This release requires Python 3.10 or higher.
Authenticated media
Matrix v1.11 deprecated the old way of downloading media without authentication, which Heisenbridge was relying on when bridging media. This release adds a proxy into the bridge which allows unauthenticated access to media that has been sent over the bridge. Support for old way of bridging media has also been removed completely, which means a Matrix v1.11 compatible homeserver is required (Synapse v1.111 or higher, matrix-media-repo v1.3.5 or higher, Conduit/Dendrite not yet available).
To set it up, configure your reverse proxy to pass /_heisenbridge/media/* to heisenbridge, then set heisenbridge -> media_url in the registration file with the public URL that the reverse proxy handles (without the /_heisenbridge/media prefix). Optionally, you can run another heisenbridge instance with the --media-proxy flag to have it in a separate process. When doing so, point the reverse proxy at that second process, not the main process.
The path that heisenbridge emits can also be configured using the heisenbridge -> media_path option (defaults to /_heisenbridge/media/{server}/{media_id}/{checksum}{filename}). However, it does not change the path where heisenbridge listens, so you must rewrite paths in your reverse proxy if using that option.
The unauthenticated links generated by Heisenbridge will have a checksum to prevent accessing media that hasn't been sent over the bridge. By default, the checksum uses the hs_token as the HMAC secret. Optionally, you can set heisenbridge -> media_key in the registration to use a custom key.
Other changes
- Filter out empty user IDs in
statuscommand (@Christoph-D in #286) - Added setting to insert username prefix on all lines of a multi-line message (@russss in #276)
- Added note to help that shell escaping may be required for some commands (@hades in #271)
- Added option to disable reactions (@9p4 in #275)
