Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.
This initial Alpha release fixes an information disclosure issue, and should be considered a Security release.
When a message is posted to Matrix, if there is any kind of error or problem with the request, Guzzle throws an exception with the URL of the request -- e.g. if there's a 502 Gateway timeout. If this happens, Guzzle includes the access_token in the exception.
This might get revealed to a caller -- for example, when a JSONAPI request creates an entity and triggers this error, the Matrix user's access_token is sent back to the caller in the exception.
Initial release. Has admin page for setting an account, generates an access_token from username/pw, and creates a MatrixClient service that can be used for generic posts to the Matrix API as well as specific support for Sync, Join Room, Send Message.