Requests

ASP.NET Core minimal APIs, one Map… extension per spec area in Endpoints/. Each endpoint reads the request, calls a service and returns JSON.

• MatrixHttp.HandleAsync wraps every request: CORS headers, and standard errors from exceptions. A MatrixException becomes its status and errcode; MatrixErrorException adds fields such as current_version; AuthenticationRequiredException answers 401 with the user-interactive auth flows; bad JSON becomes M_BAD_JSON or M_NOT_JSON; unknown paths M_UNRECOGNIZED.
• RequireAccessToken() on a route group checks the token from the Authorization header (or the deprecated access_token query parameter); handlers get the user with http.GetRequester(), or http.GetOwnRequester(userId) for endpoints that take a user ID and must refuse other users.
• The Requester carries the account's admin, suspended and locked flags. A locked account is refused with M_USER_LOCKED and soft_logout on every request but logging out. RejectSuspended() refuses suspended accounts with M_USER_SUSPENDED on sending, joining, inviting, creating rooms, profile changes and uploads. RequireAdmin() guards AdminEndpoints, which serve the spec's whois, suspend and lock and a subset of Synapse's admin API at its paths.
• Requests through the local admin socket need no access token: AdminSocket marks the socket's connections, and they act as an admin without an account. File permissions decide who may open the socket. ManagementEndpoints answer only there, for uniform-chat-server manage: the status with the counters and the server's files, and the settings, read with their sources, applied live and saved by the server. They take known options that are not secret, with valid values; elsewhere they answer as unknown.
• Access tokens are stored as SHA-256 hashes, so a leaked database does not leak sessions.