mirror of
https://github.com/element-hq/synapse
synced 2024-09-19 15:15:11 +00:00
Check if alias event's state_key matches sender's domain
This commit is contained in:
parent
560c71c735
commit
2cb758ac75
1 changed files with 11 additions and 0 deletions
|
@ -115,6 +115,17 @@ class Auth(object):
|
||||||
|
|
||||||
# FIXME: Temp hack
|
# FIXME: Temp hack
|
||||||
if event.type == EventTypes.Aliases:
|
if event.type == EventTypes.Aliases:
|
||||||
|
if not event.state_key:
|
||||||
|
raise AuthError(
|
||||||
|
403,
|
||||||
|
"Alias event must have non-empty state_key"
|
||||||
|
)
|
||||||
|
sender_domain = get_domain_from_id(event.sender)
|
||||||
|
if event.state_key != sender_domain:
|
||||||
|
raise AuthError(
|
||||||
|
403,
|
||||||
|
"Alias event's state_key does not match sender's domain"
|
||||||
|
)
|
||||||
return True
|
return True
|
||||||
|
|
||||||
logger.debug(
|
logger.debug(
|
||||||
|
|
Loading…
Reference in a new issue