90 lines
3.5 KiB
YAML
90 lines
3.5 KiB
YAML
# services/communication/synapse-guest-register-module-configmap.yaml
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: synapse-guest-register-module
|
|
data:
|
|
guest_register.py: |
|
|
import secrets
|
|
import random
|
|
|
|
import synapse.api.auth
|
|
from synapse.api.errors import Codes, SynapseError
|
|
from synapse.http.server import DirectServeJsonResource
|
|
from synapse.http.servlet import parse_json_object_from_request
|
|
from synapse.types import UserID, create_requester
|
|
|
|
|
|
class GuestRegisterResource(DirectServeJsonResource):
|
|
def __init__(self, hs, shared_secret: str, header_name: str):
|
|
super().__init__(clock=hs.get_clock())
|
|
self._hs = hs
|
|
self._shared_secret = shared_secret
|
|
self._header_name = header_name
|
|
|
|
self._adj = ["brisk", "calm", "eager", "gentle", "merry", "nifty", "rapid", "sunny", "witty", "zesty"]
|
|
self._noun = ["otter", "falcon", "comet", "ember", "grove", "harbor", "meadow", "raven", "river", "summit"]
|
|
|
|
async def _async_render_POST(self, request): # noqa: N802
|
|
provided = request.requestHeaders.getRawHeaders(self._header_name)
|
|
if not provided or not secrets.compare_digest(provided[0], self._shared_secret):
|
|
raise SynapseError(403, "Forbidden", errcode=Codes.FORBIDDEN)
|
|
|
|
body = parse_json_object_from_request(request)
|
|
initial_device_display_name = body.get("initial_device_display_name")
|
|
if not isinstance(initial_device_display_name, str):
|
|
initial_device_display_name = None
|
|
|
|
reg = self._hs.get_registration_handler()
|
|
address = request.getClientAddress().host
|
|
|
|
user_id = await reg.register_user(make_guest=True, address=address)
|
|
|
|
device_id = synapse.api.auth.GUEST_DEVICE_ID
|
|
device_id, access_token, valid_until_ms, refresh_token = await reg.register_device(
|
|
user_id,
|
|
device_id,
|
|
initial_device_display_name,
|
|
is_guest=True,
|
|
)
|
|
|
|
displayname = body.get("displayname")
|
|
if not isinstance(displayname, str) or not displayname.strip():
|
|
displayname = f"{random.choice(self._adj)}-{random.choice(self._noun)}"
|
|
|
|
try:
|
|
requester = create_requester(user_id, is_guest=True, device_id=device_id)
|
|
await self._hs.get_profile_handler().set_displayname(
|
|
UserID.from_string(user_id),
|
|
requester,
|
|
displayname,
|
|
propagate=False,
|
|
)
|
|
except Exception:
|
|
pass
|
|
|
|
result = {
|
|
"user_id": user_id,
|
|
"device_id": device_id,
|
|
"access_token": access_token,
|
|
"home_server": self._hs.hostname,
|
|
}
|
|
|
|
if valid_until_ms is not None:
|
|
result["expires_in_ms"] = valid_until_ms - self._hs.get_clock().time_msec()
|
|
|
|
if refresh_token is not None:
|
|
result["refresh_token"] = refresh_token
|
|
|
|
return 200, result
|
|
|
|
|
|
class GuestRegisterModule:
|
|
def __init__(self, config, api):
|
|
shared_secret = config["shared_secret"]
|
|
header_name = config.get("header_name", "x-guest-register-secret")
|
|
path = config.get("path", "/_matrix/_guest_register")
|
|
|
|
hs = api._hs # noqa: SLF001
|
|
api.register_web_resource(path, GuestRegisterResource(hs, shared_secret, header_name))
|