kaslo/synapse
1
0
Fork 0
Code Packages Releases 124 Wiki Activity

Enable authenticated media by default (#17889)

Browse Source 
Co-authored-by: Olivier 'reivilibre <oliverw@matrix.org>
This commit is contained in:
Travis Ralston
2024-11-20 07:48:22 -07:00
committed by GitHub
parent 8291aa8fd7
commit d0a474d312
11 changed files with 129 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
docs/upgrade.md
View File

@@ -128,6 +128,29 @@ removing the experimental support for it in this release.
The `experimental_features.msc3886_endpoint` configuration option has
been removed.
## Authenticated media is now enforced by default
The [`enable_authenticated_media`] configuration option now defaults to true.
This means that clients and remote (federated) homeservers now need to use
the authenticated media endpoints in order to download media from your
homeserver.
As an exception, existing media that was stored on the server prior to
this option changing to `true` will still be accessible over the
unauthenticated endpoints.
The matrix.org homeserver has already been running with this option enabled
since September 2024, so most common clients and homeservers should already
be compatible.
With that said, administrators who wish to disable this feature for broader
compatibility can still do so by manually configuring
`enable_authenticated_media: False`.
[`enable_authenticated_media`]: usage/configuration/config_documentation.md#enable_authenticated_media
# Upgrading to v1.119.0
## Minimum supported Python version