refactor: add isAuthenticated and canAccessResource middlewares#224

Merged

sampaiodiego merged 20 commits intomainfrom

refactor/middlewares

Oct 10, 2025

Commits on Oct 10, 2025

add canAccessResource and isAuthenticated middlewares

ricardogarim
authored and
sampaiodiego
committed
remove barrel imports from middlewares

ricardogarim
authored and
sampaiodiego
committed
refactor canAccessResource middleware

ricardogarim
authored and
sampaiodiego
committed
add room invite check on canAccessResource validation

ricardogarim
authored and
sampaiodiego
committed
lint

ricardogarim
authored and
sampaiodiego
committed
handle missing room state before accessing ACLs

ricardogarim
authored and
sampaiodiego
committed
fix naming inconsistency in Elysia plugin name

ricardogarim
authored and
sampaiodiego
committed
do not drain the request body in isAuthenticated middleware

ricardogarim
authored and
sampaiodiego
committed
fix path prefix duplication

ricardogarim
authored and
sampaiodiego
committed
apply authentication middleware to the config endpoint

ricardogarim
authored and
sampaiodiego
committed
mitigate potential Regular Expression Denial of Service (ReDoS) vulnerability

ricardogarim
authored and
sampaiodiego
committed
improve error handling and parameter validation in extractEntityId

ricardogarim
authored and
sampaiodiego
committed
invite loop leaks when membership events are missing fields

ricardogarim
authored and
sampaiodiego
committed
enforce server-to-server authentication on publicRooms endpoints

ricardogarim
authored and
sampaiodiego
committed
invite route checking by just auth instead of resource

ricardogarim
authored and
sampaiodiego
committed
getFullRoomState -> getLatestRoomState

ricardogarim
authored and
sampaiodiego
committed
add m.room.server_acl event support

ricardogarim
authored and
sampaiodiego
committed
pair route middlewares with rc and matrix protocol

ricardogarim
authored and
sampaiodiego
committed
remove pino dep
sampaiodiego
committed
include membership for acl
sampaiodiego
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

refactor: add isAuthenticated and canAccessResource middlewares#224

refactor: add isAuthenticated and canAccessResource middlewares#224
sampaiodiego merged 20 commits intomainfrom
refactor/middlewares

Commits on Oct 10, 2025

add canAccessResource and isAuthenticated middlewares

remove barrel imports from middlewares

refactor canAccessResource middleware

add room invite check on canAccessResource validation

lint

handle missing room state before accessing ACLs

fix naming inconsistency in Elysia plugin name

do not drain the request body in isAuthenticated middleware

fix path prefix duplication

apply authentication middleware to the config endpoint

mitigate potential Regular Expression Denial of Service (ReDoS) vulnerability

improve error handling and parameter validation in extractEntityId

invite loop leaks when membership events are missing fields

enforce server-to-server authentication on publicRooms endpoints

invite route checking by just auth instead of resource

getFullRoomState -> getLatestRoomState

add m.room.server_acl event support

pair route middlewares with rc and matrix protocol

remove pino dep

include membership for acl