Handle the Synapse admin scope

1 files changed, 3 insertions, 0 deletions

diff --git a/synapse/api/auth/oauth_delegated.py b/synapse/api/auth/oauth_delegated.py

index 2715127e32..ff1f395e58 100644
--- a/synapse/api/auth/oauth_delegated.py
+++ b/synapse/api/auth/oauth_delegated.py
@@ -140,6 +140,9 @@ class OAuthDelegatedAuth(BaseAuth):
         resp = json_decoder.decode(resp_body.decode("utf-8"))
         return IntrospectionToken(**resp)
 
+    async def is_server_admin(self, requester: Requester) -> bool:
+        return "urn:synapse:admin:*" in requester.scope
+
     async def get_user_by_req(
         self,
         request: SynapseRequest,