The restrictBaseUrl config option allows you to limit which homeservers can be used for logging in. In my case I have only a single homeserver specified which causes the input box to not show up at all (which is expected). However after logging out and being returned to the login page, the homeserver input box shows up and you are allowed to input any homeserver, regardless of the restrictBaseUrl setting.
To Reproduce
Steps to reproduce the behavior:
- Login to a Ketesa instance with a limited
restrictBaseUrl setting
- Logout
- The homeserver input box is now visible and editable
Expected behavior
The homeserver input box should remain hidden and inaccessible after logging out when only a single homeserver is allowed.
Instance configuration:
- Ketesa version: 1.0.0
- Synapse version 1.144.0
Additional context
My homeserver uses MAS for authentication. I am not sure if this is relevant or not.
The
restrictBaseUrlconfig option allows you to limit which homeservers can be used for logging in. In my case I have only a single homeserver specified which causes the input box to not show up at all (which is expected). However after logging out and being returned to the login page, the homeserver input box shows up and you are allowed to input any homeserver, regardless of therestrictBaseUrlsetting.To Reproduce
Steps to reproduce the behavior:
restrictBaseUrlsettingExpected behavior
The homeserver input box should remain hidden and inaccessible after logging out when only a single homeserver is allowed.
Instance configuration:
Additional context
My homeserver uses MAS for authentication. I am not sure if this is relevant or not.