Filip/matrix-spec
1
0
Fork 0
mirror of https://github.com/matrix-org/matrix-spec synced 2026-04-23 03:04:09 +02:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Clarify what happens if a homeserver cannot verify membership.

Browse source
This commit is contained in:
Patrick Cloke 2021-06-28 08:55:52 -04:00 committed by Richard van der Hoff
parent 2749a95251
commit 750be83313
1 changed files with 7 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
proposals/3083-restricted-rooms.md
View file

@ -55,10 +55,13 @@ not a member of at least one of the rooms, the homeserver should return an error
response with HTTP status code of 403 and an `errcode` of `M_FORBIDDEN`. response with HTTP status code of 403 and an `errcode` of `M_FORBIDDEN`.
It is possible for a homeserver receiving a `/make_join` / `/send_join` request It is possible for a homeserver receiving a `/make_join` / `/send_join` request
to not know if the user is in any of the allowed room (due to not participating to not know if the user is in some of the allowed room (due to not participating
in them). In this case the homeserver should reject the join, the requesting in them). Any allow room that the homeserver cannot verify the membership should
server may wish to attempt to join via another homeserver. If no servers are in be treated as if the user is not in that room. If the user is not in any of the
an allowed room its membership cannot be checked (and this is a misconfiguration). rooms (or some of the rooms cannot be verified) the homeserver should reject the
join, as above. The requesting server may wish to attempt to join via another
homeserver. If no servers are in any of the allowed rooms its membership cannot
be verified (and this is a misconfiguration).
From the perspective of the [auth rules](https://spec.matrix.org/unstable/rooms/v1/#authorization-rules), From the perspective of the [auth rules](https://spec.matrix.org/unstable/rooms/v1/#authorization-rules),
the `restricted` join rule has the same behavior as `public`, with the additional the `restricted` join rule has the same behavior as `public`, with the additional