kaslo/synapse
1
0
Fork 0
Code Wiki Activity

Remove the requirement to authenticate for /admin/server_version. (#5122)

Browse Source 
This endpoint isn't much use for its intended purpose if you first need to get
yourself an admin's auth token.

I've restricted it to the `/_synapse/admin` path to make it a bit easier to
lock down for those concerned about exposing this information. I don't imagine
anyone is using it in anger currently.
This commit is contained in:
Richard van der Hoff
2019-05-07 09:29:30 +01:00
committed by GitHub
parent 3fdff14207
commit 59e2d2694d
5 changed files with 32 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/admin_api/version_api.rst
View File

@@ -10,8 +10,6 @@ The api is::
GET /_synapse/admin/v1/server_version
including an ``access_token`` of a server admin.
It returns a JSON body like the following:
.. code:: json