From 3c7aa8a0b8c38cfd215a76b13f44cc6197af642f Mon Sep 17 00:00:00 2001 From: Travis Ralston Date: Thu, 30 Jan 2025 17:08:24 -0700 Subject: [PATCH] Add guest access requirements --- proposals/4260-report-user.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/proposals/4260-report-user.md b/proposals/4260-report-user.md index 4d8b56a1d..f93446f79 100644 --- a/proposals/4260-report-user.md +++ b/proposals/4260-report-user.md @@ -89,6 +89,9 @@ Like `/report/:eventId`, handling of the report is left as a deliberate implemen * Authentication is required for this new endpoint. +* Guest access is not permitted for this new endpoint to reduce spam. A future MSC may change this + out of necessity. MSC4151 and the original report events API are likely similarly affected. + * Servers which opt to hide the existence of a user on the new endpoint should consider implementing a constant time function to avoid unintentionally disclosing that a user exists by processing the request slower.