-
Notifications
You must be signed in to change notification settings - Fork 57
Support personal access tokens for introspection #5171
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Deploying matrix-authentication-service-docs with
|
Latest commit: |
66f8814
|
Status: | ✅ Deploy successful! |
Preview URL: | https://97fc8df0.matrix-authentication-service-docs.pages.dev |
Branch Preview URL: | https://rei-pat-2.matrix-authentication-service-docs.pages.dev |
&self, | ||
clock: &dyn Clock, | ||
session: &Session, | ||
session: &PersonalSession, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
🙈
PersonalSessionOwner::OAuth2Client(owner_client_id) => { | ||
let owner_client = repo | ||
.oauth2_client() | ||
.lookup(owner_client_id) | ||
.await? | ||
.ok_or(RouteError::CantLoadOAuth2Client(owner_client_id))?; |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I mean in theory we have a FK preventing this but sure, doesn't hurt :)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
indeed, though we do this already for some things, it felt easier to go with the flow somewhat
You can now present a personal access token (mpt_ prefix) at introspection and have it accepted. This means personal access tokens can be presented to Synapse and used on the client-server API.
Follows: #5106
Part of: #4492
This PR makes it so that you can present a personal access token (
mpt_
prefix) at introspection and have it accepted.This means personal access tokens can be presented to Synapse and used on the client-server API.