From 0516dc4d85f1018beb241df6833117b8b49d08d3 Mon Sep 17 00:00:00 2001
From: Jason Robinson <jasonr@matrix.org>
Date: Tue, 22 Jan 2019 11:04:10 +0200
Subject: [PATCH] Remove openid resource from default config

Instead document it commented out.

Signed-off-by: Jason Robinson <jasonr@matrix.org>
---
 synapse/config/server.py | 17 +++++++++++++----
 1 file changed, 13 insertions(+), 4 deletions(-)

diff --git a/synapse/config/server.py b/synapse/config/server.py
index 556f1efee..eebbfccaf 100644
--- a/synapse/config/server.py
+++ b/synapse/config/server.py
@@ -151,7 +151,7 @@ class ServerConfig(Config):
                         "compress": gzip_responses,
                     },
                     {
-                        "names": ["federation", "openid"],
+                        "names": ["federation"],
                         "compress": False,
                     }
                 ]
@@ -170,7 +170,7 @@ class ServerConfig(Config):
                             "compress": gzip_responses,
                         },
                         {
-                            "names": ["federation", "openid"],
+                            "names": ["federation"],
                             "compress": False,
                         }
                     ]
@@ -328,8 +328,13 @@ class ServerConfig(Config):
                 # that can do automatic compression.
                 compress: true
 
-              - names: [federation, openid]  # Federation APIs
+              - names: [federation]  # Federation APIs
                 compress: false
+                
+              # # If federation is disabled synapse can still expose the open ID endpoint
+              # # to allow integrations to authenticate users
+              # - names: [openid]
+              #   compress: false
 
             # optional list of additional endpoints which can be loaded via
             # dynamic modules
@@ -350,8 +355,12 @@ class ServerConfig(Config):
             resources:
               - names: [client]
                 compress: true
-              - names: [federation, openid]
+              - names: [federation]
                 compress: false
+              # # If federation is disabled synapse can still expose the open ID endpoint
+              # # to allow integrations to authenticate users
+              # - names: [openid]
+              #   compress: false
 
           # Turn on the twisted ssh manhole service on localhost on the given
           # port.