MirrorHub/synapse
0
0
Fork 1
mirror of https://mau.dev/maunium/synapse.git synced 2024-12-15 04:33:53 +01:00
Code Issues Projects Releases Wiki Activity

Add comments

Browse source
This commit is contained in:
Erik Johnston 2016-09-22 11:59:46 +01:00
parent a61e4522b5
commit 2e9ee30969
2 changed files with 6 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
synapse/api/auth.py
View file

@ -103,6 +103,9 @@ class Auth(object):
# Check the sender's domain has signed the event # Check the sender's domain has signed the event
if not event.signatures.get(sender_domain): if not event.signatures.get(sender_domain):
# We allow invites via 3pid to have a sender from a differnt
# HS, as the sender must match the sender of the original
# 3pid invite. This is checked further down.
if not is_invite_via_3pid: if not is_invite_via_3pid:
raise AuthError(403, "Event not signed by sender's server") raise AuthError(403, "Event not signed by sender's server")

3
synapse/handlers/federation.py
View file

@ -1930,6 +1930,9 @@ class FederationHandler(BaseHandler):
"Could not find invite event for third_party_invite: %r", "Could not find invite event for third_party_invite: %r",
event_dict event_dict
) )
# We don't discard here as this is not the appropriate place to do
# auth checks. If we need the invite and don't have it then the
# auth check code will explode appropriately.
builder = self.event_builder_factory.new(event_dict) builder = self.event_builder_factory.new(event_dict)
EventValidator().validate_new(builder) EventValidator().validate_new(builder)