You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The spec states that the format of the Authorization header on the Federation API is given by RFC 7235. Part of that specification allows for zero or more spaces or tabs around the commas in the parameter list. For example, the following should be a valid Authorization header:
This fact was omitted from the summary of RFC 7235 in the spec, which is likely why it didn't make it into gomatrixserverlib as well. That is now being corrected: matrix-org/matrix-spec#1818
The code should be updated to allow whitespace in the parameter list in the header, such that any homeserver implementations following the spec would not have their federation requests rejected by homeservers that rely on gomatrixserverlib.
The text was updated successfully, but these errors were encountered:
anoadragon453
changed the title
Dendrite rejects Authorization: X-Matrix ... headers that include optional whitespace around parameter pairs
gomatrixserverlib rejects Authorization: X-Matrix ... headers that include optional whitespace around parameter pairs
May 8, 2024
The spec states that the format of the
Authorization
header on the Federation API is given by RFC 7235. Part of that specification allows for zero or more spaces or tabs around the commas in the parameter list. For example, the following should be a validAuthorization
header:Yet upon looking at
gomatrixserverlib
's source code, I believe it would reject this header:gomatrixserverlib/fclient/request.go
Lines 321 to 351 in c2391f7
This fact was omitted from the summary of RFC 7235 in the spec, which is likely why it didn't make it into
gomatrixserverlib
as well. That is now being corrected: matrix-org/matrix-spec#1818The code should be updated to allow whitespace in the parameter list in the header, such that any homeserver implementations following the spec would not have their federation requests rejected by homeservers that rely on gomatrixserverlib.
See matrix-org/matrix-spec#1817 for more context.
The text was updated successfully, but these errors were encountered: