
Add `ClosedChannelException` to expected errors
2023-02-23 10:17:16 -06:00
43f83076fa
Update to reactor 3.5.3
2023-02-23 10:16:57 -06:00
71c0fc8d4a
Improve metrics around spam report tokens.
2023-02-22 15:43:44 -05:00
1f4f926ce6
Add platform tag to subscription receipt metrics
2023-02-22 14:31:30 -06:00
35286f838e
Add `/v1/verification`
2023-02-22 14:27:05 -06:00
e1ea3795bb
Reuse registration sessions if possible when requesting pre-auth codes
2023-02-22 12:45:26 -05:00
95237a22a9
Relax validation to allow null reporting tokens.
2023-02-22 11:06:51 -05:00
11c93c5f53
Keep username hash during reregistration
2023-02-21 09:07:30 -08:00
b59b8621c5
Add reporter platform as a reported message dimension
2023-02-17 16:44:13 -05:00
44c61d9a58
Allow updates if the profile already has a payment address
2023-02-17 16:44:01 -05:00
7561622bc8
Log cases where we fall back to a no-op spam-reporting token provider
2023-02-14 12:35:56 -05:00
b041566aba
Simplify construction of spam reporting token providers
2023-02-14 12:35:56 -05:00
cb72158abc
Add the presence of spam reporting tokens as a dimension
2023-02-14 12:35:21 -05:00
5c432d094f
Fix a typo in a metric name
2023-02-14 12:34:48 -05:00
24ac48b3b1
Update counter name
2023-02-10 14:54:02 -06:00
c03060fe3c
Phone number discoverability update endpoint
2023-02-10 11:52:51 -08:00
c16006dc4b
Add `PUT /v2/account/number`
2023-02-10 12:09:03 -06:00
8fc465b3e8
removing redundant logic in new registration flow
2023-02-09 09:06:48 -08:00
ce689bdff3
Use `DisabledPermittedAuthenticatedAccount` at `DELETE /v1/accounts/me`
2023-02-09 09:05:29 -08:00
e23386ddc7
Remove unused JUnit extension from test
2023-02-09 09:05:11 -08:00
0f17d63774
Add tests for `ProvisioningController`
2023-02-09 09:04:52 -08:00
4fc3949367
Add zkproof validation in username flow
2023-02-09 09:02:53 -08:00
7c3f429c56
Update E164 constraint message
2023-02-08 13:22:00 -08:00
7558489ad0
Registration Recovery Password support in `/v1/registration`
2023-02-08 13:20:23 -08:00
4a3880b5ae
`usernameHashes` on reserve request can't be null
2023-02-07 08:44:04 -08:00
a4a45de161
Add `/v1/registration`
2023-02-06 16:11:59 -06:00
358a286523
Use `java.util` Hex and Base64 codecs
2023-02-06 12:16:59 -06:00
8afe917a6c
Registration recovery passwords store and manager
2023-02-03 16:33:03 -08:00
24f515ccb4
Revert "Revert "Stored hashed username""
2023-02-02 11:20:44 -08:00
c98b54ff15
Revert "Stored hashed username"
2023-02-01 14:31:44 -08:00
d93d50d038
Stored hashed username
2023-02-01 12:08:25 -08:00
448365c7a0
Preserve legacy registration API error handling
2023-01-31 15:45:23 -05:00
8d0e23bde1
AuthenticationCredentials name changed to SaltedTokenHash
2023-01-30 15:45:24 -08:00
dc8f62a4ad
`/v1/backup/auth/check` endpoint added
2023-01-30 15:39:42 -08:00
cd4a4b1dcf
Retire `VoiceVerificationController`
2023-01-30 16:28:14 -05:00
38a0737afb
Retire `ReportSpamTokenHandler` interface in favor of `ReportedMessageListener`
2023-01-30 16:27:54 -05:00
4a2768b81d
Add spam report token support to `ReportedMessageListener`
2023-01-30 16:27:54 -05:00
00e08b8402
Simplify parsing/validation of spam report tokens
2023-01-30 16:27:54 -05:00
a89e30fe75
Clarify naming around spam filtering.
2023-01-27 11:40:33 -05:00
a01fcdad28
Add in controller for SVR2 auth.
2023-01-27 09:15:52 -07:00
2a99529921
Remove old badge strings
2023-01-26 09:23:11 -06:00
c934405a3e
fixing config field names
2023-01-25 17:28:03 -08:00
eb499833c6
refactoring of ExternalServiceCredentialGenerator
2023-01-25 15:20:28 -08:00
dd98f7f043
Support changing just the currency of an existing subscription
2023-01-25 15:14:17 -06:00
e8978ef91c
Add tests for `SubscriptionController#setSubscriptionLevel`
2023-01-25 15:14:17 -06:00
4ce85fdb19
Treat "check code" exceptions as `false` for legacy API compatibility
2023-01-25 14:39:29 -05:00
035ddc4834
Fix a mistake where we're looking for verification codes in place that hasn't been deployed yet (but will be soon!)
2023-01-25 11:43:06 -05:00
c2f40b8503
Remove duplicate code
2023-01-25 11:09:23 -05:00
cf738a1c14
Look for registration service errors in response bodies in addition to status responses
2023-01-25 10:49:36 -05:00
52d40c2321
Add metrics for spam report tokens received.
2023-01-24 10:25:40 -05:00
ab26a65b6a
Introduce spam report tokens
2023-01-19 11:13:43 -05:00
1c1714b2c2
Clarify a counter name
2023-01-17 17:13:06 -05:00
accb017ec5
Use a longer expiration window for quantile calculation
2023-01-17 17:13:06 -05:00
304782d583
Use processor from SubscriptionProcessorManager for issued receipts
2023-01-17 16:12:03 -06:00
f361f436d8
Support PayPal for recurring donations
2023-01-17 12:20:17 -06:00
9a06c40a28
Fix typos
2023-01-13 16:05:06 -06:00
e6ab97dc5a
Update enabled-required authenticator metrics
2023-01-13 14:05:56 -06:00
b8967b75c6
Update dropwizard to 2.0.34
2023-01-13 12:17:39 -06:00
74d9849472
Update badge strings
2023-01-13 12:08:05 -06:00
96b753cfd0
Add an extra kb to max sticker size
2023-01-13 12:07:45 -06:00
5a89e66fc0
Convert `AccountIdentityResponse` to a record
2023-01-13 12:36:17 -05:00
b4a143b9de
Convert `RegistrationLockFailure` to a record
2023-01-13 12:36:02 -05:00
050035dd52
Convert `ExternalServiceCredentials` to a record
2023-01-13 12:36:02 -05:00
7018062606
Explicitly create registration sessions
2023-01-09 15:27:07 -05:00
9e1485de0a
Assume stored verification codes will always have a session ID instead of a verification code
2023-01-09 15:27:07 -05:00
4e358b891f
Retire `StoredVerificationCode#twilioVerificationSid`
2023-01-09 15:27:07 -05:00
4044a9df30
stop warning about lack of syntax specification during proto generation
2023-01-09 12:20:07 -06:00
5a7b675001
import cleanup on controllers package
2023-01-09 12:20:07 -06:00
3be4e4bc57
remove unused exception type
2023-01-09 12:20:07 -06:00
5de51919bb
Remove `Subscriptions.PCI`
2023-01-05 12:02:34 -06:00
b02b00818b
Remove `Subscriptions.PCI` attribute
2023-01-04 11:31:46 -06:00
010f88a2ad
Remove `Subscriptions.C` attribute
2023-01-04 11:31:46 -06:00
60edf4835f
Add a `pni` capability to `UserCapabilities`
2022-12-21 16:26:07 -05:00
a60450d931
Convert `UserCapabilities` to a record
2022-12-21 16:26:07 -05:00
d138fa45df
Handle edge cases of Math.abs on integers.
2022-12-20 12:25:04 -05:00
2c2c497c12
Define reregistrationIdleDays DistributionSummary with custom expiry
2022-12-20 09:21:24 -08:00
cb5d3840d9
Add paymentActivation capability
2022-12-20 09:20:42 -08:00
9aceaa7a4d
Introduce ArtController
2022-12-19 11:58:16 -08:00
636c8ba384
Add metric for distribution of account idle time at reregistration
2022-12-16 13:50:29 -08:00
65ad3fe623
Add hCaptcha support
2022-12-16 11:28:30 -06:00
24ac32e6e6
Add `PayPalExperienceProfileInput.userAction`
2022-12-13 10:03:58 -06:00
26f5ffdde3
Enable case-sensitive usernames
2022-12-13 07:59:37 -08:00
a883426402
Simplify account cleaner
2022-12-06 16:21:25 -06:00
2f21e930e2
Add `minimum` one-time donation amont to validation error map
2022-12-06 16:21:15 -06:00
5fb158635c
Use existing `WebApplicationException` entity, if available
2022-12-06 16:21:15 -06:00
9cf2635528
some accounts classes refactorings
2022-12-05 09:30:40 -08:00
d0e7579f13
Revert transaction descriptor
2022-12-01 18:52:45 -06:00
2ecbb18fe5
Add support for one-time PayPal donations
2022-12-01 18:11:35 -06:00
df8fb5cab7
Move messages cache stale discard to a separate scheduler
2022-12-01 18:09:28 -06:00
99ad211c01
Enforce minimum amount by currency for one time donations
2022-11-28 11:44:59 -08:00
fb4ed20ff5
Remove groups v2 capability
...
* wip removing groups v2 capabilities
* comments
* finish removing groups v2 references
* hardcode gv1migration flag on user capability, remove other references
2022-11-21 09:31:47 -08:00
cb50b44d8f
Allow the account cleaner to operate on multiple accounts in parallel
2022-11-18 11:15:00 -05:00
ae57853ec4
Simplify deletion reason reporting
2022-11-18 11:15:00 -05:00
2881c0fd7e
Allow the account cleaner to act on all accounts in a crawled chunk
2022-11-18 11:15:00 -05:00
483fb0968b
Use badge name in level configuration for one-time donations
2022-11-18 11:05:23 -05:00
e8ee4b50ff
Retire the legacy "abusive hosts" system in favor of newer tools
2022-11-18 10:54:25 -05:00
4f8aa2eee2
Mark flaky test `@Disabled`
2022-11-17 13:23:42 -06:00
397d3cb45a
Add consolidated subscription configuration API
2022-11-16 12:27:00 -06:00
e883d727fb
Note deprecation of localized string
2022-11-16 12:09:00 -06:00
986545a140
Set `error_if_incomplete` for subscription payment behavior
2022-11-16 12:08:21 -06:00
836307b0c7
adding a metric for ipv4/ipv6 requests count
2022-11-15 11:17:01 -08:00
c32067759c
refactoring: use constants for header names
2022-11-15 11:16:49 -08:00
f41bdf1acb
Make `MessagesController#getPendingMessages` fully async
2022-11-11 13:19:57 -06:00
77d691df59
Always use reactived message processing in `WebSocketConnection`
2022-11-11 13:14:39 -06:00
a01f96e0e4
Temporarily disable account freezing on contention
2022-11-10 18:53:58 -05:00
1d1e3ba79d
Add metric to track newly-locked accounts.
2022-11-10 12:55:08 -05:00
2c9c50711f
Avoid reading from a stale `Account` after a contested reglock event
2022-11-10 12:41:50 -05:00
d3f0ab8c6d
Introduce an alternative exchange rate data provider
2022-11-10 10:25:06 -05:00
80a3a8a43c
Lock account when number owner lacks registration lock.
2022-11-09 14:03:09 -05:00
e6e6eb323d
Update metric name
2022-11-08 11:15:42 -06:00
681a5bafb4
Update `MessagesManager#getMessagesForDevice`
...
- add `subscribeOn()`
- use `CompletableFuture` for consistency
2022-11-08 09:38:52 -06:00
5bec89ecc8
Measure individual message timeouts
2022-11-08 09:37:37 -06:00
69ed0edb74
Revert "Add more detailed queue processing rate metrics"
...
This reverts commit bbbab4b8a4
2022-11-08 09:35:39 -06:00
ad5925908e
Change dispatch queues to `LinkedBlockingQueue`s
2022-11-04 11:08:17 -05:00
d186245c5c
Move all receipt sending work to executor
2022-11-04 11:08:06 -05:00
bbbab4b8a4
Add more detailed queue processing rate metrics
2022-11-04 11:06:38 -05:00
f83080eb8d
Update metric name
2022-11-03 14:50:20 -05:00
e0178fa0ea
Move additional handling of `MessagesManager#delete` to executor
2022-11-03 13:02:25 -05:00
c6a79ca176
Enable metrics on messages fluxes
2022-11-03 13:02:25 -05:00
6426e6cc49
Enable reactor Schedulers metrics
2022-11-03 13:02:25 -05:00
b13cb098ce
lettuce: set `publishOnScheduler` to `true`
2022-11-03 13:02:25 -05:00
afda5ca98f
Add a test for checking push challenge tokens
2022-11-03 11:14:59 -05:00
eb57d87513
Remove message listener key only after successfully unsubscribing
2022-11-03 11:09:11 -05:00
fbf6b9826e
tests: only call `SQLite.setLibraryPath` once
2022-11-03 11:08:43 -05:00
a01b29a6bd
set off_session=true for subscription updates
2022-11-02 14:34:26 -05:00
102992b095
Set `off_session=true` when creating subscriptions
2022-11-02 11:30:29 -05:00
bd69905f2e
Remove obsolete donation endpoint
2022-11-02 11:29:03 -05:00
aa829af43b
Handle expected case of empty flux in message deletion
2022-10-31 12:29:25 -05:00
c10fda8363
Use reactive streams for WebSocket message queue
...
Initially, uses `ExperimentEnrollmentManager` to do a safe rollout.
2022-10-31 10:35:37 -05:00
74d65b37a8
Discard old Twilio machinery and rely entirely on the stand-alone registration service
2022-10-28 10:40:37 -04:00
91626dea45
Count accounts rather than devices that are stories-capable
2022-10-25 16:36:05 -04:00
5868d9969a
minor changes to utility classes ( #1127 )
2022-10-25 08:48:56 -07:00
90490c9c84
Clean up the TestClock code a bit more.
2022-10-21 15:27:15 -04:00
8ea794baef
Add additional handling for nullable field in recurring donation record
2022-10-21 12:56:39 -05:00
fe60cf003f
Clean up testing with clocks.
2022-10-21 12:39:47 -04:00
0c357bc340
Add metrics tracking story capability adoption.
2022-10-20 12:25:03 -04:00
b711288faa
Run GitHub Action in a container
2022-10-18 16:59:35 -05:00
e7048aa9cf
Allow the reconciliation client to trust multiple CA certificates to facilitate certificate rotation
2022-10-18 11:17:47 -04:00
0120a85c39
Allow HTTP clients to trust multiple certificates to support certificate rollover
2022-10-18 11:17:47 -04:00
a41d047f58
Retire `CertificateExpirationGauge` in favor of other expiration monitoring tools
2022-10-18 11:17:47 -04:00
0a64e31625
Check verification codes for changing phone numbers against the stand-alone registration service when possible
2022-10-18 11:17:15 -04:00
8088b58b3b
Clarify default value for `includeE164`
2022-10-18 11:16:06 -04:00
a7d5d51fb4
Improve testing of MultiRecipientMessageProvider
2022-10-17 16:50:39 -04:00
378d7987a8
device capabilities: prevent `stories` downgrade
2022-10-17 15:25:13 -04:00
3e0baf82a4
Filter unknown UUIDs for /multi_recipient&story=true.
2022-10-13 15:33:51 -04:00
17a3c90286
Add "urgent" query parameter to /v1/messages/multi_recipient endpoint.
2022-10-11 11:10:11 -04:00
6341770768
Update `SubscriptionManager` to store processor+customerId in a single attribute and a map
...
- add `type` query parameter to `/v1/subscription/{subscriberId}/create_payment_method`
2022-10-07 14:26:17 -05:00
d2fa00f0c6
Add experiment to test standalone registration service
2022-10-06 15:42:53 -04:00
d6c9652a70
Fix internal server error when sending stories to unknown recipient.
2022-10-06 13:53:57 -04:00
3c655cdd5a
Migrate to "regionCode" instead of "region" to avoid tag name conflicts
2022-10-05 15:15:46 -04:00
83ab926f96
Add a dimension for story messages
2022-10-05 15:15:22 -04:00
544e4fb89a
Adjust routing for stories.
2022-10-05 12:20:42 -04:00
966c3a8f47
Add routing for stories.
2022-10-05 10:44:50 -04:00
c82c2c0ba4
Add country tag to twilio failures
2022-09-30 12:03:46 -05:00
6e595a0959
add an optionals utility and fix push challenge metric
2022-09-30 12:02:47 -05:00
a79d709039
Return 403 when a push challenge is incorrect
2022-09-30 12:02:47 -05:00
07ed765250
Update abusive message filter and filter account creates
2022-09-20 14:52:18 -05:00
2e497b5834
Fix operator order in metric calculation
2022-09-15 14:04:18 -05:00
61b3cecd17
Fix missing increment on recaptcha counter
2022-09-14 17:07:26 -05:00
a4a666bb80
Add metrics for recaptcha reasons
2022-09-14 16:00:11 -05:00
c14621a09f
Add metrics for captcha scores
2022-09-14 16:00:11 -05:00
d0a8899daf
Change discriminator seperator and default width
2022-09-14 15:53:15 -05:00
e25252dc69
Remove unused exception
2022-09-12 11:19:15 -05:00
8b65c11e1e
Update batch check entities from two optional fields to a single field
2022-09-12 11:19:01 -05:00
320c5eac53
Add support for PNIs at `v1/profile/identity_check/batch`
2022-09-09 10:55:34 -05:00
8199e0d2d5
Set resource field on log entry
2022-09-07 19:37:26 -05:00
7d171a79d7
Remove redundant @NotNull annotation
2022-09-07 19:37:26 -05:00
3b99bb9e78
Log remote config delete events
2022-09-07 19:37:26 -05:00
abd0f9630c
Create GCP Logging implementation of AdminEventLogger
2022-09-07 19:37:26 -05:00
a4508ec84f
Add new event logging module
2022-09-07 19:37:26 -05:00
4032ddd4fd
Add reserve/confirm for usernames
2022-09-07 11:49:49 -05:00
4c677ec2da
Remove deprecated /v1/attachments
2022-09-07 11:48:16 -05:00
c05692e417
Update deprecated `CircuitBreakerConfig` usage
2022-09-07 11:47:15 -05:00
ae1edf3c5c
Remove experiment associated with auth1->auth2 rollout.
2022-08-31 12:10:46 -06:00
b17f41c3e8
Check if dashes work in dynamic configuration keys.
2022-08-29 15:51:37 -06:00
08db4ba54b
Update authentication to use HKDF_SHA256.
2022-08-29 14:20:47 -06:00
cb6cc39679
Ignore null identity key.
2022-08-29 13:26:49 -06:00
b6bf6c994c
Remove a spurious `@Nullable` annotation
2022-08-26 15:22:23 -04:00
3bb4709563
Add CLDR region as a dimension
2022-08-26 12:41:51 -04:00
b280c768a4
Allow signup captchas to target CLDR two-letter region codes
2022-08-26 12:41:51 -04:00
616513edaf
Remove unused jdbi dependency
2022-08-25 13:40:46 -07:00
38b77bb550
Update libphonenumber to 8.12.54
2022-08-25 13:40:32 -07:00
e72d1d0b6f
Stop reading attribute-based messages from the messages table
2022-08-22 13:37:39 -07:00
1891622e69
Zero-pad discriminators less than initial width
2022-08-22 13:36:38 -07:00
628a112b38
Include country code for verify failure
2022-08-19 12:21:05 -07:00
50f5d760c9
Use existing tagging tools for keepalive counters
2022-08-16 13:16:19 -07:00
7292a88ea3
Record table performance metrics around reported messages
2022-08-16 13:15:30 -07:00
07cb3ab576
Add a "sealed sender" dimension to the sent message counter
2022-08-16 13:11:12 -07:00
27b749abbd
Filter expired items from Dynamo
2022-08-16 13:09:47 -07:00
27f67a077c
Add metrics for report-verification-succeeded response
2022-08-16 13:08:16 -07:00
393e15815b
Rename secondary account key namespace for usernames
2022-08-15 10:51:52 -05:00
a7f1cd25b9
Remove UAK normalization code
...
All accounts now have UAKs in top-level attributes
2022-08-15 10:47:52 -05:00
953cd2ae0c
Revert "Delete any leftover usernames in the accounts db"
...
This reverts commit a44c18e9b7
2022-08-15 10:45:38 -05:00
a84a7dbc3d
Add support for generating discriminators
...
- adds `PUT accounts/username` endpoint
- adds `GET accounts/username/{username}` to lookup aci by username
- deletes `PUT accounts/username/{username}`, `GET profile/username/{username}`
- adds randomized discriminator generation
2022-08-15 10:44:36 -05:00
24d01f1ab2
Revert "device capabilities: prevent `stories` downgrade"
...
This reverts commit 1c67233eb0
2022-08-12 14:21:27 -05:00
06eb890761
Improve e164 normalization check by re-parsing without country code
2022-08-12 10:52:55 -07:00
6d0345d327
Clean up Util
2022-08-12 10:52:55 -07:00
1c67233eb0
device capabilities: prevent `stories` downgrade
2022-08-12 10:51:16 -07:00
b4281c5a70
Send non-urgent push notifications with lower priority
2022-08-12 11:06:31 -04:00
5f6b66dad6
Add support for scheduling background push notifications
2022-08-12 10:57:59 -04:00
c2be0af9d9
Refactor `ApnPushNotificationSchedulerTest` to use a `Clock`
2022-08-12 10:57:59 -04:00
a53a85d788
Refactor scheduled APNs notifications in preparation for future development
2022-08-12 10:47:49 -04:00
a44c18e9b7
Delete any leftover usernames in the accounts db
...
The account username field should not currently be populated
2022-08-11 16:23:51 -05:00
4d78437fe4
Add a country code dimension to the non-normalized number counter
2022-08-10 15:03:01 -04:00
2bfe2c8ff8
Add an "urgent" dimension to the "sent messages" counter
2022-08-10 15:00:46 -04:00
65da844d70
Small test cleanup
2022-08-09 15:32:44 -05:00
5275c27ee1
Fix incorrect test Javadoc
2022-08-09 13:06:15 -07:00
390580a19d
Count cases when the a message’s destination UUID doesn’t match the account’s PNI
2022-08-09 13:06:15 -07:00
147917454f
Measure the depth of the queue for the FCM executor
2022-08-04 15:53:26 -04:00
39562775d9
Use a fixed-size thread pool for sending FCM notifications
2022-08-04 15:37:22 -04:00
4a0ef1f834
Measure the time taken to send APNs push notifications
2022-08-04 10:43:07 -04:00
85b16b674d
Measure the time taken to send FCM push notifications
2022-08-04 10:43:07 -04:00
ab5d8ba120
Use `ApiFutures#addCallback` for FCM futures
2022-08-04 10:43:07 -04:00
28076335e0
Generate APNs payloads using a payload builder
2022-08-04 10:37:30 -04:00
9e9333424f
Retire `RetryingApnsClient`
2022-08-04 09:59:18 -04:00
6f0faae4ce
Introduce common push notification interfaces/pathways
2022-08-03 10:07:53 -04:00
0a6d724f2c
Remove `GCMSender`
2022-08-02 17:31:35 -04:00
8956e1e0cf
Check for null FCM error codes
2022-08-02 17:29:31 -04:00
c9ae991aa3
Add an experiment to allow a phased transition from the old GCM API to the current FCM API
2022-08-02 15:34:09 -04:00
421d594507
Introduce an `FcmSender`
2022-08-02 15:34:09 -04:00
9c03f2e468
Add support for receiving, storing, and returning `urgent` flags on messages
2022-08-02 12:05:23 -04:00
1175ff5867
Log cause when queue processing hits max retries
2022-08-02 08:36:16 -07:00
55df593561
Clean up `MessageAvailabilityListener` if the websocket client is closed
2022-08-02 08:35:16 -07:00
a06a663b94
Use the envelope’s destination UUID for receipt source UUID
2022-08-02 08:34:20 -07:00
3d2f7e731f
Remove `Envelope.source`
2022-08-02 08:34:20 -07:00
2575372639
Add missing `increment()` to displacement counter
2022-08-02 08:30:54 -07:00
faa6e8324a
Fix a test issue where we were ignoring some test parameters
2022-08-01 11:02:33 -04:00
d0e3fb1901
Unconditionally write messages to the messages table as envelopes
2022-08-01 10:44:27 -04:00
04287c5073
Optionally write messages as envelopes to the messages table
2022-07-29 11:10:50 -04:00
0c76fdd36c
Read bare envelopes from the messages table if possible
2022-07-29 11:10:50 -04:00
3636626e09
Make `Envelope` the main unit of currency when working with stored messages
2022-07-29 10:59:02 -04:00
3e0919106d
Add a method to build an `OutgoingMessageEntity` from an `Envelope`
2022-07-29 10:59:02 -04:00
d385838dc1
Add methods to convert `IncomingMessage`/`OutgoingMessageEntity` instances into `Envelope` entities
2022-07-29 10:59:02 -04:00
e28f1e8ceb
Remove the unused `destination` property from `IncomingMessage`
2022-07-29 10:59:02 -04:00
3d875f1ce5
Convert incoming/outgoing message entities to records
2022-07-29 10:59:02 -04:00
c4c5397b44
Convert group credential redemption time to a `long`
2022-07-28 10:08:25 -04:00
6b6f9b2405
Add PNI to `GroupCredentials` responses that contain `AuthCredentialWithPni` instances
2022-07-28 10:08:25 -04:00
7d4a8d03a4
Mark old group credential getter as `@Deprecated`
2022-07-28 10:08:25 -04:00
e9119da040
Retire the (unused!) binary message format
2022-07-28 09:59:00 -04:00
aa36dc95ef
Add `MicrometerCommandLatencyRecorder` to Redis clusters
2022-07-27 14:23:14 -07:00
a6f9409a39
Remove dynamic configuration feature flags; add `DynamicMessagePersisterConfiguration`
2022-07-27 14:19:10 -07:00
41a113e22c
Stop queue persistence attempt if items aren’t removed from cache
2022-07-27 14:19:10 -07:00
4cfcdb0c96
editorconfig formatting
2022-07-27 14:19:10 -07:00
36050f580e
Handle duplicate device ids more gracefully
2022-07-27 11:15:32 -05:00
98760b631b
Don't wrap "change number" arguments in `Optional`
2022-07-27 10:55:37 -04:00
d00aa1e77a
Fix an inconsistent check for the presence/absence of "change number" arguments
2022-07-27 10:55:37 -04:00
dce391a248
Add support for setting PNI-associated registration IDs and identity keys when changing numbers
2022-07-26 15:19:27 -04:00
c252118cfc
External links in comments from http to https
2022-07-26 15:17:58 -04:00
e9fd32de79
Only attempt to unsubscribe if the queue name is not null
2022-07-26 10:20:10 -07:00
bc02fe3831
Only unsubscribe from keyspace notifications if the node has the slot
2022-07-26 09:21:50 -07:00
d290aad27b
Associate source/destination country codes for reported messages
2022-07-14 09:31:12 -04:00
6754ec5e10
Pass disconnection reason (if known) to clients
2022-07-13 15:30:03 -04:00
1ba00a66eb
Pass the reason for displacement to presence displacement listeners
2022-07-13 15:30:03 -04:00
1dd7d33e23
Simplify `Device` entity
2022-07-13 13:55:20 -04:00
e200548e35
Introduce an account change validator
2022-07-13 12:24:39 -04:00
fdf7b69996
Remove a temporary workaround for incorrect envelope types from iOS clients
2022-07-13 11:30:52 -04:00
92d36b725f
Allow presence keys to expire if not periodically renewed
2022-07-13 11:28:55 -04:00
4e131858ca
Generalize scope of and expand size of websocket scheduled executor service
2022-07-13 11:28:55 -04:00
a45d95905e
Be permissive in account-create accept-language
...
Currently, if we fail to parse a user's accept-language in account
creation, creation will fail. While it's a suboptimal experience to get
a verify code in the wrong language, it might be better than not being
able to sign up at all.
2022-07-13 11:22:31 -04:00
0fdfdabf2a
merge GroupController into CertificateController
2022-07-01 13:04:24 -05:00
a25e967978
Remove spurious mocking
2022-07-01 12:26:22 -05:00
38e30c7513
Allow callers to get an expiring profile key credential
2022-07-01 12:26:22 -05:00
e38e5fa17d
Allow callers to request a combined group auth credential
2022-07-01 12:26:22 -05:00
42fd29d38b
Update badge description text to remove boost & sustainer language
2022-06-21 13:36:12 -05:00
bf6d3aa324
Fix batching issue that was causing duplication in large queries
2022-06-20 12:41:10 -05:00
023ccc6563
Add a unit test for the batch identity check endpoint
2022-06-20 12:32:31 -05:00
da49db5b9e
Move batch identity checks off the common fork join pool
2022-06-20 11:07:33 -05:00
cc8dda28cc
Simplify logic for batching bulk identity check request
2022-06-20 10:28:20 -05:00
d31550d444
Only wrap Base64 decode with the exception catch
2022-06-20 09:42:33 -05:00
51f37350eb
Because one shouldn't take the size of null things
2022-06-17 15:03:25 -05:00
ecfa161da8
Validate the request
2022-06-17 14:32:38 -05:00
e3778c17ea
Use POST not GET for request requiring body
2022-06-17 14:31:15 -05:00
cbc95415b7
Add endpoint to batch check identity keys
2022-06-17 12:20:30 -05:00
327eb0219d
Bypass account registration captcha on test devices
2022-06-13 15:01:46 -07:00
a853748303
Revert "Update ChangeNumber to allow reset of registration IDs."
...
This reverts commit 7001ad1445
2022-06-09 11:51:50 -06:00
7001ad1445
Update ChangeNumber to allow reset of registration IDs.
2022-06-02 16:37:32 -06:00
5cfb133f79
Use redis for abusive hosts autoblock
...
Also delete postgres dependencies that we no longer need
2022-05-31 10:08:10 -05:00
5df24edebf
Remove all unused imports remaining in project
2022-05-25 17:15:20 -05:00
95d0293a96
Remove unused counter
2022-05-25 16:57:01 -05:00
f5a2efb57c
Clarify hidden static method call
2022-05-25 16:51:12 -05:00
e4b9ae4eee
Clear up warnings
2022-05-25 16:50:58 -05:00
bc1ac5a37f
Remove unused fields
2022-05-25 16:50:43 -05:00
96ac56faac
Remove unused import
2022-05-25 16:38:11 -05:00
f0bc444388
Remove unused timer
2022-05-25 16:37:51 -05:00
8584f47d95
Add more metrics to createAccount captcha
2022-05-25 15:50:11 -04:00
f6235b8c08
Check for newly-expired accounts before previously-expired accounts for metric accuracy
2022-05-25 15:49:54 -04:00
d452e90470
Move `AccountCleaner` into its own crawler
2022-05-25 15:46:18 -04:00
418a869451
Increase max deletions per chunk to 256
2022-05-25 14:19:04 -04:00
cf89e2215c
Fully delete already-expired accounts
2022-05-25 14:19:04 -04:00
a4ca1ef1a8
Move `AccountCleanerTest` out of the `test` package; reduce visibility of test-only fields
2022-05-25 14:19:04 -04:00
c38572307d
Remove unused imports
2022-05-20 10:20:45 -07:00
20902df122
Fix ZRANGE arguments in get_items.lua
2022-05-19 12:14:02 -07:00
d31ddb72f3
Optimize message deletion by skipping lookup
2022-05-18 13:02:21 -07:00
75c92eaa93
Drop high-cardinality distribution summaries
2022-05-11 14:26:38 -04:00
0445adcac3
Conclude `ReportMessageManager` ACI migration
2022-05-11 11:26:24 -07:00
06dd4c5026
Derive username from ACI for CDS{H,I} ( #989 )
...
* Derive username from ACI for CDS{H,I}
* Update sample YAML.
2022-05-02 08:41:38 -06:00
058caadf4f
Use BigDecimal#compareTo for numeric equality testing
2022-04-29 14:20:09 -05:00
7b7d309105
Apply stripe conversion factor to gift badge amount check
2022-04-29 13:48:10 -05:00
63be7b93ce
Record level on boost payment intent
2022-04-29 12:06:15 -05:00
578ea12b59
Add gift badges to user capabilities
2022-04-29 11:08:36 -05:00
364e59be57
Add shape to duration to ensure it's render as an integer
2022-04-29 10:14:39 -05:00
fece4dac9e
Add duration to boost badges
...
Lets clients know how long the badge will last for after purchase.
2022-04-29 10:14:39 -05:00
ce85c1aabc
Add name and description for gift badge
2022-04-29 10:14:39 -05:00
0ac2ce5e72
Add gift badge to the level output for boost badges
2022-04-29 10:14:39 -05:00
391c800bf5
Add gift configuration to subscription controller
2022-04-29 10:14:39 -05:00
f6471cf8f9
Add gift configuration source
2022-04-29 10:14:39 -05:00
1eaff753a6
Count "forbidden identity key change" events
2022-04-22 15:53:43 -04:00
c29d5de1eb
Refactor two more switch statements to new switch style
2022-04-19 13:39:38 -05:00
d94c171d63
Use new style switch statement
2022-04-19 13:35:26 -05:00
53203dbcef
Refactor common pattern for checking Account capabilities
2022-04-19 10:33:54 -05:00
9e66f8ac11
Add gift badges device capability
2022-04-19 10:33:54 -05:00
796fb3b4cd
Refactor Device#equals method
2022-04-19 10:33:54 -05:00
473ecbdf2d
Allow primary to set and provide new signed prekeys for linked devices ( #950 )
2022-04-15 12:39:47 -06:00
7b3703506b
Remove number from `ReportMessageManager#store`
2022-04-13 16:41:32 -04:00
5816f76bbe
Add support for getting (limited) profiles by phone number identifier
2022-04-13 16:27:57 -04:00
355996bafc
Add outcome type to subscription information endpoint
2022-04-08 12:31:31 -05:00
c2bb46f41d
Add outcome network status and outcome reason to subscription info
2022-04-08 12:31:31 -05:00
12f76c24b1
Add failure information for the latest charge on a subscription
2022-04-08 12:31:31 -05:00
3dc0d0bb92
Revert "Revert "Replace curve25519-java with libsignal-server""
...
This reverts commit c06a5ac96c
2022-03-29 12:24:45 -04:00
2bb8f92af1
Revert "Revert "Replace zkgroup with libsignal-server""
...
This reverts commit fa3a9570d6
2022-03-29 12:24:45 -04:00
5b7d5d2b93
Reduce "unrecoverable error" messages when sending GCM notifications from WARN to DEBUG
2022-03-25 14:34:44 -07:00
2b27db18d8
Count GCM failures by error code
2022-03-25 14:34:44 -07:00
f3c811cc03
Move "no local subscription" warnings from WARN to DEBUG
2022-03-25 14:34:44 -07:00
77fd01bd9f
Accept source ACI at `/v1/messages/report`
2022-03-25 14:27:09 -07:00
fa3a9570d6
Revert "Replace zkgroup with libsignal-server"
...
This reverts commit 86a09b16ff
2022-03-24 12:11:46 -04:00
c06a5ac96c
Revert "Replace curve25519-java with libsignal-server"
...
This reverts commit 06a57ef811
2022-03-24 12:11:46 -04:00
33467b42da
Remove a deprecated/unused field
2022-03-24 10:50:49 -04:00
13fb641113
Make field name casing consistent
2022-03-24 10:50:49 -04:00
53f17c2baa
Drop the legacy message and relay fields from message entities
2022-03-24 10:50:49 -04:00
06a57ef811
Replace curve25519-java with libsignal-server
...
These APIs stemmed from a common source long ago, so there's not much
to change!
2022-03-24 10:50:18 -04:00
86a09b16ff
Replace zkgroup with libsignal-server
2022-03-24 10:50:18 -04:00
c70d7535b9
Make TURN configuration dynamic
...
Also enables conditionally including more TURN servers for gradual
rollouts
2022-03-23 14:38:02 -05:00
2a832d36d7
Remove AcceptNumericOnlineFlagRequestFilter
2022-03-23 14:31:01 -05:00
1578c89475
Only allow primary device to update identity key.
2022-03-22 14:39:04 -06:00
bab6b36e4d
Count reported messages by destination country code in addition to source country code
2022-03-22 09:56:27 -04:00
f75e616397
Introduce a listener pattern for reported messages
2022-03-22 09:56:27 -04:00
7ba0f604e6
Tag the push challenge request counter by country
2022-03-17 16:07:48 -04:00
cf8a4cc939
Decrease receipt sender executor thread pool
2022-03-17 13:07:03 -07:00
2f6b0b1a55
Tag push challenge attempt metrics by country code
2022-03-16 15:00:04 -04:00
c048074c31
Tag captcha attempt metrics with UA platform
2022-03-16 15:00:04 -04:00
5a88ff0811
Use the async dynamo client to batch uak updates
2022-03-14 14:02:16 -05:00
de68c251f8
Instrument the receipt sender executor
2022-03-11 17:20:52 -08:00
7c9ae3561d
Send delivery receipts asynchronously
2022-03-11 16:34:22 -08:00
b608ece57e
Remove `supportsAnnouncementGroups` metric
2022-03-11 16:18:00 -08:00
8dfffebaf1
Remove unnecessary check for destination UUID
2022-03-11 16:17:54 -08:00
fef37f739b
Remove unused classes and methods
2022-03-10 11:08:38 -05:00
1571f14815
Add a feature flag to disable account normalization
2022-03-09 14:03:21 -06:00
9cb098ad8a
Add a top-level uak to existing items
...
Items wirtten before we started storing the uak at
the top level only store the uak in the
account blob. The will be updated on account
crawl
2022-03-09 14:03:21 -06:00
9b9edbae0e
Drop `DeadLetterHandler` (which is functionally unused)
2022-03-08 10:03:06 -05:00
491155d1cf
Remove `@Consumes` from GET/DELETE in `/v1/subscriptions`
2022-03-04 15:36:02 -08:00
54207254f1
Remove unused configuration
2022-03-04 11:44:17 -08:00
1395dcc0be
Make the enterprise client canonical
2022-03-04 11:44:17 -08:00
2a68d9095d
Remove transitional and legacy client
2022-03-04 11:44:17 -08:00
a984b3640e
Further refine score distribution summary
2022-03-04 11:44:17 -08:00
f6cbc32ee7
Align "link device" and "fetch pre-keys" rate limits
2022-03-04 10:45:06 -05:00
602614acf6
Refine assessment metrics
2022-03-03 16:09:49 -08:00
3854b7d472
Remove `@Consumes` from `GET /v1/config`
2022-03-03 16:08:55 -08:00
5e25481088
Fix a trivial typo in a constant's name
2022-03-03 10:59:19 -05:00
fe86e15d80
Remove PNI repair code
2022-03-03 10:25:11 -05:00
179b4a69eb
Clear one-time pre-keys when PNIs are assigned
2022-03-03 10:24:54 -05:00
eee6307789
Move score floor to dynamic configuration, add distribution summary
2022-03-02 15:18:33 -08:00
9fc5002619
Add stories capability
2022-03-02 15:16:21 -08:00
faa6ae284a
Add uak as a top level attribute
2022-03-02 10:41:09 -06:00
8b4355b21d
Add a "challenge issued" counter tagged by country and platform
2022-03-02 10:40:47 -06:00
e8835da740
Tag captcha success rate counter by country
2022-03-02 10:40:47 -06:00
93d06e3f4d
Fix typos
2022-03-01 14:14:52 -08:00
935e268dec
Parameterize sitekey
2022-03-01 10:40:42 -08:00
3a1c716c73
Remove an unused rate limiter
2022-02-25 13:50:17 -08:00
f3457502a6
Support different v2 captcha actions
2022-02-25 13:49:47 -08:00
d3cd1d1b15
Use GetLatestConfiguration in config manager
...
Use StartConfigurationSession/GetLatestConfiguration instead of
GetConfiguration since the latter has been deprecated
2022-02-23 15:36:33 -06:00
f5a75c6319
Simplify RateLimitExceeded with no retry-duration
...
- Avoid passing negative durations in error cases
- Drop unused message
- Return a duration for a bad forwarded-for
2022-02-23 15:25:24 -06:00
ae3a5c5f5e
Return a Retry-After on rate-limited responses
...
Previously, only endpoints throwing a RetryLaterException would include
a Retry-After header in the 413 response. Now, by default, all
RateLimitExceededExceptions will be marshalled into a 413 with a
Retry-After included if possible.
2022-02-23 15:25:24 -06:00
c367a71223
APNS: include a collapse-id for non-VOIP notifications
...
This has two benefits:
- The APNS server should only send an iOS client a single push
notification for any missed messages while the device is offline
(server-side coalescing). Note that the client can still turn that
into multiple "user notifications" as it pulls from its queue.
- If multiple notifications get delivered but iOS is unable to process
them (say, because the phone just restarted and hasn't been unlocked
yet), the user should only get one "You may have received messages"
notification (client-side coalescing).
2022-02-18 10:41:10 -05:00
d259ef0348
Update rate limit exceeded counter
2022-02-17 13:23:48 -08:00
288cbf4a80
Clean up null-ability of incoming message entity fields
2022-02-17 13:23:48 -08:00
ba5e5a780f
Throw an exception instead of using Optional<Resposne>
2022-02-17 13:23:48 -08:00
73fa3c3fe4
Add test for content length validation
2022-02-17 13:23:48 -08:00
579eb85175
Reject invalid envelope types
2022-02-17 13:23:48 -08:00
b2b20072ae
Add `MicrometerRegistryManager`
2022-02-17 13:18:30 -08:00
a2c4d3fe95
Use a strong reference to the application shutdown gauge
2022-02-17 13:18:30 -08:00
31e2be2e4d
Fixup invalid accept-language counter
...
- Fix name
- Add platform/version tags to the counter
2022-02-10 11:57:25 -06:00
9f5d97e1c6
Silence noisy warnings for invalid Accept-Language
2022-02-10 11:57:25 -06:00
baaae6cd9f
Add `@NotNull` to controller args where appropriate
...
Notably, `@Valid` doesn't imply `@NotNull`
2022-02-10 11:57:04 -06:00
ed398aa7b9
Add `DeviceCapabilities.pni`
2022-02-09 15:56:01 -08:00
6e2ae42dab
Add platform to metrics
2022-02-09 15:55:07 -08:00
41bf2b2c42
Add a binary format for incoming messages
...
The existing, general incoming message endpoint accepts messages as
JSON strings containing base64 data, along with all the metadata as
other JSON keys. That's not very efficient, and we don't make use of
that full generality anyway. This commit introduces a new binary
format that supports everything we're using from the old format (with
the help of some query parameters like multi-recipient messages).
2022-02-07 16:05:03 -08:00
639d634426
Restore displaced UUID from deleted accounts table when present
2022-01-31 13:01:36 -08:00
5358fc4f43
Use `setRegistrationLockFromAttributes`
2022-01-31 12:56:59 -08:00
99eda80a78
Measure rate limit challenge responses by platform
2022-01-27 16:05:52 -05:00
cbbdea1ba4
Impose more stringent requirements on cardinality checks
2022-01-26 16:13:12 -05:00
05e7c98620
Return an `AccountIdentityResponse` when changing phone numbers
2022-01-26 14:44:53 -05:00
1f1d618dea
Rename `AccountCreationResult` to `AccountIdentityResponse` (since it's not just for account creation any more)
2022-01-26 14:44:53 -05:00
b18117ef89
Add tests for unidentified access when requesting profiles
2022-01-25 14:07:44 -05:00
44cb796574
Add more detail to "could not get acceptable languages" logging
2022-01-25 12:21:35 -05:00
f69db11f42
Drop some unused dynamic configuration properties
2022-01-21 18:46:37 -05:00
96a680dcf0
Remove displaced account from directory when changing numbers
2022-01-21 18:46:11 -05:00
c612663490
Handle `null` `AccountAttributes` when verifying linked devices
2022-01-14 14:47:46 -05:00
de5d967d18
Track metrics for dynamic config load failures
2022-01-14 14:47:12 -05:00
7fc63f7847
Allow callers to specify one or more dynamic config classes
2022-01-14 14:45:29 -05:00
146655e997
Add a "sameAvatar" flag to CreateProfileRequest
...
If sameAvatar is set (and "avatar" is also set), the avatar field for
a profile will be copied from the existing profile. This saves S3
churn and client bandwidth.
2022-01-04 13:57:41 -08:00
bb27dd0c3b
Migrate from `Object[]` parameters to `Stream<Arguments>`
2022-01-03 15:10:02 -08:00
d7a3c12bbe
Drop unused DynamoDB class rules
2022-01-03 15:10:02 -08:00
a1e84f5a88
Migrate service tests to JUnit 5
2022-01-03 15:10:02 -08:00
b758737907
Migrate remaining JUnit 4 Redis cluster tests to `RedisClusterExtension`
...
* Increase redis cluster initialization wait to 10 seconds
* Move to JUnit 5 `Assumptions`
2022-01-03 14:59:39 -08:00
3e777df86c
Timeout `sendNextMessagePage` after 5 minutes
2021-12-20 11:31:11 -08:00
278b4e810d
Add (failing) test for send message timeouts
2021-12-20 11:31:11 -08:00
346c7cd743
Remove null-check of destination UUID
2021-12-20 11:31:11 -08:00
5baa51d547
Migrate challenge-issuing configuration into the abusive message filter module
2021-12-16 12:22:19 -05:00
616db337e1
Remove an old rate limiting feature flag
2021-12-16 12:22:19 -05:00
3895871462
Repair missing PNIs in JSON blobs on account load
2021-12-16 11:17:51 -05:00
a87b84fbe2
Return an empty response if somebody requests a profile key credential with a non-existent version
2021-12-16 10:30:55 -05:00
20c95e2606
Register `ApplicationShutdownMonitor` last
...
This will make it start last and shut down first, which is pretty much what we want for shutdown state monitoring
2021-12-15 19:27:23 -05:00
22dccaeddb
Count cases where we can find a given account, but not the given profile version
2021-12-15 15:53:47 -05:00
e611a70ba4
Remove usernames from profile responses
2021-12-15 15:53:47 -05:00
66845d7080
Refactor: separate the various types of profile responses
2021-12-15 15:53:47 -05:00
4ea7278c6f
Remove unversioned profile properties from `Account` entities
2021-12-15 15:53:47 -05:00
2b2e26f14b
Remove deprecated, unversioned profile setters
2021-12-15 15:53:47 -05:00
b496ef8d6f
Fix an issue where the deleted accounts lock client was trying to talk to the deleted accounts table
2021-12-15 13:16:32 -05:00
2d1ca98605
Consolidate DynamoDB clients/configuration
2021-12-15 12:42:41 -05:00
eaa4c318e3
Add usernames to `whoami` and account creation responses
2021-12-15 11:47:10 -05:00
31373fd1ba
Add a command for assigning usernames to individual users
2021-12-15 11:46:33 -05:00
0ce87153e5
Remove second database for `AbusiveHostRules`
2021-12-08 16:03:02 -08:00
dba1711e8d
Convert `AbusiveHostRule` to a record
2021-12-08 14:43:21 -08:00
a70b057e1c
Add second (migration) database to `AbusiveHostRules`
2021-12-08 12:46:05 -08:00
3df143dd3d
Switch to zonky test embedded postgres and use postgres 11.13.0
2021-12-03 16:07:07 -05:00
d78d7c726e
Fix a UUID transposition when requesting profile key credentials
2021-12-03 16:06:26 -05:00
d0ad580c7d
Add (failing!) tests for getting a profile key credentials for somebody else
2021-12-03 16:06:26 -05:00
4a8a2a70b5
Return 400 instead of 500 when amount is too small
2021-12-03 12:24:16 -06:00
20a71b7df2
Add tests for generating profile key credentials
2021-12-03 12:16:13 -05:00
68412b3901
Allow the "get profile" endpoint to include a PNI credential
2021-12-03 12:16:13 -05:00
31e5058b15
Make temporary iOS envelope type adaptation a little wider
2021-12-03 12:06:31 -05:00
14cff958e9
Migrate challenge-issuing rate limiters to the abusive message filter
2021-12-03 11:52:58 -05:00
9628f147f1
Separate statically- and dynamically-configured rate limiters
2021-12-03 11:01:15 -05:00
13e346d4eb
Distinguish local vs remote in `ClientPresenceManager#disconnectPresence`
2021-12-02 14:32:42 -08:00
e507ce2f26
Include ACI and PNI in DeviceResponse
2021-12-02 17:21:05 -05:00
9c62622733
Handle cases where a message might be missing a destination UUID
2021-12-02 14:06:49 -05:00
62aa0cef39
Set destination UUIDs for receipts
2021-12-02 14:06:49 -05:00
401953313a
Remove all vestiges of the relational account database
2021-12-02 12:46:43 -05:00
4d2403d619
Use `assertTimeoutPreemptively` instead of `assertTimeout`
2021-12-02 12:17:08 -05:00
c5f261305d
Store destination UUIDs when persisting messages to DynamoDB
2021-12-02 12:17:08 -05:00
394f58f6cc
Add a (failing!) check for destination UUIDs
2021-12-02 12:17:08 -05:00
674bf1b0e0
Drop a myserious empty test
2021-12-02 12:17:08 -05:00
606ddd8a9b
Populate destination UUID for messages delivered via websocket
2021-12-02 12:17:08 -05:00
e23a1fac50
Remove old Postgres-backed remote config machinery
2021-12-02 12:16:43 -05:00
342323a7e6
Use canonical usernames throughout `AccountsManager`
2021-12-02 12:02:29 -05:00
efb410444b
Introduce a username validator
2021-12-02 12:02:29 -05:00
17c9b4c5d3
Transition from Postgres-backed remote config store to Dynamo-backed store
2021-12-02 11:13:07 -05:00
706de8e2f1
Add a command to migrate remote configuration entries from Postgres to DynamoDB
2021-12-02 11:13:07 -05:00
23bc11f3b6
Introduce a DynamoDB-backed remote config store
2021-12-02 11:13:07 -05:00
4eb7dde1c8
Migrate RemoteConfigsTest to Junit 5
2021-12-02 11:13:07 -05:00
064861b930
Consolidate profiles store tests and discard `ProfilesStore` interface
2021-12-02 10:49:54 -05:00
afa910bbd7
Drop relational profiles store
2021-12-02 10:49:54 -05:00
6aceb24fd2
Drop profile migration tools
2021-12-02 10:49:54 -05:00
d94e86781f
Migrate username storage from a relational database to DynamoDB
2021-12-01 16:50:18 -05:00
acfcb18f29
Allow overwriting of previously-delted profiles
2021-12-01 11:59:18 -05:00
f7ff8e3837
Add a (failing!) test for deleting, then resetting profiles
2021-12-01 11:59:18 -05:00
048e17c62b
Use a memoizing supplier instead of a looping thread to cache remote config entries
2021-11-30 16:35:42 -07:00
d89b4f7e95
Compare versioned profiles synchronously; log a subset of mismatches for further investigation
2021-11-30 16:35:29 -07:00
795b226b90
Mark methods that update `SignedPreKey`s as `@ChangesDeviceEnabledState`
2021-11-30 10:40:12 -07:00
e485c380e0
Change the name of the CSV file argument to avoid upstream naming collisions
2021-11-30 11:31:12 -05:00
bb4f4bc441
Modify the "migrate profiles" command to accept a list of UUIDs/versions from a CSV file
2021-11-30 11:22:51 -05:00
65b49b2d9c
Use a "for each" strategy in profile migration methods
2021-11-24 16:54:30 -05:00
9e7010f185
Migrate profiles from a relational database to DynamoDB
2021-11-24 14:48:41 -05:00
3bb8e5bb00
Set a TTL for `Account` entries in the general cache
2021-11-24 14:47:36 -05:00
2a4d1da2ca
Delete accounts from Redis after they've been deleted from Dynamo
2021-11-24 13:47:53 -05:00
6b71b66bd2
Take no action if badge list is omitted entirely
2021-11-24 13:47:39 -05:00
ebf24fb125
Add a (failing!) test for clients omitting badges in profile update requests
2021-11-24 13:47:39 -05:00
46d64b949e
Don't read "soft-deleted" profiles
...
Nothing is actually "soft-deleting" profiles yet, and this
is a first step toward migrating profiles to a new data
store.
2021-11-24 12:02:07 -05:00
6919354520
Fix a counting bug with reported messages
2021-11-23 17:28:39 -05:00
a42fe9bfb0
Add crawler names to log messages
2021-11-23 16:22:09 -05:00
ee1f8b34ea
Add a command for reserving usernames
2021-11-23 16:21:03 -05:00
c910fa406d
Migrate reserved usernames from a relational database to DynamoDB
2021-11-23 16:21:03 -05:00
559205e33f
Log cases where accounts are missing or have inconsistent PNIs
2021-11-23 15:40:31 -05:00
c0756e9c60
Attempt an orderly websocket close on displacement before a hard disconnect
2021-11-23 11:36:32 -07:00
bf1190696e
Add badge workaround for old Android builds
2021-11-23 09:58:06 -06:00
71dd0890de
Restore an accidentally-removed PNI consistency check
2021-11-23 10:53:40 -05:00
e5acdf1402
Don't update the PNI attribute during general account updates
2021-11-23 10:53:40 -05:00
0f08b6bb59
Drop "got successful captcha" messages from `INFO` to `DEBUG`
2021-11-22 17:06:34 -05:00
6198a7b69a
Remove spurious `@JsonProperty` annotations
2021-11-22 15:43:09 -05:00
067aee6664
Remove unused properties from `OutgoingMessageEntity`
2021-11-22 15:43:09 -05:00
138a2ebbd0
Drop transactional logic from phone number identifier migration
2021-11-22 15:32:24 -05:00
296f6a7a88
Make phone number identifiers non-optional
2021-11-22 15:32:24 -05:00
069ffa9921
Drop PNI migration tools
2021-11-22 15:32:24 -05:00
f42fd8a840
Retire unused diagnostic metrics
2021-11-22 15:31:16 -05:00
10f27af6f2
Retire old unsealed-sender meters
2021-11-22 15:31:16 -05:00
0bbd34d060
Use text blocks where possible
2021-11-22 15:30:31 -05:00
282daeb0dc
Add a command to assign PNIs to accounts that don't already have one
2021-11-22 15:03:19 -05:00
d33b313c11
Break down legacy "get profile" requests by platform
2021-11-19 12:37:39 -05:00
fb7316c9ae
Return subscription status string in GET
2021-11-19 11:36:01 -06:00
279b0a51d9
Use latest invoice on subscription to generate receipts
2021-11-19 11:25:38 -06:00
6547d5ebf3
More consistent naming of receipt credentials endpoints
2021-11-19 10:14:00 -06:00
4f1ef9a039
Add additional http status codes to /v1/subscription/boost/receipt_credentials
2021-11-19 10:11:33 -06:00
077ead71a5
Rename legacy profile methods to separate them in metrics
2021-11-18 11:31:15 -05:00
caba110266
Revert "Revert "Remove transparent SVG for badging""
...
This reverts commit 0fdb23c1e9
2021-11-18 10:23:09 -06:00
0fdb23c1e9
Revert "Remove transparent SVG for badging"
...
This reverts commit 13a84f0c72
2021-11-18 10:09:34 -06:00
13a84f0c72
Remove transparent SVG for badging
2021-11-18 10:04:42 -06:00
669bd58e33
Drop the unused `Key` utility class
2021-11-17 10:57:29 -05:00
7ea43a728d
Set boost description from configuration
2021-11-16 17:21:57 -06:00
71b38356b1
Update to Mockito 4.0.0
2021-11-16 15:56:35 -07:00
5a99708f56
Update some deprecated usages
2021-11-16 15:56:13 -07:00
1dae05651f
Add PNIs to account creation and `whoami` responses
2021-11-16 15:08:10 -05:00
5164e92538
Shorten metric names
2021-11-16 15:08:10 -05:00
f89a20dbc7
Allow callers to set/retrieve keys by ACI or PNI
2021-11-16 15:08:10 -05:00
3a4c5a2bfb
Store and retrieve one-time pre-keys by UUID
2021-11-16 15:08:10 -05:00
5e1334e8de
s/KeysDynamoDb/Keys/
2021-11-16 15:08:10 -05:00
fa6e3d3690
Allow clients to request PNI-based group credentials
2021-11-16 15:08:10 -05:00
9383e7716b
Resolve `CertificateControllerTest` warnings and recommendations
2021-11-16 15:08:10 -05:00
cfe34fbf0f
Allow unsealed-sender messages to be addressed by PNI
2021-11-16 15:08:10 -05:00
9fe110625c
Add a `destinationUuid` field to envelopes
2021-11-16 15:08:10 -05:00
975f753c2b
Add an endpoint for testing whether an account with a given ACI or PNI exists
2021-11-16 15:08:10 -05:00
e6237480f8
Require that unidentified access keys be exactly 16 bytes
2021-11-16 15:08:10 -05:00
26f876a2cb
Check service configurations in verify phase
2021-11-16 11:43:07 -07:00
Jon Chambers