mirror of
https://mau.dev/maunium/synapse.git
synced 2024-12-17 16:03:51 +01:00
c0e0740bef
This commit adds two config options: * `restrict_public_rooms_to_local_users` Requires auth to fetch the public rooms directory through the CS API and disables fetching it through the federation API. * `require_auth_for_profile_requests` When set to `true`, requires that requests to `/profile` over the CS API are authenticated, and only returns the user's profile if the requester shares a room with the profile's owner, as per MSC1301. MSC1301 also specifies a behaviour for federation (only returning the profile if the server asking for it shares a room with the profile's owner), but that's currently really non-trivial to do in a not too expensive way. Next step is writing down a MSC that allows a HS to specify which user sent the profile query. In this implementation, Synapse won't send a profile query over federation if it doesn't believe it already shares a room with the profile's owner, though. Groups have been intentionally omitted from this commit. |
||
---|---|---|
.. | ||
__init__.py | ||
__main__.py | ||
_base.py | ||
api.py | ||
appservice.py | ||
captcha.py | ||
cas.py | ||
consent_config.py | ||
database.py | ||
emailconfig.py | ||
groups.py | ||
homeserver.py | ||
jwt_config.py | ||
key.py | ||
logger.py | ||
metrics.py | ||
password.py | ||
password_auth_providers.py | ||
push.py | ||
ratelimiting.py | ||
registration.py | ||
repository.py | ||
room_directory.py | ||
saml2_config.py | ||
server.py | ||
server_notices_config.py | ||
spam_checker.py | ||
tls.py | ||
user_directory.py | ||
voip.py | ||
workers.py |