matrix-org / matrix-org/matrix-spec

Consider making `inhibit_login` default to true for appservices

Open
#736 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

A-Application-Services improvement
Dominant language
HTML
Stars
330
Forks
150
Avg merge
2h 21m
Merged PRs (30d)
3

Description

https://adoring-einstein-5ea514.netlify.app/client-server/#post_matrixclientr0register `inhibit_login`

>If true, an access_token and device_id should not be returned from this call, therefore preventing an automatic login. Defaults to false.

Appservices should not use the access token returned by /register and instead use the token provided in their registration. The device_id is similarly not important for most bridges, and should be off by default. If bridges are E2EE capable, then device_ids and access tokens may be useful and so the bridge can opt in to get this information.

Doing this would save resources and time on the homeserver. However, doing so would lead to backwards incompatibilities with existing bridges which rely on this behaviour (they would need to provide inhibit_login in their registration requests).

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the Matrix client-server registration endpoint linked in the issue and review the `inhibit_login` behavior for appservices. Assess the compatibility impact on existing bridges and define the spec change and opt-in behavior needed for E2EE-capable bridges; done means the default and migration requirements are unambiguous.

Written by the indexing model from the issue text.

Assessment

Domain
api, backend-api-design
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.