x86pup

Conduit supports SOCK5 proxies so allowing users to exclude TLS verification from `*.onion` can enable both clearnet + Tor federation at the same time. [This MR](https://gitlab.com/famedly/conduit/-/merge_requests/55) isn't going anywhere, been...

Validate MSC3860 support

1

Supposedly Conduit has always supported MSC3860 accidentally by always following redirects, however I'm curious why Conduit always sets `allow_redirect` to false for all media requests.

Config option to require authentication for profile requests, and disable profile lookup requests over federation (?)

2

`require_auth_for_profile_requests` and `allow_profile_lookup_over_federation` in Synapse https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html#require_auth_for_profile_requests https://matrix-org.github.io/synapse/latest/usage/configuration/config_documentation.html#allow_profile_lookup_over_federation https://github.com/element-hq/synapse/blob/4e4a0f79b9a8156d4feec8c414063b0f8ba565d7/synapse/rest/client/profile.py#L70 Trying to understand the use-case for disabling `allow_profile_lookup_over_federation` since at that point you should just disable federation, but certain endpoints requiring authentication...

Might be useful for low powered devices to lower it (less processing power), security/entropy of the access token length is already plenty, but why not. https://github.com/girlbossceo/conduwuit/blob/main/src/api/client_server/mod.rs#L72

Add support for authenticated media requests using access token

1

Helps prevent people from proxying unwanted media from/to your homeserver as they require authentication using a valid access token on your server. conduwuit is fast so it makes sense why...

https://matrix-org.github.io/synapse/latest/admin_api/rooms.html#make-room-admin-api https://matrix-org.github.io/synapse/latest/admin_api/room_membership.html

https://github.com/girlbossceo/conduwuit/compare/main...room-deletion-attempt-do-not-use

Will probably use https://github.com/ruma/synapse-admin-api but mirror and custom endpoints as necessary to `/_conduwuit/` and maybe consider redirecting some like the Synapse admin user check that Element does. No priority because...

Add admin room command to create registration tokens with attributes like expiry, username-bound, etc

1

Thinking this can be implemented with a database kv table. Admin command to create a token with either an arbitrary specified token, or a randomly generated one. With arguments to...

Homeserver signing key stuff

1

At least I want to support outputting the homeserver signing key from the database because I seriously doubt this is hard lol. It's generated upon creation of the database. Will...