mirror of
https://git.anonymousland.org/anonymousland/synapse.git
synced 2025-05-02 11:16:07 -04:00
Check *all* auth events for room id and rejection (#11009)
This fixes a bug where we would accept an event whose `auth_events` include rejected events, if the rejected event was shadowed by another `auth_event` with same `(type, state_key)`. The approach is to pass a list of auth events into `check_auth_rules_for_event` instead of a dict, which of course means updating the call sites. This is an extension of #10956.
This commit is contained in:
parent
73743b8ad1
commit
a5d2ea3d08
8 changed files with 122 additions and 85 deletions
|
@ -332,7 +332,7 @@ def _resolve_auth_events(
|
|||
event_auth.check_auth_rules_for_event(
|
||||
RoomVersions.V1,
|
||||
event,
|
||||
auth_events,
|
||||
auth_events.values(),
|
||||
)
|
||||
prev_event = event
|
||||
except AuthError:
|
||||
|
@ -350,7 +350,7 @@ def _resolve_normal_events(
|
|||
event_auth.check_auth_rules_for_event(
|
||||
RoomVersions.V1,
|
||||
event,
|
||||
auth_events,
|
||||
auth_events.values(),
|
||||
)
|
||||
return event
|
||||
except AuthError:
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue