Use the v2 Identity Service API for lookups (MSC2134 + MSC2140)

synapse/handlers/room_member.py

@@ -710,28 +710,10 @@ def _lookup_3pid(self, id_server, medium, address, id_access_token=None):
         Returns:
             str|None: the matrix ID of the 3pid, or None if it is not recognized.
         """
-        # If an access token is present, add it to the query params of the hash_details request
-        query_params = {}
         if id_access_token is not None:
-            query_params["id_access_token"] = id_access_token
-
-            # Check what hashing details are supported by this identity server
             try:
-                hash_details = yield self.simple_http_client.get_json(
-                    "%s%s/_matrix/identity/v2/hash_details"
-                    % (id_server_scheme, id_server),
-                    query_params,
-                )
-                if not isinstance(hash_details, dict):
-                    logger.warning(
-                        "Got non-dict object when checking hash details of %s: %s",
-                        id_server,
-                        hash_details,
-                    )
-                    return None
-
                 results = yield self._lookup_3pid_v2(
-                    id_server, id_access_token, medium, address, hash_details
+                    id_server, id_access_token, medium, address
                 )
                 return results
 
@@ -782,9 +764,7 @@ def _lookup_3pid_v1(self, id_server, medium, address):
         return None
 
     @defer.inlineCallbacks
-    def _lookup_3pid_v2(
-        self, id_server, id_access_token, medium, address, hash_details
-    ):
+    def _lookup_3pid_v2(self, id_server, id_access_token, medium, address):
         """Looks up a 3pid in the passed identity server using v2 lookup.
 
         Args:
@@ -793,12 +773,38 @@ def _lookup_3pid_v2(
             id_access_token (str): The access token to authenticate to the identity server with
             medium (str): The type of the third party identifier (e.g. "email").
             address (str): The third party identifier (e.g. "[email protected]").
-            hash_details (dict[str, str|list]): A dictionary containing hashing information
-                provided by an identity server.
 
         Returns:
             Deferred[str|None]: the matrix ID of the 3pid, or None if it is not recognised.
         """
+        try:
+            # Check what hashing details are supported by this identity server
+            hash_details = yield self.simple_http_client.get_json(
+                "%s%s/_matrix/identity/v2/hash_details" % (id_server_scheme, id_server),
+                {"access_token": id_access_token},
+            )
+        except HttpResponseException as e:
+            if e.code == 404:
+                raise
+
+            logger.warning("Error when performing a v2 hash_details request: %s", e)
+            raise SynapseError(
+                500, "Unknown error occurred during identity server lookup"
+            )
+
+        if not isinstance(hash_details, dict):
+            logger.warning(
+                "Got non-dict object when checking hash details of %s%s: %s",
+                id_server_scheme,
+                id_server,
+                hash_details,
+            )
+            raise SynapseError(
+                400,
+                "Non-dict object from %s%s during v2 hash_details request: %s"
+                % (id_server_scheme, id_server, hash_details),
+            )
+
         # Extract information from hash_details
         supported_lookup_algorithms = hash_details.get("algorithms")
         lookup_pepper = hash_details.get("lookup_pepper")
@@ -809,7 +815,9 @@ def _lookup_3pid_v2(
             or not isinstance(lookup_pepper, str)
         ):
             raise SynapseError(
-                500, "Invalid hash details received from identity server: %s, %s"
+                400,
+                "Invalid hash details received from identity server: %s%s, %s"
+                % (id_server_scheme, id_server, hash_details),
             )
 
         # Check if any of the supported lookup algorithms are present
@@ -835,7 +843,7 @@ def _lookup_3pid_v2(
                 supported_lookup_algorithms,
             )
             raise SynapseError(
-                400,
+                500,
                 "Provided identity server does not support any v2 lookup "
                 "algorithms that this homeserver supports.",
             )
@@ -844,7 +852,7 @@ def _lookup_3pid_v2(
             lookup_results = yield self.simple_http_client.post_json_get_json(
                 "%s%s/_matrix/identity/v2/lookup" % (id_server_scheme, id_server),
                 {
-                    "id_access_token": id_access_token,
+                    "access_token": id_access_token,
                     "addresses": [lookup_value],
                     "algorithm": lookup_algorithm,
                     "pepper": lookup_pepper,
@@ -860,7 +868,7 @@ def _lookup_3pid_v2(
         if "mappings" not in lookup_results or not isinstance(
             lookup_results["mappings"], dict
         ):
-            logger.debug("No results from 3pid lookup")
+            logger.warning("No results from 3pid lookup")
             return None
 
         # Return the MXID if it's available, or None otherwise