wholetrans/docs-matrix-spec
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Clarify if a resident server cannot issue a join vs. if they're unsure if the user is allowed to join.

Browse source
This commit is contained in:
Patrick Cloke 2021-07-19 15:10:29 -04:00 • committed by Richard van der Hoff
parent 6b6aa2449a
commit d329c216c4
1 changed files with 9 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

13
proposals/3083-restricted-rooms.md
View file

@ -67,13 +67,18 @@ It is possible for a resident homeserver (one which receives a `/make_join` /
`/send_join` request to not know if the user is in some of the allowed rooms (due
to not participating in them). If the user is not in any of the allowed rooms that
are known to the homeserver it should return an error response with HTTP status code
of 400 with an `errcode` of `M_CANNOT_ALLOW`. The joining server should attempt to
join via another resident homeserver. If the resident homeserver knows that the
user is not in *any* of the allowed rooms it should return an error response with
HTTP status code of 403 and an `errcode` of `M_FORBIDDEN`. Note that it is a
of 400 with an `errcode` of `M_UNABLE_TO_AUTHORISE_JOIN`. The joining server should
attempt to join via another resident homeserver. If the resident homeserver knows
that the user is not in *any* of the allowed rooms it should return an error response
with HTTP status code of 403 and an `errcode` of `M_FORBIDDEN`. Note that it is a
configuration error if there are allowed rooms with no participating authorised
servers.
A chosen resident homeserver might also be unable to issue invites, in this case
it should return an error response with HTTP status code of 400 and an `errcode`
of `M_CANNOT_ALLOW`. The joining server should attempt to join via another
resident homeserver.
From the perspective of the [auth rules](https://spec.matrix.org/unstable/rooms/v1/#authorization-rules),
the `restricted` join rule has the same behavior as `public`, with the additional
caveat that servers must ensure that: