feat(cinny-web): allow custom homeservers on the web, like the desktop app #34

2026-10-19T00:28:59-04:00

jared commented

2026-10-19 00:28:59 -04:00

Refs cinny-desktop#34 (decision 2026-10-19: allow custom homeservers on both).

cinny/config.json → allowCustomHomeservers: true. On the web the login screen now lets people type any homeserver, as the desktop app already does. The listed servers stay the defaults.

One note: logging in to another server from chat.lotusguild.org still needs that server's endpoints to be allowed by the web CSP's connect-src. Today it lists matrix.org, mozilla.org and vector.im explicitly, plus wss:. Other servers will hit the CSP until connect-src is widened (e.g. https:), which would be a separate decision.

Deploys automatically to LXC 106 (config merge).

🤖 Generated with Claude Code

https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5

Refs cinny-desktop#34 (decision 2026-10-19: allow custom homeservers on both). `cinny/config.json` → `allowCustomHomeservers: true`. On the web the login screen now lets people type any homeserver, as the desktop app already does. The listed servers stay the defaults. One note: logging in to another server from chat.lotusguild.org still needs that server's endpoints to be allowed by the web CSP's `connect-src`. Today it lists matrix.org, mozilla.org and vector.im explicitly, plus `wss:`. Other servers will hit the CSP until `connect-src` is widened (e.g. `https:`), which would be a separate decision. Deploys automatically to LXC 106 (config merge). 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5

jared added 1 commit 2026-10-19 00:29:00 -04:00

feat(cinny-web): allow custom homeservers on the web, like the desktop app (cinny-desktop #34 )

Lint / Shell (shellcheck) (pull_request) Successful in 8s

Details

Lint / JS (eslint) (pull_request) Successful in 6s

Details

Lint / No secrets in webhook configs (pull_request) Successful in 4s

Details

Lint / Landing page is rendered (matrix (pull_request) Successful in 4s

Details

Lint / Python (ruff) (pull_request) Successful in 6s

Details

Lint / Python deps (pip-audit) (pull_request) Successful in 40s

Details

Lint / Secret scan (gitleaks) (pull_request) Successful in 5s

Details

Lint / Shell (shellcheck) (push) Successful in 7s

Details

Lint / JS (eslint) (push) Successful in 6s

Details

Lint / No secrets in webhook configs (push) Successful in 4s

Details

Lint / Landing page is rendered (matrix (push) Successful in 4s

Details

Lint / Python (ruff) (push) Successful in 5s

Details

Lint / Python deps (pip-audit) (push) Successful in 39s

Details

Lint / Secret scan (gitleaks) (push) Successful in 10s

Details

ab775599c2

The web app only offered the listed homeservers while the desktop app
let people type any server. Decision (2026-10-19): allow it on both.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017PCb59uY3UKqDqt7B6hzd5

jared referenced this issue from a commit

2026-10-19 00:29:01 -04:00

feat(cinny-web): allow custom homeservers on the web, like the desktop app (cinny-desktop #34)

jared commented

2026-10-19 00:32:05 -04:00

Closing: decision 2026-10-19 is to keep the web locked to the listed homeservers. Allowing custom servers on the web would need connect-src https: in the CSP, and that trade-off was declined. The desktop app keeps allowing them.

🤖 Claude Code

Closing: decision 2026-10-19 is to **keep the web locked** to the listed homeservers. Allowing custom servers on the web would need `connect-src https:` in the CSP, and that trade-off was declined. The desktop app keeps allowing them. 🤖 Claude Code

jared closed this pull request

2026-10-19 00:32:05 -04:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: LotusGuild/matrix#34