From 45b1d08c7e338586d1a716e447e3f025a960aaa6 Mon Sep 17 00:00:00 2001 From: Kegan Dougal Date: Wed, 14 Oct 2015 15:16:12 +0100 Subject: [PATCH 1/2] SPEC-207: Add a warning about needing AS tokens to be unique and why --- specification/3-application_service_api.rst | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/specification/3-application_service_api.rst b/specification/3-application_service_api.rst index a6e82137..557e16aa 100644 --- a/specification/3-application_service_api.rst +++ b/specification/3-application_service_api.rst @@ -54,6 +54,11 @@ An example HS configuration required to pass traffic to the AS is: aliases: [] # Namespaces of room aliases which should be delegated to the AS rooms: [] # Namespaces of room ids which should be delegated to the AS +.. WARNING:: + If the homeserver in question has multiple application services, each + ``as_token`` MUST be unique per application service as this token is used to + identify the application service. + - An application service can state whether they should be the only ones who can manage a specified namespace. This is referred to as an "exclusive" namespace. An exclusive namespace prevents humans and other application From c4d1b568435aca0216762e1331a6d42f49bf5f68 Mon Sep 17 00:00:00 2001 From: Kegan Dougal Date: Thu, 15 Oct 2015 09:57:21 +0100 Subject: [PATCH 2/2] Add a comment about enforcement. --- specification/3-application_service_api.rst | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/specification/3-application_service_api.rst b/specification/3-application_service_api.rst index 557e16aa..8d0efdef 100644 --- a/specification/3-application_service_api.rst +++ b/specification/3-application_service_api.rst @@ -57,7 +57,7 @@ An example HS configuration required to pass traffic to the AS is: .. WARNING:: If the homeserver in question has multiple application services, each ``as_token`` MUST be unique per application service as this token is used to - identify the application service. + identify the application service. The homeserver MUST enforce this. - An application service can state whether they should be the only ones who can manage a specified namespace. This is referred to as an "exclusive"