diff options
author | Patrick Cloke <clokep@users.noreply.github.com> | 2021-02-11 11:16:54 -0500 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-02-11 11:16:54 -0500 |
commit | e40d88cff3cca3d5186d5f623ad1107bc403d69b (patch) | |
tree | 1bb8e1daa3f43099f535eb56dacd472edb78795e /synapse/config/sso.py | |
parent | Clarify documentation about escaping URLs in templates. (#9310) (diff) | |
download | synapse-e40d88cff3cca3d5186d5f623ad1107bc403d69b.tar.xz |
Backout changes for automatically calculating the public baseurl. (#9313)
This breaks some people's configurations (if their Client-Server API is not accessed via port 443).
Diffstat (limited to 'synapse/config/sso.py')
-rw-r--r-- | synapse/config/sso.py | 13 |
1 files changed, 8 insertions, 5 deletions
diff --git a/synapse/config/sso.py b/synapse/config/sso.py index 6c60c6fea4..19bdfd462b 100644 --- a/synapse/config/sso.py +++ b/synapse/config/sso.py @@ -64,8 +64,11 @@ class SSOConfig(Config): # gracefully to the client). This would make it pointless to ask the user for # confirmation, since the URL the confirmation page would be showing wouldn't be # the client's. - login_fallback_url = self.public_baseurl + "_matrix/static/client/login" - self.sso_client_whitelist.append(login_fallback_url) + # public_baseurl is an optional setting, so we only add the fallback's URL to the + # list if it's provided (because we can't figure out what that URL is otherwise). + if self.public_baseurl: + login_fallback_url = self.public_baseurl + "_matrix/static/client/login" + self.sso_client_whitelist.append(login_fallback_url) def generate_config_section(self, **kwargs): return """\ @@ -83,9 +86,9 @@ class SSOConfig(Config): # phishing attacks from evil.site. To avoid this, include a slash after the # hostname: "https://my.client/". # - # The login fallback page (used by clients that don't natively support the - # required login flows) is automatically whitelisted in addition to any URLs - # in this list. + # If public_baseurl is set, then the login fallback page (used by clients + # that don't natively support the required login flows) is whitelisted in + # addition to any URLs in this list. # # By default, this list is empty. # |