Matrix-Mirrors/synapse-product
1
0
Fork 0
mirror of https://git.anonymousland.org/anonymousland/synapse-product.git synced 2025-08-03 19:44:13 -04:00
Code Issues Projects Releases Packages Wiki Activity

Prevent user tokens being used as guest tokens (#1675)

Browse source 
Make sure that a user cannot pretend to be a guest by adding 'guest = True'
caveats.
This commit is contained in:
Richard van der Hoff 2016-12-06 15:31:37 +00:00 • committed by GitHub
parent 194b6259c5
commit 1529c19675
3 changed files with 116 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

2
synapse/handlers/register.py
View file

@ -81,7 +81,7 @@ class RegistrationHandler(BaseHandler):
"User ID already taken.",
errcode=Codes.USER_IN_USE,
)
user_data = yield self.auth.get_user_from_macaroon(guest_access_token)
user_data = yield self.auth.get_user_by_access_token(guest_access_token)
if not user_data["is_guest"] or user_data["user"].localpart != localpart:
raise AuthError(
403,