Matrix/synapse
Matrix/synapse
1
0
Fork 0
mirror of https://github.com/element-hq/synapse synced 2024-10-02 13:52:39 +00:00
Code Issues Projects Releases Packages Wiki Activity

Threepid validity checks on msisdns should not be dependent on 'threepid_behaviour_email'. (#6104)

Browse source 
Fixes #6103
This commit is contained in:
Neil Johnson 2019-09-25 12:29:35 +01:00 committed by Richard van der Hoff
parent 990928abde
commit 77dc7093a7
2 changed files with 36 additions and 30 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
changelog.d/6104.bugfix Normal file
View file

@ -0,0 +1 @@
Threepid validity checks on msisdns should not be dependent on 'threepid_behaviour_email'.

65
synapse/handlers/ui_auth/checkers.py
View file

@ -148,42 +148,47 @@ class _BaseThreepidAuthChecker:
identity_handler = self.hs.get_handlers().identity_handler identity_handler = self.hs.get_handlers().identity_handler
logger.info("Getting validated threepid. threepidcreds: %r", (threepid_creds,)) logger.info("Getting validated threepid. threepidcreds: %r", (threepid_creds,))
if self.hs.config.threepid_behaviour_email == ThreepidBehaviour.REMOTE:
if medium == "email": # msisdns are currently always ThreepidBehaviour.REMOTE
if medium == "msisdn":
if not self.hs.config.account_threepid_delegate_msisdn:
raise SynapseError(
400, "Phone number verification is not enabled on this homeserver"
)
threepid = yield identity_handler.threepid_from_creds(
self.hs.config.account_threepid_delegate_msisdn, threepid_creds
)
elif medium == "email":
if self.hs.config.threepid_behaviour_email == ThreepidBehaviour.REMOTE:
assert self.hs.config.account_threepid_delegate_email
threepid = yield identity_handler.threepid_from_creds( threepid = yield identity_handler.threepid_from_creds(
self.hs.config.account_threepid_delegate_email, threepid_creds self.hs.config.account_threepid_delegate_email, threepid_creds
) )
elif medium == "msisdn": elif self.hs.config.threepid_behaviour_email == ThreepidBehaviour.LOCAL:
threepid = yield identity_handler.threepid_from_creds( threepid = None
self.hs.config.account_threepid_delegate_msisdn, threepid_creds row = yield self.store.get_threepid_validation_session(
medium,
threepid_creds["client_secret"],
sid=threepid_creds["sid"],
validated=True,
) )
if row:
threepid = {
"medium": row["medium"],
"address": row["address"],
"validated_at": row["validated_at"],
}
# Valid threepid returned, delete from the db
yield self.store.delete_threepid_session(threepid_creds["sid"])
else: else:
raise SynapseError(400, "Unrecognized threepid medium: %s" % (medium,)) raise SynapseError(
elif self.hs.config.threepid_behaviour_email == ThreepidBehaviour.LOCAL: 400, "Email address verification is not enabled on this homeserver"
row = yield self.store.get_threepid_validation_session( )
medium,
threepid_creds["client_secret"],
sid=threepid_creds["sid"],
validated=True,
)
threepid = (
{
"medium": row["medium"],
"address": row["address"],
"validated_at": row["validated_at"],
}
if row
else None
)
if row:
# Valid threepid returned, delete from the db
yield self.store.delete_threepid_session(threepid_creds["sid"])
else: else:
raise SynapseError( # this can't happen!
400, "Password resets are not enabled on this homeserver" raise AssertionError("Unrecognized threepid medium: %s" % (medium,))
)
if not threepid: if not threepid:
raise LoginError(401, "", errcode=Codes.UNAUTHORIZED) raise LoginError(401, "", errcode=Codes.UNAUTHORIZED)