c0e0740bef
This commit adds two config options: * `restrict_public_rooms_to_local_users` Requires auth to fetch the public rooms directory through the CS API and disables fetching it through the federation API. * `require_auth_for_profile_requests` When set to `true`, requires that requests to `/profile` over the CS API are authenticated, and only returns the user's profile if the requester shares a room with the profile's owner, as per MSC1301. MSC1301 also specifies a behaviour for federation (only returning the profile if the server asking for it shares a room with the profile's owner), but that's currently really non-trivial to do in a not too expensive way. Next step is writing down a MSC that allows a HS to specify which user sent the profile query. In this implementation, Synapse won't send a profile query over federation if it doesn't believe it already shares a room with the profile's owner, though. Groups have been intentionally omitted from this commit. |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| _base.py | ||
| account_data.py | ||
| account_validity.py | ||
| acme.py | ||
| admin.py | ||
| appservice.py | ||
| auth.py | ||
| deactivate_account.py | ||
| device.py | ||
| devicemessage.py | ||
| directory.py | ||
| e2e_keys.py | ||
| e2e_room_keys.py | ||
| events.py | ||
| federation.py | ||
| groups_local.py | ||
| identity.py | ||
| initial_sync.py | ||
| message.py | ||
| pagination.py | ||
| presence.py | ||
| profile.py | ||
| read_marker.py | ||
| receipts.py | ||
| register.py | ||
| room.py | ||
| room_list.py | ||
| room_member.py | ||
| room_member_worker.py | ||
| search.py | ||
| set_password.py | ||
| state_deltas.py | ||
| sync.py | ||
| typing.py | ||
| user_directory.py | ||