c0e0740bef
This commit adds two config options: * `restrict_public_rooms_to_local_users` Requires auth to fetch the public rooms directory through the CS API and disables fetching it through the federation API. * `require_auth_for_profile_requests` When set to `true`, requires that requests to `/profile` over the CS API are authenticated, and only returns the user's profile if the requester shares a room with the profile's owner, as per MSC1301. MSC1301 also specifies a behaviour for federation (only returning the profile if the server asking for it shares a room with the profile's owner), but that's currently really non-trivial to do in a not too expensive way. Next step is writing down a MSC that allows a HS to specify which user sent the profile query. In this implementation, Synapse won't send a profile query over federation if it doesn't believe it already shares a room with the profile's owner, though. Groups have been intentionally omitted from this commit. |
||
|---|---|---|
| .. | ||
| admin_api | ||
| privacy_policy_templates/en | ||
| sphinx | ||
| .sample_config_header.yaml | ||
| ACME.md | ||
| CAPTCHA_SETUP.rst | ||
| MSC1711_certificates_FAQ.md | ||
| README.rst | ||
| ancient_architecture_notes.rst | ||
| application_services.rst | ||
| architecture.rst | ||
| code_style.rst | ||
| consent_tracking.md | ||
| federate.md | ||
| log_contexts.rst | ||
| manhole.md | ||
| media_repository.rst | ||
| metrics-howto.rst | ||
| password_auth_providers.rst | ||
| postgres.rst | ||
| replication.rst | ||
| reverse_proxy.rst | ||
| sample_config.yaml | ||
| server_notices.md | ||
| tcp_replication.rst | ||
| turn-howto.rst | ||
| url_previews.md | ||
| user_directory.md | ||
| workers.rst | ||
README.rst
All matrix-generic documentation now lives in its own project at github.com/matrix-org/matrix-doc.git Only Synapse implementation-specific documentation lives here now (together with some older stuff will be shortly migrated over to matrix-doc)