!NPRUEisLjcaMtHIzDr:kamax.io

mxisd

259 Members
Federated Matrix Identity Server | https://github.com/kamax-io/mxisd | Version: 0.8.2 | Dev discussions: #mxisd-dev:kamax.io | Related: #matrix-identity:matrix.org104 Servers

Load older messages


SenderMessageTime
3 Jun 2019
@max:kamax.ioMaximus See this wiki entry. Please read it fully 23:10:04
@mextor:matrix.orgmextorthx reading now23:11:19
@mextor:matrix.orgmextorok, then we can't remove email address ?23:25:50
@mextor:matrix.orgmextorI guess we can do it manualy on server's side right ?23:28:42
@max:kamax.ioMaximusmextor: the document shows how to do it if you really want to, but 3PID removal is not supported since there is no spec for it23:30:37
@mextor:matrix.orgmextorI did add : location /_matrix/identity/api/v1/unbind { return 404;23:32:04
@mextor:matrix.orgmextorbut I still get the same message23:32:19
@mextor:matrix.orgmextorbtw, my server is not federated23:32:33
@max:kamax.ioMaximus then you'll need to ask the synapse people why it doesn't work 23:32:47
@max:kamax.ioMaximusmxisd only support the stable spec, and makes sure that itw remain legal under GDPR. For now, 3PID removal is not in the spec, and we just documented what works for us, but we do not support it23:34:17
@mextor:matrix.orgmextorok, thx can I do it manualy in the DB ?23:34:52
@max:kamax.ioMaximus At your own risks. I'm not up to date enough with the synapse internals to tell you yes or no 23:36:27
@mextor:matrix.orgmextorthen I only get a user blocked with an unchangeable email ?23:37:00
@max:kamax.ioMaximusIt seems like. synapse forces this new behaviour. Previous versions respected the spec and removal was possible.23:38:20
@max:kamax.ioMaximusThe wiki document points to several synapse and spec issues you should express your concerns on, including closed ones. We have warned about such breakages and issues already, we were not listened to. Only you can, as a user, raise awareness to the issue. You can also open a new issue on the synapse repo23:40:13
@mextor:matrix.orgmextor ok, thx Maximus , I will 23:41:25
@mextor:matrix.orgmextormeanwhile is there a command line to completely erase a user, I will recreate it for testing23:41:50
@mextor:matrix.orgmextor?23:41:53
@max:kamax.ioMaximus
In reply to @mextor:matrix.org
meanwhile is there a command line to completely erase a user, I will recreate it for testing
I'm not aware of one
23:42:19
@mextor:matrix.orgmextorthx23:43:24
@max:kamax.ioMaximuseven the deactivate API will fail since it also tries to remove emails the same way and will also fail23:44:12
@travis:t2l.ioTravisR Maximus: just a head's up that June 10th is Matrix 1.0, which includes an identity server release. That release will include MSC1915, the unbind API we previously talked about. This means that mxisd's behaviour on June 10th will be non-compliant with the spec. Thought I should give you a head's up so you can implement a patch before then. The spec is currently written as https://github.com/matrix-org/matrix-doc/pull/2046 23:58:54
4 Jun 2019
@mextor:matrix.orgmextorthx00:00:21
@max:kamax.ioMaximus TravisR: I'm aware. No patch is needed since mxisd doesn't store any 3PIDs. If our feedback was taken into account, spec and implementations will deal with it in an optional matter, just like /3pid/bind does. Up to Riot to prompt the user I guess 00:04:25
@travis:t2l.ioTravisRThe spec has a fallback for identity servers which do not implement the endpoint, or do not want to.00:05:42
@max:kamax.ioMaximus I don't follow how it will help the current problem of synapse failing to remove a 3PID. Or should mextor wait for synapse to implement the new spec release? 00:07:55
@travis:t2l.ioTravisRSynapse already does implement it. As far as I know, mxisd doesn't return the right combination of HTTP error codes and response bodies to prevent it from screaming.00:08:51
@mextor:matrix.orgmextorg night guys, its 2am for me00:12:37
@mextor:matrix.orgmextorback later00:12:46
@max:kamax.ioMaximus TravisR: I'll see what the v1.0 spec has to say about the endpoints (CS and IS) when its out then. I hope it effectively takes into account mxisd use case and doesn't involve GDPR illegalities, and that synapse/Riot behaves properly. mxisd cannot compromise on privacy or promote illegal behaviour that may get people sued for leaking private & identifiable data. 00:23:31

Show newer messages


Back to Room ListRoom Version: