summary refs log tree commit diff
path: root/docs
diff options
context:
space:
mode:
authorPatrick Cloke <clokep@users.noreply.github.com>2023-04-03 13:20:32 -0400
committerGitHub <noreply@github.com>2023-04-03 13:20:32 -0400
commitcf2f2934ad6c94a269e750684d1d8170b1173b7a (patch)
treef4a42a6834a7570504c8fe83d2cc77ca2bbb379c /docs
parentExperimental Unix socket support (#15353) (diff)
downloadsynapse-cf2f2934ad6c94a269e750684d1d8170b1173b7a.tar.xz
Call appservices on modern paths, falling back to legacy paths. (#15317)
This uses the specced /_matrix/app/v1/... paths instead of the
"legacy" paths. If the homeserver receives an error it will retry
using the legacy path.
Diffstat (limited to 'docs')
-rw-r--r--docs/upgrade.md16
1 files changed, 16 insertions, 0 deletions
diff --git a/docs/upgrade.md b/docs/upgrade.md
index f14444a400..1ddfc31ff6 100644
--- a/docs/upgrade.md
+++ b/docs/upgrade.md
@@ -88,6 +88,22 @@ process, for example:
     dpkg -i matrix-synapse-py3_1.3.0+stretch1_amd64.deb
     ```
 
+# Upgrading to v1.81.0
+
+## Application service path & authentication deprecations
+
+Synapse now attempts the versioned appservice paths before falling back to the
+[legacy paths](https://spec.matrix.org/v1.6/application-service-api/#legacy-routes).
+Usage of the legacy routes should be considered deprecated.
+
+Additionally, Synapse has supported sending the application service access token
+via [the `Authorization` header](https://spec.matrix.org/v1.6/application-service-api/#authorization)
+since v1.70.0. For backwards compatibility it is *also* sent as the `access_token`
+query parameter. This is insecure and should be considered deprecated.
+
+A future version of Synapse (v1.88.0 or later) will remove support for legacy
+application service routes and query parameter authorization.
+
 # Upgrading to v1.80.0
 
 ## Reporting events error code change