Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2019-05-09 | Limit the number of EDUs in transactions to 100 as expected by receiver (#5138) | Quentin Dufour | 3 | -27/+32 | |
Fixes #3951. | |||||
2019-05-08 | Fix bogus imports in tests (#5154) | Brendan Abolivier | 4 | -5/+7 | |
2019-05-08 | add options to require an access_token to GET /profile and /publicRooms on ↵ | Matthew Hodgson | 9 | -13/+252 | |
CS API (#5083) This commit adds two config options: * `restrict_public_rooms_to_local_users` Requires auth to fetch the public rooms directory through the CS API and disables fetching it through the federation API. * `require_auth_for_profile_requests` When set to `true`, requires that requests to `/profile` over the CS API are authenticated, and only returns the user's profile if the requester shares a room with the profile's owner, as per MSC1301. MSC1301 also specifies a behaviour for federation (only returning the profile if the server asking for it shares a room with the profile's owner), but that's currently really non-trivial to do in a not too expensive way. Next step is writing down a MSC that allows a HS to specify which user sent the profile query. In this implementation, Synapse won't send a profile query over federation if it doesn't believe it already shares a room with the profile's owner, though. Groups have been intentionally omitted from this commit. | |||||
2019-05-08 | Do checks on aliases for incoming m.room.aliases events (#5128) | Brendan Abolivier | 7 | -8/+225 | |
Follow-up to #5124 Also added a bunch of checks to make sure everything (both the stuff added on #5124 and this PR) works as intended. | |||||
2019-05-07 | Remove the requirement to authenticate for /admin/server_version. (#5122) | Richard van der Hoff | 5 | -38/+32 | |
This endpoint isn't much use for its intended purpose if you first need to get yourself an admin's auth token. I've restricted it to the `/_synapse/admin` path to make it a bit easier to lock down for those concerned about exposing this information. I don't imagine anyone is using it in anger currently. | |||||
2019-05-06 | Fix spelling in server notices admin API docs (#5142) | Travis Ralston | 2 | -1/+2 | |
2019-05-06 | Fix sample config | Richard van der Hoff | 1 | -1/+1 | |
... after it got broken in 1565ebec2c. | |||||
2019-05-03 | 0.99.3.2 |