From 4a6805a517098fcd788d999b0d312ba02569ddb7 Mon Sep 17 00:00:00 2001
From: strawberry <strawberry@puppygock.gay>
Date: Mon, 1 Jul 2024 20:01:37 +0100
Subject: [PATCH] fixup! feat(federation): support /make_join and /send_join
 for restricted rooms

check event is join membership

Co-Authored-By: Matthias Ahouansou <matthias@ahouansou.cz>
---
 src/api/server_server.rs | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/src/api/server_server.rs b/src/api/server_server.rs
index e4f5adae..f6e1c303 100644
--- a/src/api/server_server.rs
+++ b/src/api/server_server.rs
@@ -1705,6 +1705,13 @@ async fn create_join_event(
     )
     .map_err(|_| Error::BadRequest(ErrorKind::BadJson, "Invalid event content"))?;
 
+    if event_content.membership != MembershipState::Join {
+        return Err(Error::BadRequest(
+            ErrorKind::BadJson,
+            "Membership of sent event does not match that of the endpoint",
+        ));
+    }
+
     if event_content
         .join_authorized_via_users_server
         .map(|user| user.server_name() == services().globals.server_name())