Mirrors/continuwuity
1
0
Fork 0
mirror of https://forgejo.ellis.link/continuwuation/continuwuity.git synced 2026-05-26 20:49:55 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(config): remove allow_public_room_directory_without_auth

Browse Source
This commit is contained in:
Niklas Wojtkowiak
2026-02-23 17:59:13 +00:00
committed by Ellis Git
parent 558262dd1f
commit 18d2662b01
4 changed files with 11 additions and 30 deletions
Download Patch File Download Diff File Expand all files Collapse all files
complement/complement.config.toml
-1
View File
@@ -9,7 +9,6 @@ address = "0.0.0.0"
allow_device_name_federation = true allow_device_name_federation = true
allow_guest_registration = true allow_guest_registration = true
allow_public_room_directory_over_federation = true allow_public_room_directory_over_federation = true
allow_public_room_directory_without_auth = true
allow_registration = true allow_registration = true
database_path = "/database" database_path = "/database"
log = "trace,h2=debug,hyper=debug" log = "trace,h2=debug,hyper=debug"
conduwuit-example.toml
-6
View File
@@ -546,12 +546,6 @@
# #
#allow_public_room_directory_over_federation = false #allow_public_room_directory_over_federation = false
# Set this to true to allow your server's public room directory to be
# queried without client authentication (access token) through the Client
# APIs. Set this to false to protect against /publicRooms spiders.
#
#allow_public_room_directory_without_auth = false
# Allow guests/unauthenticated users to access TURN credentials. # Allow guests/unauthenticated users to access TURN credentials.
# #
# This is the equivalent of Synapse's `turn_allow_guests` config option. # This is the equivalent of Synapse's `turn_allow_guests` config option.
src/api/router/auth.rs
-6
View File
@@ -67,11 +67,6 @@ pub(super) async fn auth(
if metadata.authentication == AuthScheme::None { if metadata.authentication == AuthScheme::None {
match metadata { match metadata {
| &get_public_rooms::v3::Request::METADATA => { | &get_public_rooms::v3::Request::METADATA => {
if !services
.server
.config
.allow_public_room_directory_without_auth
{
match token { match token {
| Token::Appservice(_) | Token::User(_) => { | Token::Appservice(_) | Token::User(_) => {
// we should have validated the token above // we should have validated the token above
@@ -84,7 +79,6 @@ pub(super) async fn auth(
)); ));
}, },
} }
}
}, },
| &get_profile::v3::Request::METADATA | &get_profile::v3::Request::METADATA
| &get_profile_key::unstable::Request::METADATA | &get_profile_key::unstable::Request::METADATA
src/core/config/mod.rs
-6
View File
@@ -678,12 +678,6 @@ pub struct Config {
#[serde(default)] #[serde(default)]
pub allow_public_room_directory_over_federation: bool, pub allow_public_room_directory_over_federation: bool,
/// Set this to true to allow your server's public room directory to be
/// queried without client authentication (access token) through the Client
/// APIs. Set this to false to protect against /publicRooms spiders.
#[serde(default)]
pub allow_public_room_directory_without_auth: bool,
/// Allow guests/unauthenticated users to access TURN credentials. /// Allow guests/unauthenticated users to access TURN credentials.
/// ///
/// This is the equivalent of Synapse's `turn_allow_guests` config option. /// This is the equivalent of Synapse's `turn_allow_guests` config option.