Matthew Hodgson c0e0740bef add options to require an access_token to GET /profile and /publicRooms on CS API (#5083) ... This commit adds two config options: * `restrict_public_rooms_to_local_users` Requires auth to fetch the public rooms directory through the CS API and disables fetching it through the federation API. * `require_auth_for_profile_requests` When set to `true`, requires that requests to `/profile` over the CS API are authenticated, and only returns the user's profile if the requester shares a room with the profile's owner, as per MSC1301. MSC1301 also specifies a behaviour for federation (only returning the profile if the server asking for it shares a room with the profile's owner), but that's currently really non-trivial to do in a not too expensive way. Next step is writing down a MSC that allows a HS to specify which user sent the profile query. In this implementation, Synapse won't send a profile query over federation if it doesn't believe it already shares a room with the profile's owner, though. Groups have been intentionally omitted from this commit.		2019-05-08 18:26:56 +01:00
..
admin	Remove the requirement to authenticate for /admin/server_version. (#5122)	2019-05-07 09:29:30 +01:00
client	add options to require an access_token to GET /profile and /publicRooms on CS API (#5083)	2019-05-08 18:26:56 +01:00
media	Fix parsing of Content-Disposition headers (#4763)	2019-02-27 14:29:10 -08:00
__init__.py	copyrights	2016-01-07 04:26:29 +00:00
test_well_known.py	Implement .well-known handling (#4262)	2018-12-05 14:38:58 +01:00