search

arcuru / pokem

A notification helper for Matrix.
MIT License
27 stars 0 forks source link

[Feature Request]: Better Authentication for large rooms #3

Closed arcuru closed 3 months ago

arcuru commented 4 months ago

So to avoid spamming I've implemented a max room size setting, so that the owner of the daemon can limit the size of rooms that it responds in.

I don't want someone to add the bot to a giant room and then start spamming it, basically.

This issue exists to try to find a better or more flexible way of doing that. I haven't looked much at what other bots do.

Maybe the bot account has to be given elevated privileges in the room? Like, the bot account will message the room if it's under the given max size OR it has some elevated privilege level, which would allow room admins to enable the bot for a room.

arcuru commented 4 months ago

I'm addressing this in 2 ways:

  1. The room size limit will limit even joining a room, so people running a bot account can prevent it from trying to join giant rooms. If we are in a too large room it will not send messages.
  2. I've added optional authentication and blocking that can be configured from the Matrix side. You can set a password or just block the bot entirely by sending it commands.

The default pokem:jackson.dev account I'll remove the max room size limit, and the password/blocking functionality should be enough to prrevent abuse.

arcuru commented 3 months ago

These changes are made in the repo, and I've updated the pokem:jackson.dev instance.