From 25a9dcfd3cef268fc672098eeb6f1dd8df660007 Mon Sep 17 00:00:00 2001 From: David Robertson Date: Sat, 28 May 2022 03:04:09 +0100 Subject: [PATCH] Clarify that the resident server should sign the restricted join (#1093) * Clarify that server should sign the restricted join * Changelog * Changelog --- changelogs/room_versions/newsfragments/1093.clarification | 1 + content/rooms/fragments/v8-auth-rules.md | 2 +- 2 files changed, 2 insertions(+), 1 deletion(-) create mode 100644 changelogs/room_versions/newsfragments/1093.clarification diff --git a/changelogs/room_versions/newsfragments/1093.clarification b/changelogs/room_versions/newsfragments/1093.clarification new file mode 100644 index 00000000..6176b102 --- /dev/null +++ b/changelogs/room_versions/newsfragments/1093.clarification @@ -0,0 +1 @@ +Auth rules: clarify that the resident server must sign a restricted join event. diff --git a/content/rooms/fragments/v8-auth-rules.md b/content/rooms/fragments/v8-auth-rules.md index 3583df41..6a548787 100644 --- a/content/rooms/fragments/v8-auth-rules.md +++ b/content/rooms/fragments/v8-auth-rules.md @@ -46,7 +46,7 @@ The rules are as follows: 1. If no `state_key` key or `membership` key in `content`, reject. 2. If `content` has a `join_authorised_via_users_server` key: - 1. If the event is not validly signed by the user ID denoted + 1. If the event is not validly signed by the homeserver of the user ID denoted by the key, reject. 3. If `membership` is `join`: 1. If the only previous event is an `m.room.create` and the