synapse-product/synapse/state
Richard van der Hoff a5d2ea3d08
Check *all* auth events for room id and rejection (#11009)
This fixes a bug where we would accept an event whose `auth_events` include
rejected events, if the rejected event was shadowed by another `auth_event`
with same `(type, state_key)`.

The approach is to pass a list of auth events into
`check_auth_rules_for_event` instead of a dict, which of course means updating
the call sites.

This is an extension of #10956.
2021-10-18 18:28:30 +01:00
..
__init__.py disallow-untyped-defs for synapse.state (#11004) 2021-10-06 17:55:25 +00:00
v1.py Check *all* auth events for room id and rejection (#11009) 2021-10-18 18:28:30 +01:00
v2.py Check *all* auth events for room id and rejection (#11009) 2021-10-18 18:28:30 +01:00