Commit message (Collapse) | Author | Files | Lines | ||
---|---|---|---|---|---|
2019-03-20 | Only require consent for events with an associated request | Erik Johnston | 1 | -1/+5 | |
There are a number of instances where a server or admin may puppet a user to join/leave rooms, which we don't want to fail if the user has not consented to the privacy policy. We fix this by adding a check to test if the requester has an associated access_token, which is used as a proxy to answer the question of whether the action is being done on behalf of a real request from the user. | |||||
2019-03-20 | Allow blocking a room multiple times< |