Registration tokens

[sandhose]

Fixes #3956
Fixes #4584

This can be reviewed commit by commit.

It includes an admin API to list/get/create/revoke tokens, as well as a CLI tool to issue a token.

• Data model and repository for user registration tokens
• Add config flag to require registration tokens for password registrations
• Registration token step view
• Enforce registration token on registration
• List and count methods on the UserRegistrationTokenRepository
• Admin API to list user registration tokens
• Admin API to get individual user registration tokens
• Admin API to create a new user registration token
• Admin API to revoke user registration tokens
• CLI tool to issue user registration tokens

[cloudflare-workers-and-pages]

Deploying matrix-authentication-service-docs with    Cloudflare Pages

Latest commit:	12e9d02
Status:	✅  Deploy successful!
Preview URL:	https://da0f1f99.matrix-authentication-service-docs.pages.dev
Branch Preview URL:	https://quenting-registration-tokens.matrix-authentication-service-docs.pages.dev

View logs

[reivilibre]

hmm.. kind of feels like the sensible default would be 1, to be honest

(the word 'token' feels like something you 'spend', not something that would be infinite by default)

[sandhose]

Fair enough. I've changed the behaviour of the CLI tool in e53e266

[github-actions]

A build for this PR at commit 0f00bf0 has been created through the Z-Build-Workflow label by reivilibre.

Docker image is available at:

• ghcr.io/element-hq/matrix-authentication-service:pr-4619
• ghcr.io/element-hq/matrix-authentication-service:sha-0f00bf0

Pre-built binaries are available through the workflow run artifacts.

[reivilibre]

cool stuff

[github-actions]

A build for this PR at commit cab8ba2 has been created through the Z-Build-Workflow label by sandhose.

Docker image is available at:

• ghcr.io/element-hq/matrix-authentication-service:pr-4619
• ghcr.io/element-hq/matrix-authentication-service:sha-cab8ba2

Pre-built binaries are available through the workflow run artifacts.

[olmari]

Very +1 to this concept. After MAS we have basically lost the "not SSO" registation method of https://github.com/zeratax/matrix-registration/ we used to use, as we have 12+ different hackerspaces to cater and not everyone have an SSO available for an reason or another, so a method of registation tokens would be awesome to support while MAS is at use.

To say it most broadly, that Zeratax thing would still be just perfect as concept, but obviously it would need complete backend overhaul to use MAS instead. It has total server admin control of token use times and expiration dates etc.