Filip/matrix-spec
1
0
Fork 0
mirror of https://github.com/matrix-org/matrix-spec synced 2026-06-09 17:57:47 +02:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Remind servers that they shouldn't overwrite signatures with those from a policy server (#2385)
Some checks failed
Spec / 🔎 Validate OpenAPI specifications (push) Has been cancelled
Details
Spec / 🔎 Check Event schema examples (push) Has been cancelled
Details
Spec / 🔎 Check OpenAPI definitions examples (push) Has been cancelled
Details
Spec / 🔎 Check JSON Schemas inline examples (push) Has been cancelled
Details
Spec / ⚙️ Calculate baseURL for later jobs (push) Has been cancelled
Details
Spec / 📢 Run towncrier for changelog (push) Has been cancelled
Details
Spell Check / Spell Check with Typos (push) Has been cancelled
Details
Spec / 🐍 Build OpenAPI definitions (push) Has been cancelled
Details
Spec / 📖 Build the spec (push) Has been cancelled
Details
Spec / 🔎 Validate generated HTML (push) Has been cancelled
Details
Spec / 📖 Build the historical backup spec (push) Has been cancelled
Details
Spec / Create release (push) Has been cancelled
Details

Browse source 
* Remind servers that they shouldn't overwrite signatures with those from a policy server

* changelog
This commit is contained in:
Travis Ralston 2026-05-27 15:20:17 -06:00 committed by GitHub
parent 76455209c2
commit a0f4a9aa87
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
changelogs/server_server/newsfragments/2385.clarification Normal file
View file

@ -0,0 +1 @@
Clarify that policy servers might share a name with event origins, and that servers should avoid overwriting/discarding signatures for the event origin when getting a policy server signature.

6
data/api/server-server/room_policy.yaml
View file

@ -41,6 +41,12 @@ paths:
What the Policy Server checks for when calling this endpoint is left as an
implementation detail.
{{% boxes/warning %}}
The policy server name might be the same as the event's origin, and therefore the event might
have existing signatures. Those existing signatures might not be returned by the policy server,
but should be retained to validate the event.
{{% /boxes/warning %}}
operationId: askPolicyServerToSign
security:
- signedRequest: []