mirror of
https://git.anonymousland.org/anonymousland/synapse-product.git
synced 2024-09-08 07:22:05 +00:00
![]() This simplifies the access token verification logic by removing the `rights` parameter which was only ever used for the unsubscribe link in email notifications. The latter has been moved under the `/_synapse` namespace, since it is not a standard API. This also makes the email verification link more secure, by embedding the app_id and pushkey in the macaroon and verifying it. This prevents the user from tampering the query parameters of that unsubscribe link. Macaroon generation is refactored: - Centralised all macaroon generation and verification logic to the `MacaroonGenerator` - Moved to `synapse.utils` - Changed the constructor to require only a `Clock`, hostname, and a secret key (instead of a full `Homeserver`). - Added tests for all methods. |
||
---|---|---|
.. | ||
__init__.py | ||
baserules.py | ||
bulk_push_rule_evaluator.py | ||
clientformat.py | ||
emailpusher.py | ||
httppusher.py | ||
mailer.py | ||
presentable_names.py | ||
push_rule_evaluator.py | ||
push_tools.py | ||
push_types.py | ||
pusher.py | ||
pusherpool.py | ||
rulekinds.py |