From cb695d455e7fe1f5ced4aae7bd7c90ae1b75d47e Mon Sep 17 00:00:00 2001 From: Hugh Nimmo-Smith Date: Thu, 29 Oct 2026 13:25:34 +0000 Subject: [PATCH] Update synapse/rest/client/rendezvous.py Co-authored-by: Erik Johnston --- synapse/rest/client/rendezvous.py | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/synapse/rest/client/rendezvous.py b/synapse/rest/client/rendezvous.py index f3ed2203ac..884d8dc511 100644 --- a/synapse/rest/client/rendezvous.py +++ b/synapse/rest/client/rendezvous.py @@ -102,12 +102,11 @@ class MSC4388CreateRendezvousServlet(RestServlet): refreshing rather than that server policy does not permit it to create a session. """ - if self.auth.has_access_token(request): - # This will raise if the token is invalid or needs a refresh - await self.auth.get_user_by_req(request) - return True - - return not self.require_authentication + requester = await self.auth.get_optional_user_by_req(request) + + # Creation is allowed if authenticated or authentication isn't + # required + return requester is not None or not self.require_authentication async def on_GET(self, request: SynapseRequest) -> tuple[int, Any]: await self._requests_ratelimiter.ratelimit(