refactor: Remove support for guest user registration #1736

Merged
ginger merged 3 commits from ginger/kill-guest-users into main 2026-05-05 17:38:24 +00:00
Owner

This pull request removes support for registering as a guest user, which only Element(?) ever used.

Pull request checklist:

  • This pull request targets the main branch, and the branch is named something other than
    main.
  • I have written an appropriate pull request title and my description is clear.
  • I understand I am responsible for the contents of this pull request.
  • I have followed the contributing guidelines:
<!-- In order to help reviewers know what your pull request does at a glance, you should ensure that 1. Your PR title is a short, single sentence describing what you changed 2. You have described in more detail what you have changed, why you have changed it, what the intended effect is, and why you think this will be beneficial to the project. If you have made any potentially strange/questionable design choices, but didn't feel they'd benefit from code comments, please don't mention them here - after opening your pull request, go to "files changed", and click on the "+" symbol in the line number gutter, and attach comments to the lines that you think would benefit from some clarification. --> This pull request removes support for registering as a guest user, which only Element(?) ever used. <!-- Example: This pull request allows us to warp through time and space ten times faster than before by double-inverting the warp drive with hyperheated jump fluid, both making the drive faster and more efficient. This resolves the common issue where we have to wait more than 10 milliseconds to engage, use, and disengage the warp drive when travelling between galaxies. --> <!-- Closes: #... --> <!-- Fixes: #... --> <!-- Uncomment the above line(s) if your pull request fixes an issue or closes another pull request by superseding it. Replace `#...` with the issue/pr number, such as `#123`. --> **Pull request checklist:** <!-- You need to complete these before your PR can be considered. If you aren't sure about some, feel free to ask for clarification in #dev:continuwuity.org. --> - [x] This pull request targets the `main` branch, and the branch is named something other than `main`. - [x] I have written an appropriate pull request title and my description is clear. - [x] I understand I am responsible for the contents of this pull request. - I have followed the [contributing guidelines][c1]: - [x] My contribution follows the [code style][c2], if applicable. - [x] I ran [pre-commit checks][c1pc] before opening/drafting this pull request. - [x] I have [tested my contribution][c1t] (or proof-read it for documentation-only changes) myself, if applicable. This includes ensuring code compiles. - [x] My commit messages follow the [commit message format][c1cm] and are descriptive. <!-- Notes on these requirements: - While not required, we encourage you to sign your commits with GPG or SSH to attest the authenticity of your changes. - While we allow LLM-assisted contributions, we do not appreciate contributions that are low quality, which is typical of machine-generated contributions that have not had a lot of love and care from a human. Please do not open a PR if all you have done is asked ChatGPT to tidy up the codebase with a +-100,000 diff. - In the case of code style violations, reviewers may leave review comments/change requests indicating what the ideal change would look like. For example, a reviewer may suggest you lower a log level, or use `match` instead of `if/else` etc. - In the case of code style violations, pre-commit check failures, minor things like typos/spelling errors, and in some cases commit format violations, reviewers may modify your branch directly, typically by making changes and adding a commit. Particularly in the latter case, a reviewer may rebase your commits to squash "spammy" ones (like "fix", "fix", "actually fix"), and reword commit messages that don't satisfy the format. - Pull requests MUST pass the `Checks` CI workflows to be capable of being merged. This can only be bypassed in exceptional circumstances. If your CI flakes, let us know in matrix:r/dev:continuwuity.org. - Pull requests have to be based on the latest `main` commit before being merged. If the main branch changes while you're making your changes, you should make sure you rebase on main before opening a PR. Your branch will be rebased on main before it is merged if it has fallen behind. - We typically only do fast-forward merges, so your entire commit log will be included. Once in main, it's difficult to get out cleanly, so put on your best dress, smile for the cameras! --> [c1]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md [c2]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/docs/development/code_style.mdx [c1pc]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#pre-commit-checks [c1t]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#running-tests-locally [c1cm]: https://forgejo.ellis.link/continuwuation/continuwuity/src/branch/main/CONTRIBUTING.md#commit-messages
chore: News fragment
All checks were successful
Auto Labeler / Apply labels based on changed files (pull_request_target) Successful in 3s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 7s
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m32s
Documentation / Build and Deploy Documentation (pull_request) Successful in 1m35s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 10m10s
83f3314f08
Member

I think Element Call standalone uses this also, but its still probably fine to remove.

I think Element Call standalone uses this also, but its still probably fine to remove.
@ -236,4 +232,2 @@
}
#[admin_command]
async fn password_hash(&self, user_id: OwnedUserId) -> Result {
Owner

aw i cant hack my users anymore :(

aw i cant hack my users anymore :(
nex requested changes 2026-05-05 17:31:09 +00:00
@ -59,7 +48,6 @@ pub(crate) async fn register_route(
ClientIp(client): ClientIp,
body: Ruma<register::v3::Request>,
) -> Result<register::v3::Response> {
let is_guest = body.kind == RegistrationKind::Guest;
Owner

You should probably reject non-user kinds rather than just assume they're user

You should probably reject non-user kinds rather than just assume they're user
nex marked this conversation as resolved
fix: Address review comments
All checks were successful
Checks / Prek / Check changed files (pull_request) Successful in 6s
Checks / Changelog / Check changelog is added (pull_request_target) Successful in 33s
Checks / Prek / Pre-commit & Formatting (pull_request) Successful in 1m24s
Documentation / Build and Deploy Documentation (pull_request) Successful in 1m33s
Checks / Prek / Check changed files (push) Successful in 33s
Documentation / Build and Deploy Documentation (push) Successful in 1m16s
Checks / Prek / Pre-commit & Formatting (push) Successful in 1m28s
Checks / Prek / Clippy and Cargo Tests (pull_request) Successful in 8m36s
Checks / Prek / Clippy and Cargo Tests (push) Successful in 9m22s
Release Docker Image / Build linux-arm64 (release) (push) Successful in 12m35s
Release Docker Image / Build linux-amd64 (release) (push) Successful in 16m27s
Release Docker Image / Create Multi-arch Release Manifest (push) Successful in 43s
Release Docker Image / Build linux-arm64 (max-perf) (push) Successful in 33m16s
Release Docker Image / Build linux-amd64 (max-perf) (push) Successful in 37m16s
Release Docker Image / Release Binaries (push) Has been skipped
Release Docker Image / Create Max-Perf Manifest (push) Successful in 40s
Release Docker Image / Mirror Images (push) Successful in 2m24s
e212c91ebf
@ -358,0 +374,4 @@
{
(hash, user_id.to_owned())
} else {
// We also check the lowercased version of the user ID to handle legacy user IDs
Owner

being pedantic but it's modern user IDs that are lowercase, ones with uppercase chars are legacy

being pedantic but it's modern user IDs that are lowercase, ones with uppercase chars are legacy
nex approved these changes 2026-05-05 17:37:41 +00:00
nex left a comment

big green checkmark i choose you

big green checkmark i choose you
@ -61,2 +50,3 @@
) -> Result<register::v3::Response> {
let is_guest = body.kind == RegistrationKind::Guest;
if body.kind != RegistrationKind::User {
return Err!(Request(GuestAccessForbidden("Guests may not register on this server.")));
Owner

"Guest registration is disabled on this server" is probably better

`"Guest registration is disabled on this server"` is probably better
Author
Owner

Guest registration isn't disabled, guest registration doesn't exist 🧌

Guest registration isn't _disabled_, guest registration doesn't exist 🧌
ginger merged commit e212c91ebf into main 2026-05-05 17:38:24 +00:00
ginger deleted branch ginger/kill-guest-users 2026-05-05 17:38:24 +00:00
@ -181,3 +194,4 @@
Ok(())
}
// /// Create a new account for a local human or bot user.
Owner

delete

delete
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
4 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
continuwuation/continuwuity!1736
No description provided.