From bc22852f06767b630d6a71be0874d0245928ccbf Mon Sep 17 00:00:00 2001
From: Tulir Asokan <tulir@maunium.net>
Date: Thu, 12 Sep 2024 16:53:50 +0300
Subject: [PATCH 01/10] bridgev2: add analytics sending method

---
 bridgev2/bridgeconfig/config.go            |  7 +++
 bridgev2/bridgeconfig/upgrade.go           |  5 ++
 bridgev2/matrix/analytics.go               | 62 ++++++++++++++++++++++
 bridgev2/matrix/connector.go               |  3 ++
 bridgev2/matrix/mxmain/example-config.yaml |  9 ++++
 bridgev2/matrixinterface.go                |  4 ++
 bridgev2/user.go                           | 11 ++++
 7 files changed, 101 insertions(+)
 create mode 100644 bridgev2/matrix/analytics.go

diff --git a/bridgev2/bridgeconfig/config.go b/bridgev2/bridgeconfig/config.go
index 051e6a00..1731688d 100644
--- a/bridgev2/bridgeconfig/config.go
+++ b/bridgev2/bridgeconfig/config.go
@@ -21,6 +21,7 @@ type Config struct {
 	Homeserver   HomeserverConfig   `yaml:"homeserver"`
 	AppService   AppserviceConfig   `yaml:"appservice"`
 	Matrix       MatrixConfig       `yaml:"matrix"`
+	Analytics    AnalyticsConfig    `yaml:"analytics"`
 	Provisioning ProvisioningConfig `yaml:"provisioning"`
 	PublicMedia  PublicMediaConfig  `yaml:"public_media"`
 	DirectMedia  DirectMediaConfig  `yaml:"direct_media"`
@@ -78,6 +79,12 @@ type MatrixConfig struct {
 	UploadFileThreshold int64 `yaml:"upload_file_threshold"`
 }
 
+type AnalyticsConfig struct {
+	Token  string `yaml:"token"`
+	URL    string `yaml:"url"`
+	UserID string `yaml:"user_id"`
+}
+
 type ProvisioningConfig struct {
 	Prefix         string `yaml:"prefix"`
 	SharedSecret   string `yaml:"shared_secret"`
diff --git a/bridgev2/bridgeconfig/upgrade.go b/bridgev2/bridgeconfig/upgrade.go
index d6ccf007..4491dedd 100644
--- a/bridgev2/bridgeconfig/upgrade.go
+++ b/bridgev2/bridgeconfig/upgrade.go
@@ -87,6 +87,10 @@ func doUpgrade(helper up.Helper) {
 	helper.Copy(up.Bool, "matrix", "federate_rooms")
 	helper.Copy(up.Int, "matrix", "upload_file_threshold")
 
+	helper.Copy(up.Str|up.Null, "analytics", "token")
+	helper.Copy(up.Str|up.Null, "analytics", "url")
+	helper.Copy(up.Str|up.Null, "analytics", "user_id")
+
 	helper.Copy(up.Str, "provisioning", "prefix")
 	if secret, ok := helper.Get(up.Str, "provisioning", "shared_secret"); !ok || secret == "generate" {
 		sharedSecret := random.String(64)
@@ -176,6 +180,7 @@ var SpacedBlocks = [][]string{
 	{"appservice", "as_token"},
 	{"appservice", "username_template"},
 	{"matrix"},
+	{"analytics"},
 	{"provisioning"},
 	{"public_media"},
 	{"direct_media"},
diff --git a/bridgev2/matrix/analytics.go b/bridgev2/matrix/analytics.go
new file mode 100644
index 00000000..92ea2104
--- /dev/null
+++ b/bridgev2/matrix/analytics.go
@@ -0,0 +1,62 @@
+package matrix
+
+import (
+	"bytes"
+	"encoding/json"
+	"fmt"
+	"net/http"
+
+	"maunium.net/go/mautrix/id"
+)
+
+func (br *Connector) trackSync(userID id.UserID, event string, properties map[string]any) error {
+	var buf bytes.Buffer
+	var analyticsUserID string
+	if br.Config.Analytics.UserID != "" {
+		analyticsUserID = br.Config.Analytics.UserID
+	} else {
+		analyticsUserID = userID.String()
+	}
+	err := json.NewEncoder(&buf).Encode(map[string]any{
+		"userId":     analyticsUserID,
+		"event":      event,
+		"properties": properties,
+	})
+	if err != nil {
+		return err
+	}
+
+	req, err := http.NewRequest(http.MethodPost, br.Config.Analytics.URL, &buf)
+	if err != nil {
+		return err
+	}
+	req.SetBasicAuth(br.Config.Analytics.Token, "")
+	resp, err := br.AS.HTTPClient.Do(req)
+	if err != nil {
+		return err
+	}
+	_ = resp.Body.Close()
+	if resp.StatusCode != http.StatusOK {
+		return fmt.Errorf("unexpected status code %d", resp.StatusCode)
+	}
+	return nil
+}
+
+func (br *Connector) Track(userID id.UserID, event string, props map[string]any) {
+	if br.Config.Analytics.Token == "" || br.Config.Analytics.URL == "" {
+		return
+	}
+
+	if props == nil {
+		props = map[string]any{}
+	}
+	props["bridge"] = br.Bridge.Network.GetName().BeeperBridgeType
+	go func() {
+		err := br.trackSync(userID, event, props)
+		if err != nil {
+			br.Log.Err(err).Str("component", "analytics").Str("event", event).Msg("Error tracking event")
+		} else {
+			br.Log.Debug().Str("component", "analytics").Str("event", event).Msg("Tracked event")
+		}
+	}()
+}
diff --git a/bridgev2/matrix/connector.go b/bridgev2/matrix/connector.go
index 4297cba7..c5df2421 100644
--- a/bridgev2/matrix/connector.go
+++ b/bridgev2/matrix/connector.go
@@ -103,6 +103,9 @@ var (
 	_ bridgev2.MatrixConnector                           = (*Connector)(nil)
 	_ bridgev2.MatrixConnectorWithServer                 = (*Connector)(nil)
 	_ bridgev2.MatrixConnectorWithPostRoomBridgeHandling = (*Connector)(nil)
+	_ bridgev2.MatrixConnectorWithPublicMedia            = (*Connector)(nil)
+	_ bridgev2.MatrixConnectorWithNameDisambiguation     = (*Connector)(nil)
+	_ bridgev2.MatrixConnectorWithAnalytics              = (*Connector)(nil)
 )
 
 func NewConnector(cfg *bridgeconfig.Config) *Connector {
diff --git a/bridgev2/matrix/mxmain/example-config.yaml b/bridgev2/matrix/mxmain/example-config.yaml
index 31490bb3..7e642f96 100644
--- a/bridgev2/matrix/mxmain/example-config.yaml
+++ b/bridgev2/matrix/mxmain/example-config.yaml
@@ -205,6 +205,15 @@ matrix:
     # rather than keeping the whole file in memory.
     upload_file_threshold: 5242880
 
+# Segment-compatible analytics endpoint for tracking some events, like provisioning API login and encryption errors.
+analytics:
+    # API key to send with tracking requests. Tracking is disabled if this is null.
+    token: null
+    # Address to send tracking requests to.
+    url: https://api.segment.io/v1/track
+    # Optional user ID for tracking events. If null, defaults to using Matrix user ID.
+    user_id: null
+
 # Settings for provisioning API
 provisioning:
     # Prefix for the provisioning API paths.
diff --git a/bridgev2/matrixinterface.go b/bridgev2/matrixinterface.go
index 4473b74e..6ff69250 100644
--- a/bridgev2/matrixinterface.go
+++ b/bridgev2/matrixinterface.go
@@ -73,6 +73,10 @@ type MatrixConnectorWithPostRoomBridgeHandling interface {
 	HandleNewlyBridgedRoom(ctx context.Context, roomID id.RoomID) error
 }
 
+type MatrixConnectorWithAnalytics interface {
+	Track(userID id.UserID, event string, properties map[string]any)
+}
+
 type MatrixSendExtra struct {
 	Timestamp    time.Time
 	MessageMeta  *database.Message
diff --git a/bridgev2/user.go b/bridgev2/user.go
index 5c2344e8..fbb8095e 100644
--- a/bridgev2/user.go
+++ b/bridgev2/user.go
@@ -253,3 +253,14 @@ func (user *User) GetManagementRoom(ctx context.Context) (id.RoomID, error) {
 func (user *User) Save(ctx context.Context) error {
 	return user.Bridge.DB.User.Update(ctx, user.User)
 }
+
+func (br *Bridge) Track(userID id.UserID, event string, props map[string]any) {
+	analyticSender, ok := br.Matrix.(MatrixConnectorWithAnalytics)
+	if ok {
+		analyticSender.Track(userID, event, props)
+	}
+}
+
+func (user *User) Track(event string, props map[string]any) {
+	user.Bridge.Track(user.MXID, event, props)
+}

From 08d58d4d2a2e5e8050363e4edd0edef02ef61dbd Mon Sep 17 00:00:00 2001
From: Tulir Asokan <tulir@maunium.net>
Date: Thu, 12 Sep 2024 17:08:16 +0300
Subject: [PATCH 02/10] bridgev2/analytics: rename method

---
 bridgev2/matrix/analytics.go | 2 +-
 bridgev2/matrixinterface.go  | 2 +-
 bridgev2/user.go             | 8 ++++----
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/bridgev2/matrix/analytics.go b/bridgev2/matrix/analytics.go
index 92ea2104..7eb2a33a 100644
--- a/bridgev2/matrix/analytics.go
+++ b/bridgev2/matrix/analytics.go
@@ -42,7 +42,7 @@ func (br *Connector) trackSync(userID id.UserID, event string, properties map[st
 	return nil
 }
 
-func (br *Connector) Track(userID id.UserID, event string, props map[string]any) {
+func (br *Connector) TrackAnalytics(userID id.UserID, event string, props map[string]any) {
 	if br.Config.Analytics.Token == "" || br.Config.Analytics.URL == "" {
 		return
 	}
diff --git a/bridgev2/matrixinterface.go b/bridgev2/matrixinterface.go
index 6ff69250..fe218db1 100644
--- a/bridgev2/matrixinterface.go
+++ b/bridgev2/matrixinterface.go
@@ -74,7 +74,7 @@ type MatrixConnectorWithPostRoomBridgeHandling interface {
 }
 
 type MatrixConnectorWithAnalytics interface {
-	Track(userID id.UserID, event string, properties map[string]any)
+	TrackAnalytics(userID id.UserID, event string, properties map[string]any)
 }
 
 type MatrixSendExtra struct {
diff --git a/bridgev2/user.go b/bridgev2/user.go
index fbb8095e..1530b865 100644
--- a/bridgev2/user.go
+++ b/bridgev2/user.go
@@ -254,13 +254,13 @@ func (user *User) Save(ctx context.Context) error {
 	return user.Bridge.DB.User.Update(ctx, user.User)
 }
 
-func (br *Bridge) Track(userID id.UserID, event string, props map[string]any) {
+func (br *Bridge) TrackAnalytics(userID id.UserID, event string, props map[string]any) {
 	analyticSender, ok := br.Matrix.(MatrixConnectorWithAnalytics)
 	if ok {
-		analyticSender.Track(userID, event, props)
+		analyticSender.TrackAnalytics(userID, event, props)
 	}
 }
 
-func (user *User) Track(event string, props map[string]any) {
-	user.Bridge.Track(user.MXID, event, props)
+func (user *User) TrackAnalytics(event string, props map[string]any) {
+	user.Bridge.TrackAnalytics(user.MXID, event, props)
 }

From d472be34126bdd86ae4f5503b89b71a558f9db27 Mon Sep 17 00:00:00 2001
From: Scott Weber <scott@beeper.com>
Date: Thu, 12 Sep 2024 11:09:02 -0400
Subject: [PATCH 03/10] event: add BeeperHSSuborder to unsigned (#287)

---
 event/events.go | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/event/events.go b/event/events.go
index e5a01d02..23769ae8 100644
--- a/event/events.go
+++ b/event/events.go
@@ -145,11 +145,12 @@ type Unsigned struct {
 	InviteRoomState []StrippedState `json:"invite_room_state,omitempty"`
 
 	BeeperHSOrder    int64 `json:"com.beeper.hs.order,omitempty"`
+	BeeperHSSuborder int64 `json:"com.beeper.hs.suborder,omitempty"`
 	BeeperFromBackup bool  `json:"com.beeper.from_backup,omitempty"`
 }
 
 func (us *Unsigned) IsEmpty() bool {
 	return us.PrevContent == nil && us.PrevSender == "" && us.ReplacesState == "" && us.Age == 0 &&
 		us.TransactionID == "" && us.RedactedBecause == nil && us.InviteRoomState == nil && us.Relations == nil &&
-		us.BeeperHSOrder == 0
+		us.BeeperHSOrder == 0 && us.BeeperHSSuborder == 0
 }

From e16b681c100a31b9f6cb6aad78ea45064032f582 Mon Sep 17 00:00:00 2001
From: Tulir Asokan <tulir@maunium.net>
Date: Fri, 13 Sep 2024 00:46:30 +0300
Subject: [PATCH 04/10] crypto/helper: allow overriding post-decrypt function

---
 crypto/cryptohelper/cryptohelper.go | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/crypto/cryptohelper/cryptohelper.go b/crypto/cryptohelper/cryptohelper.go
index 9aed5121..0b3fbeaa 100644
--- a/crypto/cryptohelper/cryptohelper.go
+++ b/crypto/cryptohelper/cryptohelper.go
@@ -38,7 +38,8 @@ type CryptoHelper struct {
 
 	LoginAs *mautrix.ReqLogin
 
-	ASEventProcessor crypto.ASEventProcessor
+	ASEventProcessor  crypto.ASEventProcessor
+	CustomPostDecrypt func(context.Context, *event.Event)
 
 	DBAccountID string
 }
@@ -320,7 +321,9 @@ func (helper *CryptoHelper) HandleEncrypted(ctx context.Context, evt *event.Even
 
 func (helper *CryptoHelper) postDecrypt(ctx context.Context, decrypted *event.Event) {
 	decrypted.Mautrix.EventSource |= event.SourceDecrypted
-	if helper.ASEventProcessor != nil {
+	if helper.CustomPostDecrypt != nil {
+		helper.CustomPostDecrypt(ctx, decrypted)
+	} else if helper.ASEventProcessor != nil {
 		helper.ASEventProcessor.Dispatch(ctx, decrypted)
 	} else {
 		helper.client.Syncer.(mautrix.DispatchableSyncer).Dispatch(ctx, decrypted)

From 012aed97e32e8b06f61e28ca482458e1f285635e Mon Sep 17 00:00:00 2001
From: Tulir Asokan <tulir@maunium.net>
Date: Fri, 13 Sep 2024 01:33:29 +0300
Subject: [PATCH 05/10] error: add WithMessage and Write helpers

---
 bridgev2/errors.go |  9 +++++++++
 error.go           | 17 +++++++++++++++++
 2 files changed, 26 insertions(+)

diff --git a/bridgev2/errors.go b/bridgev2/errors.go
index e80377cf..7f925b29 100644
--- a/bridgev2/errors.go
+++ b/bridgev2/errors.go
@@ -9,6 +9,7 @@ package bridgev2
 import (
 	"errors"
 	"fmt"
+	"net/http"
 
 	"maunium.net/go/mautrix"
 )
@@ -80,6 +81,14 @@ func (re RespError) Is(err error) bool {
 	return errors.Is(err, mautrix.RespError(re))
 }
 
+func (re *RespError) Write(w http.ResponseWriter) {
+	(*mautrix.RespError)(re).Write(w)
+}
+
+func (re RespError) WithMessage(msg string, args ...any) RespError {
+	return RespError(mautrix.RespError(re).WithMessage(msg, args...))
+}
+
 func (re RespError) AppendMessage(append string, args ...any) RespError {
 	re.Err += fmt.Sprintf(append, args...)
 	return re
diff --git a/error.go b/error.go
index acd90892..906bbd62 100644
--- a/error.go
+++ b/error.go
@@ -12,6 +12,7 @@ import (
 	"fmt"
 	"net/http"
 
+	"go.mau.fi/util/exhttp"
 	"golang.org/x/exp/maps"
 )
 
@@ -142,6 +143,22 @@ func (e *RespError) MarshalJSON() ([]byte, error) {
 	return json.Marshal(data)
 }
 
+func (e *RespError) Write(w http.ResponseWriter) {
+	statusCode := e.StatusCode
+	if statusCode == 0 {
+		statusCode = http.StatusInternalServerError
+	}
+	exhttp.WriteJSONResponse(w, statusCode, e)
+}
+
+func (e RespError) WithMessage(msg string, args ...any) RespError {
+	if len(args) > 0 {
+		msg = fmt.Sprintf(msg, args...)
+	}
+	e.Err = msg
+	return e
+}
+
 // Error returns the errcode and error message.
 func (e RespError) Error() string {
 	return e.ErrCode + ": " + e.Err

From 36ef69bf7f4357a7e1451812b55b786ba23bf4b6 Mon Sep 17 00:00:00 2001
From: Tulir Asokan <tulir@maunium.net>
Date: Fri, 13 Sep 2024 01:36:38 +0300
Subject: [PATCH 06/10] error: remove pointer receiver from Write

Otherwise it can't be chained after WithMessage
---
 bridgev2/errors.go | 4 ++--
 error.go           | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/bridgev2/errors.go b/bridgev2/errors.go
index 7f925b29..0b1ef8b3 100644
--- a/bridgev2/errors.go
+++ b/bridgev2/errors.go
@@ -81,8 +81,8 @@ func (re RespError) Is(err error) bool {
 	return errors.Is(err, mautrix.RespError(re))
 }
 
-func (re *RespError) Write(w http.ResponseWriter) {
-	(*mautrix.RespError)(re).Write(w)
+func (re RespError) Write(w http.ResponseWriter) {
+	mautrix.RespError(re).Write(w)
 }
 
 func (re RespError) WithMessage(msg string, args ...any) RespError {
diff --git a/error.go b/error.go
index 906bbd62..7de5666d 100644
--- a/error.go
+++ b/error.go
@@ -143,12 +143,12 @@ func (e *RespError) MarshalJSON() ([]byte, error) {
 	return json.Marshal(data)
 }
 
-func (e *RespError) Write(w http.ResponseWriter) {
+func (e RespError) Write(w http.ResponseWriter) {
 	statusCode := e.StatusCode
 	if statusCode == 0 {
 		statusCode = http.StatusInternalServerError
 	}
-	exhttp.WriteJSONResponse(w, statusCode, e)
+	exhttp.WriteJSONResponse(w, statusCode, &e)
 }
 
 func (e RespError) WithMessage(msg string, args ...any) RespError {

From 65364d0133a902d932eb12a0668f3de7f31bf937 Mon Sep 17 00:00:00 2001
From: Tulir Asokan <tulir@maunium.net>
Date: Fri, 13 Sep 2024 01:38:18 +0300
Subject: [PATCH 07/10] error: add MUnknown

---
 error.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/error.go b/error.go
index 7de5666d..2f9ab983 100644
--- a/error.go
+++ b/error.go
@@ -25,6 +25,9 @@ import (
 //		// logout
 //	}
 var (
+	// Generic error for when the server encounters an error and it does not have a more specific error code.
+	// Note that `errors.Is` will check the error message rather than code for M_UNKNOWNs.
+	MUnknown = RespError{ErrCode: "M_UNKNOWN", StatusCode: http.StatusInternalServerError}
 	// Forbidden access, e.g. joining a room without permission, failed login.
 	MForbidden = RespError{ErrCode: "M_FORBIDDEN", StatusCode: http.StatusForbidden}
 	// Unrecognized request, e.g. the endpoint does not exist or is not implemented.

From e51e36ac99a0dadc62ab2c36cec8f3d34347b0db Mon Sep 17 00:00:00 2001
From: Tulir Asokan <tulir@maunium.net>
Date: Fri, 13 Sep 2024 01:53:45 +0300
Subject: [PATCH 08/10] client: drop support for unauthenticated media

---
 client.go | 109 ++++--------------------------------------------------
 1 file changed, 8 insertions(+), 101 deletions(-)

diff --git a/client.go b/client.go
index 36f980bf..b237612b 100644
--- a/client.go
+++ b/client.go
@@ -1467,13 +1467,7 @@ func (cli *Client) State(ctx context.Context, roomID id.RoomID) (stateMap RoomSt
 
 // GetMediaConfig fetches the configuration of the content repository, such as upload limitations.
 func (cli *Client) GetMediaConfig(ctx context.Context) (resp *RespMediaConfig, err error) {
-	var u string
-	if cli.SpecVersions.Supports(FeatureAuthenticatedMedia) {
-		u = cli.BuildClientURL("v1", "media", "config")
-	} else {
-		u = cli.BuildURL(MediaURLPath{"v3", "config"})
-	}
-	_, err = cli.MakeRequest(ctx, http.MethodGet, u, nil, &resp)
+	_, err = cli.MakeRequest(ctx, http.MethodGet, cli.BuildClientURL("v1", "media", "config"), nil, &resp)
 	return
 }
 
@@ -1494,94 +1488,13 @@ func (cli *Client) UploadLink(ctx context.Context, link string) (*RespMediaUploa
 	return cli.Upload(ctx, res.Body, res.Header.Get("Content-Type"), res.ContentLength)
 }
 
-// Deprecated: unauthenticated media is deprecated as of Matrix v1.11. Use [Download] or [DownloadBytes] instead.
-func (cli *Client) GetDownloadURL(mxcURL id.ContentURI) string {
-	return cli.BuildURLWithQuery(MediaURLPath{"v3", "download", mxcURL.Homeserver, mxcURL.FileID}, map[string]string{"allow_redirect": "true"})
-}
-
-func (cli *Client) doMediaRetry(req *http.Request, cause error, retries int, backoff time.Duration) (*http.Response, error) {
-	log := zerolog.Ctx(req.Context())
-	if req.Body != nil {
-		var err error
-		if req.GetBody != nil {
-			req.Body, err = req.GetBody()
-			if err != nil {
-				log.Warn().Err(err).Msg("Failed to get new body to retry request")
-				return nil, cause
-			}
-		} else if bodySeeker, ok := req.Body.(io.ReadSeeker); ok {
-			_, err = bodySeeker.Seek(0, io.SeekStart)
-			if err != nil {
-				log.Warn().Err(err).Msg("Failed to seek to beginning of request body")
-				return nil, cause
-			}
-		} else {
-			log.Warn().Msg("Failed to get new body to retry request: GetBody is nil and Body is not an io.ReadSeeker")
-			return nil, cause
-		}
-	}
-	log.Warn().Err(cause).
-		Int("retry_in_seconds", int(backoff.Seconds())).
-		Msg("Request failed, retrying")
-	time.Sleep(backoff)
-	return cli.doMediaRequest(req, retries-1, backoff*2)
-}
-
-func (cli *Client) doMediaRequest(req *http.Request, retries int, backoff time.Duration) (*http.Response, error) {
-	cli.RequestStart(req)
-	startTime := time.Now()
-	res, err := cli.Client.Do(req)
-	duration := time.Now().Sub(startTime)
-	if err != nil {
-		if retries > 0 {
-			return cli.doMediaRetry(req, err, retries, backoff)
-		}
-		err = HTTPError{
-			Request:  req,
-			Response: res,
-
-			Message:      "request error",
-			WrappedError: err,
-		}
-		cli.LogRequestDone(req, res, err, nil, 0, duration)
-		return nil, err
-	}
-
-	if retries > 0 && retryafter.Should(res.StatusCode, !cli.IgnoreRateLimit) {
-		backoff = retryafter.Parse(res.Header.Get("Retry-After"), backoff)
-		return cli.doMediaRetry(req, fmt.Errorf("HTTP %d", res.StatusCode), retries, backoff)
-	}
-
-	if res.StatusCode < 200 || res.StatusCode >= 300 {
-		var body []byte
-		body, err = ParseErrorResponse(req, res)
-		cli.LogRequestDone(req, res, err, nil, len(body), duration)
-	} else {
-		cli.LogRequestDone(req, res, nil, nil, -1, duration)
-	}
-	return res, err
-}
-
 func (cli *Client) Download(ctx context.Context, mxcURL id.ContentURI) (*http.Response, error) {
-	ctxLog := zerolog.Ctx(ctx)
-	if ctxLog.GetLevel() == zerolog.Disabled || ctxLog == zerolog.DefaultContextLogger {
-		ctx = cli.Log.WithContext(ctx)
-	}
-	if cli.SpecVersions.Supports(FeatureAuthenticatedMedia) {
-		_, resp, err := cli.MakeFullRequestWithResp(ctx, FullRequest{
-			Method:           http.MethodGet,
-			URL:              cli.BuildClientURL("v1", "media", "download", mxcURL.Homeserver, mxcURL.FileID),
-			DontReadResponse: true,
-		})
-		return resp, err
-	} else {
-		req, err := http.NewRequestWithContext(ctx, http.MethodGet, cli.GetDownloadURL(mxcURL), nil)
-		if err != nil {
-			return nil, err
-		}
-		req.Header.Set("User-Agent", cli.UserAgent+" (media downloader)")
-		return cli.doMediaRequest(req, cli.DefaultHTTPRetries, 4*time.Second)
-	}
+	_, resp, err := cli.MakeFullRequestWithResp(ctx, FullRequest{
+		Method:           http.MethodGet,
+		URL:              cli.BuildClientURL("v1", "media", "download", mxcURL.Homeserver, mxcURL.FileID),
+		DontReadResponse: true,
+	})
+	return resp, err
 }
 
 func (cli *Client) DownloadBytes(ctx context.Context, mxcURL id.ContentURI) ([]byte, error) {
@@ -1789,13 +1702,7 @@ func (cli *Client) UploadMedia(ctx context.Context, data ReqUploadMedia) (*RespM
 //
 // See https://spec.matrix.org/v1.2/client-server-api/#get_matrixmediav3preview_url
 func (cli *Client) GetURLPreview(ctx context.Context, url string) (*RespPreviewURL, error) {
-	var urlPath PrefixableURLPath
-	if cli.SpecVersions.Supports(FeatureAuthenticatedMedia) {
-		urlPath = ClientURLPath{"v1", "media", "preview_url"}
-	} else {
-		urlPath = MediaURLPath{"v3", "preview_url"}
-	}
-	reqURL := cli.BuildURLWithQuery(urlPath, map[string]string{
+	reqURL := cli.BuildURLWithQuery(ClientURLPath{"v1", "media", "preview_url"}, map[string]string{
 		"url": url,
 	})
 	var output RespPreviewURL

From 96e68fb485d2a2654e8d585046706245aac3215e Mon Sep 17 00:00:00 2001
From: Tulir Asokan <tulir@maunium.net>
Date: Fri, 13 Sep 2024 12:16:47 +0300
Subject: [PATCH 09/10] dependencies: update

---
 go.mod | 12 +++++++-----
 go.sum | 16 ++++++++--------
 2 files changed, 15 insertions(+), 13 deletions(-)

diff --git a/go.mod b/go.mod
index 78d1b8c4..f1518cc0 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,8 @@
 module maunium.net/go/mautrix
 
-go 1.22
+go 1.22.0
+
+toolchain go1.23.1
 
 require (
 	filippo.io/edwards25519 v1.1.0
@@ -16,11 +18,11 @@ require (
 	github.com/tidwall/gjson v1.17.3
 	github.com/tidwall/sjson v1.2.5
 	github.com/yuin/goldmark v1.7.4
-	go.mau.fi/util v0.7.1-0.20240904173517-ca3b3fe376c2
+	go.mau.fi/util v0.7.1-0.20240913091524-7617daa66719
 	go.mau.fi/zeroconfig v0.1.3
-	golang.org/x/crypto v0.26.0
-	golang.org/x/exp v0.0.0-20240823005443-9b4947da3948
-	golang.org/x/net v0.28.0
+	golang.org/x/crypto v0.27.0
+	golang.org/x/exp v0.0.0-20240909161429-701f63a606c0
+	golang.org/x/net v0.29.0
 	golang.org/x/sync v0.8.0
 	gopkg.in/yaml.v3 v3.0.1
 	maunium.net/go/mauflag v1.0.0
diff --git a/go.sum b/go.sum
index 0f1a0558..6aad56c7 100644
--- a/go.sum
+++ b/go.sum
@@ -51,16 +51,16 @@ github.com/tidwall/sjson v1.2.5 h1:kLy8mja+1c9jlljvWTlSazM7cKDRfJuR/bOJhcY5NcY=
 github.com/tidwall/sjson v1.2.5/go.mod h1:Fvgq9kS/6ociJEDnK0Fk1cpYF4FIW6ZF7LAe+6jwd28=
 github.com/yuin/goldmark v1.7.4 h1:BDXOHExt+A7gwPCJgPIIq7ENvceR7we7rOS9TNoLZeg=
 github.com/yuin/goldmark v1.7.4/go.mod h1:uzxRWxtg69N339t3louHJ7+O03ezfj6PlliRlaOzY1E=
-go.mau.fi/util v0.7.1-0.20240904173517-ca3b3fe376c2 h1:VZQlKBbeJ7KOlYSh6BnN5uWQTY/ypn/bJv0YyEd+pXc=
-go.mau.fi/util v0.7.1-0.20240904173517-ca3b3fe376c2/go.mod h1:WgYvbt9rVmoFeajP97NunQU7AjgvTPiNExN3oTHeePs=
+go.mau.fi/util v0.7.1-0.20240913091524-7617daa66719 h1:sg1P/f4RHY1JuAwsPOjTCsZr8ROzR9bRTtnvvBu42d4=
+go.mau.fi/util v0.7.1-0.20240913091524-7617daa66719/go.mod h1:1Ixb8HWoVbl3rT6nAX6nV4iMkzn7KU/KXwE0Rn5RmsQ=
 go.mau.fi/zeroconfig v0.1.3 h1:As9wYDKmktjmNZW5i1vn8zvJlmGKHeVxHVIBMXsm4kM=
 go.mau.fi/zeroconfig v0.1.3/go.mod h1:NcSJkf180JT+1IId76PcMuLTNa1CzsFFZ0nBygIQM70=
-golang.org/x/crypto v0.26.0 h1:RrRspgV4mU+YwB4FYnuBoKsUapNIL5cohGAmSH3azsw=
-golang.org/x/crypto v0.26.0/go.mod h1:GY7jblb9wI+FOo5y8/S2oY4zWP07AkOJ4+jxCqdqn54=
-golang.org/x/exp v0.0.0-20240823005443-9b4947da3948 h1:kx6Ds3MlpiUHKj7syVnbp57++8WpuKPcR5yjLBjvLEA=
-golang.org/x/exp v0.0.0-20240823005443-9b4947da3948/go.mod h1:akd2r19cwCdwSwWeIdzYQGa/EZZyqcOdwWiwj5L5eKQ=
-golang.org/x/net v0.28.0 h1:a9JDOJc5GMUJ0+UDqmLT86WiEy7iWyIhz8gz8E4e5hE=
-golang.org/x/net v0.28.0/go.mod h1:yqtgsTWOOnlGLG9GFRrK3++bGOUEkNBoHZc8MEDWPNg=
+golang.org/x/crypto v0.27.0 h1:GXm2NjJrPaiv/h1tb2UH8QfgC/hOf/+z0p6PT8o1w7A=
+golang.org/x/crypto v0.27.0/go.mod h1:1Xngt8kV6Dvbssa53Ziq6Eqn0HqbZi5Z6R0ZpwQzt70=
+golang.org/x/exp v0.0.0-20240909161429-701f63a606c0 h1:e66Fs6Z+fZTbFBAxKfP3PALWBtpfqks2bwGcexMxgtk=
+golang.org/x/exp v0.0.0-20240909161429-701f63a606c0/go.mod h1:2TbTHSBQa924w8M6Xs1QcRcFwyucIwBGpK1p2f1YFFY=
+golang.org/x/net v0.29.0 h1:5ORfpBpCs4HzDYoodCDBbwHzdR5UrLBZ3sOnUJmFoHo=
+golang.org/x/net v0.29.0/go.mod h1:gLkgy8jTGERgjzMic6DS9+SP0ajcu6Xu3Orq/SpETg0=
 golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ=
 golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk=
 golang.org/x/sys v0.0.0-20220310020820-b874c991c1a5/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=

From e12ecbe82d36fc985074b1996568264991140e23 Mon Sep 17 00:00:00 2001
From: Tulir Asokan <tulir@maunium.net>
Date: Fri, 13 Sep 2024 12:55:32 +0300
Subject: [PATCH 10/10] bridgev2/matrix: allow key sharing for bridge admins

---
 bridgev2/matrix/crypto.go | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/bridgev2/matrix/crypto.go b/bridgev2/matrix/crypto.go
index 7383ddc7..04654ff5 100644
--- a/bridgev2/matrix/crypto.go
+++ b/bridgev2/matrix/crypto.go
@@ -217,11 +217,12 @@ func (helper *CryptoHelper) allowKeyShare(ctx context.Context, device *id.Device
 			zerolog.Ctx(ctx).Err(err).Msg("Failed to get user to handle key request")
 			return &crypto.KeyShareRejectNoResponse
 		} else if user == nil {
-			// TODO
+			zerolog.Ctx(ctx).Debug().Msg("Couldn't find user to handle key request")
 			return &crypto.KeyShareRejectNoResponse
-		} else if true {
-			// TODO admin check and is in room check
-			return &crypto.KeyShareRejection{Code: event.RoomKeyWithheldUnauthorized, Reason: "Key sharing is not yet implemented in bridgev2"}
+		} else if !user.Permissions.Admin {
+			zerolog.Ctx(ctx).Debug().Msg("Rejecting key request: user is not admin")
+			// TODO is in room check?
+			return &crypto.KeyShareRejection{Code: event.RoomKeyWithheldUnauthorized, Reason: "Key sharing for non-admins is not yet implemented"}
 		}
 		zerolog.Ctx(ctx).Debug().Msg("Accepting key request")
 		return nil