forked from Telodendria/Telodendria
339 lines
8.9 KiB
Groff
339 lines
8.9 KiB
Groff
.Dd $Mdocdate: March 22 2023 $
|
|
.Dt TELODENDRIA-CHANGELOG 7
|
|
.Os Telodendria Project
|
|
.Sh NAME
|
|
.Nm Telodendria
|
|
.Nd The change log for the Telodendria project.
|
|
.Sh PROJECT STATUS
|
|
.Pp
|
|
.Nm
|
|
is a very ambitious project. There's a lot that needs to happen yet
|
|
before it is usable. At the moment,
|
|
.Nm
|
|
is starting to resemble a Matrix homeserver, but you can't really
|
|
call it one yet. The foundation is mostly in place; now there's the
|
|
Matrix specification to implement.
|
|
.Pp
|
|
Just because there's not much here yet doesn't mean you should go
|
|
away! I could always use help, so you are more than welcome to get
|
|
involved in the project if you want to see things move quicker.
|
|
Feel free to donate using the links on the project website, or
|
|
see the
|
|
.Xr contributing 7
|
|
page for details on how to get involved. The CVS repository has
|
|
a file called
|
|
.Pa TODO.txt ,
|
|
which contains a checklist of the items that need to be completed.
|
|
Feel free to grab an item on that list and start writing patches!
|
|
It's a good idea to join the Matrix rooms noted in
|
|
.Xr telodendria 7
|
|
as well, so you can discuss your progress and ask questions.
|
|
.Sh v0.3.0
|
|
.Pp
|
|
Not Released Yet.
|
|
.Pp
|
|
Introducing a new configuration API, source/sink-agnostic I/O, TLS
|
|
support, an HTTP client, and more! The third major release of
|
|
.Nm
|
|
packs a lot of general improvements on top of supporting more of
|
|
the Matrix specification.
|
|
.Pp
|
|
Matrix Specification:
|
|
.Bl -bullet
|
|
.It
|
|
Added support for the
|
|
.Pa /_matrix/client/v3/account/whoami
|
|
endpoint.
|
|
.It
|
|
Added support for token-based user registration. Note that there is
|
|
as of yet no admin-facing way to create these registration tokens,
|
|
but the APIs are in place.
|
|
.El
|
|
.Pp
|
|
New Features:
|
|
.Bl -bullet
|
|
.It
|
|
Added a new
|
|
.Xr HttpClient 3
|
|
API for making HTTP requests. This will eventually be used for
|
|
federating with other Matrix homeservers.
|
|
.It
|
|
Added support for pretty-printing JSON to
|
|
.Xr Json 3 .
|
|
.Nm
|
|
itself doesn't pretty-print JSON, but this is useful for debugging
|
|
and building useful tools.
|
|
.It
|
|
Added a handful of useful development tools built on the
|
|
.Nm
|
|
APIs. New tools include
|
|
.Xr http 1 ,
|
|
a command line tool for making HTTP requests, similar to
|
|
.Xr curl 1 ,
|
|
.Xr json 1 ,
|
|
a command line tool for working with JSON, similar to
|
|
.Xr jq 1 ,
|
|
and
|
|
.Xr http-debug-server 1 ,
|
|
a simple HTTP server that just prints requests out to standard
|
|
output and returns an empty JSON object.
|
|
.Nm http
|
|
and
|
|
.Nm json
|
|
are replacements for
|
|
.Xr curl 1
|
|
and
|
|
.Xr jq 1
|
|
that build on the
|
|
.Xr HttpClient 3
|
|
and
|
|
.Xr Json
|
|
APIs. They exist mainly to test those APIs, but also to reduce
|
|
the number of dependencies that
|
|
.Nm
|
|
has.
|
|
.Nm http-debug-server
|
|
exists to test the
|
|
.Xr HttpServer 3
|
|
and
|
|
.Xr HttpClient
|
|
APIs.
|
|
.It
|
|
Replaced all usage of
|
|
.Xr jq 1
|
|
with the new
|
|
.Xr json 1
|
|
tool.
|
|
.Xr jq 1
|
|
is no longer a development dependency.
|
|
.It
|
|
Added a new
|
|
.Xr tt 1
|
|
script for easily making Matrix requests against
|
|
.Nm
|
|
in development.
|
|
.It
|
|
Added TLS support to both the HTTP client and server. Currently,
|
|
.Nm
|
|
only supports LibreSSL, but other TLS libraries should be
|
|
extremely easy to add support for.
|
|
.El
|
|
.Pp
|
|
Fixes and general improvements:
|
|
.Bl -bullet
|
|
.It
|
|
Fixed a few warnings that were generated on some obscure compilers.
|
|
.It
|
|
Moved the
|
|
.Fn main
|
|
function into its own file to make it easier to link other programs
|
|
with the
|
|
.Nm
|
|
APIs.
|
|
.It
|
|
Fixed the development tools environment setup script. Apparently
|
|
using a hyphen as a bullet point is not very portable, because some
|
|
shell implementations of
|
|
.Xr printf 1
|
|
interpret it as a flag. Switched to an asterisk instead.
|
|
.It
|
|
Fixed some intermittent I/O errors that would occur as a result of
|
|
race conditions in
|
|
.Fn JsonConsumeWhitespace .
|
|
This function, and a few others, expect I/O to be blocking, but
|
|
the
|
|
.Xr HttpServer 3
|
|
sets up I/O to be non-blocking, leading to occasional failures in
|
|
JSON parsing.
|
|
.It
|
|
Abstracted all I/O into the new
|
|
.Xr Io 3
|
|
and
|
|
.Xr Stream 3
|
|
APIs, which provide an input/output-agnostic stream processing.
|
|
This allows for a simple implementation of proxies, TLS, and
|
|
other stream filters without having to change any of the existing
|
|
code.
|
|
.It
|
|
Removed all non-POSIX function calls, including the call to
|
|
.Fn chroot
|
|
and, on OpenBSD, the calls to
|
|
.Fn pledge
|
|
and
|
|
.Fn unveil .
|
|
This may seem like a downgrade in security, but these are
|
|
platform-specific system calls that should be patched in by
|
|
package maintainers if they are desired. They also caused
|
|
problems when implementing other features, because some library
|
|
calls need to be able to access files on the filesystem.
|
|
.It
|
|
Fixed the build script to supply
|
|
.Ev LDFLAGS
|
|
after the object files when linking. Apparently the order in
|
|
which libraries are passed matters to some compilers.
|
|
.It
|
|
Did some general refactoring to make the source code more
|
|
readable and easier to maintain.
|
|
.El
|
|
.Sh v0.2.1
|
|
.Pp
|
|
Monday, March 6, 2023
|
|
.Pp
|
|
This is a patch release that fixes a few typos and other minor
|
|
issues.
|
|
.Sh v0.2.0
|
|
.Pp
|
|
Monday, March 6, 2023
|
|
.Pp
|
|
This release is focused on providing a decent amount of the
|
|
client authentication API. You can now create accounts on a
|
|
Telodendria homeserver, and log in to get access tokens.
|
|
.Pp
|
|
New:
|
|
.Bl -bullet
|
|
.It
|
|
Added the basic form of the user registration API. If
|
|
registration is enabled in the configuration file, clients
|
|
can now register for Matrix accounts.
|
|
.It
|
|
Added the basic form of the user login API. Clients can now
|
|
log in to their accounts and generate access tokens to be
|
|
used to authenticate requests.
|
|
.It
|
|
Added the basic form of the user interactive authentication API,
|
|
which can be used by any endpoints that the spec says require
|
|
it. Currently, it only implements the dummy and password stages,
|
|
but more stages, such as the registration token stage, will be
|
|
added in future releases.
|
|
.It
|
|
Added a simple landing page that allows those setting up
|
|
.Nm
|
|
to quickly verify that it is accessible where it needs to be.
|
|
.It
|
|
Added the static login page for clients that don't support
|
|
regular login.
|
|
.El
|
|
.Pp
|
|
Changes:
|
|
.Bl -bullet
|
|
.It
|
|
Improved HTTP request logging by removing unnecessary
|
|
log entries and making errors more specific.
|
|
.It
|
|
Leaked memory is now hexdump-ed out to the log if the log
|
|
level is set to debug. This greatly simplifies debugging,
|
|
because developers can now easily see exactly what the
|
|
contents of the leaked memory are. Note that in some
|
|
circumstances, this memory may contain sensitive data,
|
|
such as access tokens, usernames, or passwords. However,
|
|
.Nm
|
|
should not be leaking memory at all, so if you encounter
|
|
any leaks, please report them.
|
|
.It
|
|
Refactored a lot of the code and accompanying documentation
|
|
to be more readable and maintainable.
|
|
.El
|
|
.Pp
|
|
Bug fixes:
|
|
.Pp
|
|
.Bl -bullet
|
|
.It
|
|
Fixed a memory leak that would occur when parsing an invalid
|
|
JSON object.
|
|
.It
|
|
Fixed an edge case where HTTP response headers were being
|
|
sent before they were properly set, causing the server to
|
|
report a status of 200 even when that wasn't the desired
|
|
status.
|
|
.It
|
|
Fixed a few memory leaks in the HTTP parameter decoder that
|
|
would occur in some edge cases.
|
|
.It
|
|
Fixed an "off-by-one" error in the HTTP server request
|
|
parser that prevented GET parameters from being parsed.
|
|
.It
|
|
Fixed the database file name generator to prevent directory
|
|
traversal attacks by replacing special characters with
|
|
safer ones.
|
|
.It
|
|
Fixed a memory leak that would occur when closing a
|
|
database that contains cached objects.
|
|
.It
|
|
Fixed a memory leak that would occur when deleting database
|
|
objects.
|
|
.It
|
|
Fixed a few non-fatal memory warnings that would show up
|
|
as a result of passing a constant string into certain functions.
|
|
.El
|
|
.Pp
|
|
Misc:
|
|
.Bl -bullet
|
|
.It
|
|
Fixed a bug in
|
|
.Xr td 1
|
|
that caused
|
|
.Xr cvs 1
|
|
to be invoked in the wrong directory when tagging a new release.
|
|
.It
|
|
Added support for environment variable substitution in all site
|
|
files. This makes it easier to release
|
|
.Nm
|
|
versions.
|
|
.It
|
|
Fix whitespace issues in various shell scripts.
|
|
.It
|
|
Fixed the debug log output so that it only shows the file name,
|
|
not the entire file path in the repository.
|
|
.It
|
|
Updated the copyright year in the source code and compiled output.
|
|
.It
|
|
Switch the -std=c89 flag to -ansi instead, as -ansi might be more
|
|
supported.
|
|
.It
|
|
Fixed the -v flag. It now sets the log level to debug as soon
|
|
as possible to allowe debugging the configuration file parsing
|
|
if necessary.
|
|
.El
|
|
.Pp
|
|
\&... And many more bug fixes and feature additions! Too much
|
|
has changed to make a comprehensive change log. A lot of things
|
|
have been done under the hood to make
|
|
.Nm
|
|
easier to develop in the future. Please test the current
|
|
functionality, and report bugs to the Matrix rooms.
|
|
.Pp
|
|
The following platforms have been known to compile and run
|
|
.Nm :
|
|
.Bl -bullet
|
|
.It
|
|
OpenBSD
|
|
.It
|
|
Linux (GNU and non-GNU)
|
|
.It
|
|
Windows (via Cygwin)
|
|
.It
|
|
FreeBSD
|
|
.It
|
|
NetBSD
|
|
.It
|
|
DragonFlyBSD
|
|
.It
|
|
Haiku OS
|
|
.It
|
|
Android (via Termux)
|
|
.El
|
|
.Pp
|
|
.Nm
|
|
is about being portable; if you compile it on an obscure
|
|
operating system, do let me know about it!
|
|
.Sh v0.1.0
|
|
.Pp
|
|
Tuesday, December 13, 2022
|
|
.Pp
|
|
This is the first public release of
|
|
.Nm
|
|
so there are no changes to report. Future releases will
|
|
have a complete change log entry here.
|
|
.Pp
|
|
This is a symbolic release targeted at developers, so there's nothing
|
|
useful to ordinary users yet. Stay tuned for future releases though!
|