chris/ruwuma
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Allow join room creator only if create event has no prev_events

Browse Source
This commit is contained in:
Devin Ragotzy 2020-08-26 11:04:30 -04:00
parent 36cec22cf3
commit 025c2df752
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/event_auth.rs
View File

@ -292,7 +292,9 @@ pub fn is_membership_change_allowed(
if let Some(create) = auth_events.get(&(EventType::RoomCreate, Some("".into()))) {
if let Ok(create_ev) = create.deserialize_content::<room::create::CreateEventContent>()
{
if user.state_key == Some(create_ev.creator.to_string()) {
if user.state_key == Some(create_ev.creator.to_string())
&& create.prev_event_ids().is_empty()
{
tracing::debug!("m.room.member event allowed via m.room.create");
return Ok(true);
}