mirror of
https://github.com/element-hq/synapse.git
synced 2025-03-12 19:06:50 +00:00
08c56c3acc
The context for this is that the Matrix spec allows basically anything in the device ID. With MSC3861, we're restricting this to strings that can be represented as scopes. Whilst this works well for next-gen auth sessions, compatibility/legacy sessions still can have characters that can't be encoded (mainly spaces) in them. To work around that, we added in MAS a behaviour where the device_id is given as an explicit property of the token introspection response, and remove it from the scope. Because we don't expect users to rollout new Synapse and MAS versions in sync, we needed a way to 'advertise' support for this behaviour: the easiest way to do that was through an extra header in the introspection response. On the longer term, I expect MAS and Synapse to move away from the introspection endpoint, and instead define a specific API for Synapse -> MAS communication. PR on the MAS side: https://github.com/element-hq/matrix-authentication-service/pull/4067 |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| oidc_test_key.p8 | ||
| oidc_test_key.pub.pem | ||
| test_admin.py | ||
| test_appservice.py | ||
| test_auth.py | ||
| test_cas.py | ||
| test_deactivate_account.py | ||
| test_device.py | ||
| test_directory.py | ||
| test_e2e_keys.py | ||
| test_e2e_room_keys.py | ||
| test_federation.py | ||
| test_federation_event.py | ||
| test_message.py | ||
| test_oauth_delegation.py | ||
| test_oidc.py | ||
| test_password_providers.py | ||
| test_presence.py | ||
| test_profile.py | ||
| test_receipts.py | ||
| test_register.py | ||
| test_room.py | ||
| test_room_list.py | ||
| test_room_member.py | ||
| test_room_summary.py | ||
| test_saml.py | ||
| test_send_email.py | ||
| test_sliding_sync.py | ||
| test_sso.py | ||
| test_stats.py | ||
| test_sync.py | ||
| test_typing.py | ||
| test_user_directory.py | ||
| test_worker_lock.py | ||