wip: Update token auth

Author: mzaniolo

.github/workflows/docker-famedly-nightly.yml

@@ -0,0 +1,21 @@
+---
+name: Docker-nightly
+
+on:
+  push:
+    tags:
+      - "*"
+      - "!v*"
+
+jobs:
+  docker:
+    uses: famedly/github-workflows/.github/workflows/docker.yml@main
+    with:
+      push: ${{ github.event_name != 'pull_request' }} # Always build, don't publish on pull requests
+      registry_user: famedly-ci
+      registry: docker-nightly.nexus.famedly.de
+      image_name: synapse
+      file: docker/Dockerfile
+      tags: |
+        type=ref,event=tag
+    secrets: inherit

docker/Dockerfile

@@ -139,7 +139,7 @@ RUN --mount=type=cache,target=/root/.cache/pip \
 RUN --mount=type=cache,target=/root/.cache/pip \
   pip install setuptools \
   && pip install --prefix="/install" --no-warn-script-location \
-    synapse-token-authenticator==0.8.1 \
+    git+https://github.com/famedly/synapse-token-authenticator.git@mzaniolo/validate_external_id \
     matrix-synapse-ldap3 \
     synapse-s3-storage-provider \
     synapse-auto-accept-invite \

docker/Dockerfile-workers

@@ -21,7 +21,7 @@ FROM docker.io/library/debian:bookworm-slim AS deps_base
 # which makes it much easier to copy (but we need to make sure we use an image
 # based on the same debian version as the synapse image, to make sure we get
 # the expected version of libc.
-FROM docker.io/library/redis:7-bookworm AS redis_base
+FROM redis:7.2-bookworm AS redis_base
 
 # now build the final image, based on the the regular Synapse docker image
 FROM $FROM