feat: Add support for MSC4388

conduwuit-example.toml

@@ -812,15 +812,30 @@
 # env: CONTINUWUITY_FORGET_FORCED_UPON_LEAVE
 #forget_forced_upon_leave = false
 
-# Set this to true to require authentication on the normally
-# unauthenticated profile retrieval endpoints (GET)
-# "/_matrix/client/v3/profile/{userId}".
+# Set this to true to require authentication when looking up user profiles
+# through this server.
 #
-# This can prevent profile scraping.
+# By default this is false, allowing tools such as matrix.to to access
+# profiles of users on this server and on other servers.
+# Setting this to true will block those tools, and may block automated
+# crawlers from scraping users' profiles, although it will not block
+# other homeservers from accessing users' profiles.
 #
 # env: CONTINUWUITY_REQUIRE_AUTH_FOR_PROFILE_REQUESTS
 #require_auth_for_profile_requests = false
 
+# Set this to false to allow rendezvous sessions to be created without
+# authentication. Rendezvous sessions are used for QR code sign-in.
+#
+# By default this is true, meaning that a user must use their signed-in
+# device to generate a QR code when signing in. Setting this to false will
+# allow signed-out devices to generate QR codes using this homeserver,
+# which may be desirable for public-registration homeservers.
+#a user
+#
+# env: CONTINUWUITY_REQUIRE_AUTH_FOR_RENDEZVOUS
+#require_auth_for_rendezvous = true
+
 # Set this to true to allow your server's public room directory to be
 # federated. Set this to false to protect against /publicRooms spiders,
 # but will forbid external users from viewing your server's public room