diff --git a/changelogs/room_versions/newsfragments/1093.clarification b/changelogs/room_versions/newsfragments/1093.clarification new file mode 100644 index 000000000..6176b1028 --- /dev/null +++ b/changelogs/room_versions/newsfragments/1093.clarification @@ -0,0 +1 @@ +Auth rules: clarify that the resident server must sign a restricted join event. diff --git a/content/rooms/fragments/v8-auth-rules.md b/content/rooms/fragments/v8-auth-rules.md index 3583df418..6a5487873 100644 --- a/content/rooms/fragments/v8-auth-rules.md +++ b/content/rooms/fragments/v8-auth-rules.md @@ -46,7 +46,7 @@ The rules are as follows: 1. If no `state_key` key or `membership` key in `content`, reject. 2. If `content` has a `join_authorised_via_users_server` key: - 1. If the event is not validly signed by the user ID denoted + 1. If the event is not validly signed by the homeserver of the user ID denoted by the key, reject. 3. If `membership` is `join`: 1. If the only previous event is an `m.room.create` and the