From 713bdeca75b981d0083e677ef343220d52ae94f6 Mon Sep 17 00:00:00 2001 From: Ovidijus Balkauskas <570945@gmail.com> Date: Mon, 13 Jan 2025 14:06:27 +0200 Subject: [PATCH 1/2] Add 'introspection_endpoint' to homeserver config example This value was previously undocumented, but helpful in our case to access MAS within the same K8s cluster Signed-off-by: Ovidijus Balkauskas <570945@gmail.com> --- docs/setup/homeserver.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/setup/homeserver.md b/docs/setup/homeserver.md index 8870d9de6..a2c57e9b5 100644 --- a/docs/setup/homeserver.md +++ b/docs/setup/homeserver.md @@ -60,6 +60,10 @@ experimental_features: # URL to advertise to clients where users can self-manage their account account_management_url: "http://localhost:8080/account" + + # Optional URL to access from synapse in order to introspect oauth2 access tokens + # Defaults to `http:///oauth2/introspect` + # introspection_endpoint: "http://localhost:8080/oauth2/introspect" ``` ## Set up the compatibility layer From a8e7749a07ba4437314c1d500a9b186209664c13 Mon Sep 17 00:00:00 2001 From: Quentin Gliech Date: Tue, 28 Jan 2025 10:02:06 +0100 Subject: [PATCH 2/2] Clarify why one would override the introspection_endpoint --- docs/setup/homeserver.md | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/docs/setup/homeserver.md b/docs/setup/homeserver.md index a2c57e9b5..614d4b190 100644 --- a/docs/setup/homeserver.md +++ b/docs/setup/homeserver.md @@ -59,11 +59,14 @@ experimental_features: admin_token: "AnotherRandomSecret" # URL to advertise to clients where users can self-manage their account - account_management_url: "http://localhost:8080/account" + # Defaults to the URL advertised by MAS, e.g. `https://{public_mas_domain}/account/` + #account_management_url: "http://localhost:8080/account/" - # Optional URL to access from synapse in order to introspect oauth2 access tokens - # Defaults to `http:///oauth2/introspect` - # introspection_endpoint: "http://localhost:8080/oauth2/introspect" + # URL which Synapse will use to introspect access tokens + # Defaults to the URL advertised by MAS, e.g. `https://{public_mas_domain}/oauth2/introspect` + # This is useful to override if Synapse has a way to call the auth service's + # introspection endpoint directly, skipping intermediate reverse proxies + #introspection_endpoint: "http://localhost:8080/oauth2/introspect" ``` ## Set up the compatibility layer