anonymousland-synapse/synapse/rest/client/v1
Matthew Hodgson c0e0740bef add options to require an access_token to GET /profile and /publicRooms on CS API (#5083)
This commit adds two config options:

* `restrict_public_rooms_to_local_users`

Requires auth to fetch the public rooms directory through the CS API and disables fetching it through the federation API.

* `require_auth_for_profile_requests`

When set to `true`, requires that requests to `/profile` over the CS API are authenticated, and only returns the user's profile if the requester shares a room with the profile's owner, as per MSC1301.

MSC1301 also specifies a behaviour for federation (only returning the profile if the server asking for it shares a room with the profile's owner), but that's currently really non-trivial to do in a not too expensive way. Next step is writing down a MSC that allows a HS to specify which user sent the profile query. In this implementation, Synapse won't send a profile query over federation if it doesn't believe it already shares a room with the profile's owner, though.

Groups have been intentionally omitted from this commit.
2019-05-08 18:26:56 +01:00
..
__init__.py copyrights 2016-01-07 04:26:29 +00:00
base.py Make auth & transactions more testable (#3499) 2018-07-14 07:34:49 +10:00
directory.py Clean up room alias creation 2018-10-19 10:11:56 +01:00
events.py Port rest/ to Python 3 (#3823) 2018-09-12 20:41:31 +10:00
initial_sync.py Port rest/ to Python 3 (#3823) 2018-09-12 20:41:31 +10:00
login.py Support 3PID login in password providers (#4931) 2019-03-26 17:48:30 +00:00
logout.py Make auth & transactions more testable (#3499) 2018-07-14 07:34:49 +10:00
presence.py Remove presence lists (#4989) 2019-04-03 11:11:15 +01:00
profile.py add options to require an access_token to GET /profile and /publicRooms on CS API (#5083) 2019-05-08 18:26:56 +01:00
push_rule.py Remove usage of request.postpath 2019-04-16 17:42:50 +01:00
pusher.py fix type error 2018-12-03 22:27:41 +11:00
room.py add options to require an access_token to GET /profile and /publicRooms on CS API (#5083) 2019-05-08 18:26:56 +01:00
voip.py fix VOIP crashes under Python 3 (#3821) 2018-09-10 14:30:08 +02:00