Handle the Synapse admin scope

2022-06-20 11:17:48 +02:00 · 2022-06-20 11:17:48 +02:00 · 7628dbf4e9
parent c5cf1b421d
commit 7628dbf4e9
1 changed files with 3 additions and 0 deletions
--- a/synapse/api/auth/oauth_delegated.py
+++ b/synapse/api/auth/oauth_delegated.py
@ -140,6 +140,9 @@ class OAuthDelegatedAuth(BaseAuth):
        resp = json_decoder.decode(resp_body.decode("utf-8"))
        return IntrospectionToken(**resp)

+    async def is_server_admin(self, requester: Requester) -> bool:
+        return "urn:synapse:admin:*" in requester.scope
+
    async def get_user_by_req(
        self,
        request: SynapseRequest,