From fff18454b1d3b99aa7f079e8752a601849a17de5 Mon Sep 17 00:00:00 2001
From: Matthew Hodgson <matthew@matrix.org>
Date: Sat, 12 Sep 2020 01:23:32 +0100
Subject: [PATCH] todo for authenticating state returned by /peek

---
 federationsender/internal/perform.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/federationsender/internal/perform.go b/federationsender/internal/perform.go
index 14df6c861..a31b1cf34 100644
--- a/federationsender/internal/perform.go
+++ b/federationsender/internal/perform.go
@@ -334,6 +334,9 @@ func (r *FederationSenderInternalAPI) performPeekUsingServer(
 		return fmt.Errorf("respPeek.RoomVersion.EventFormat: %w", err)
 	}
 
+	// TODO: authenticate the state returned (check its auth events etc)
+	// the equivalent of CheckSendJoinResponse()
+
 	// If we've got this far, the remote server is peeking.
 	if renewing {
 		if err = r.db.RenewRemotePeek(ctx, serverName, roomID, peekID, respPeek.RenewalInterval); err != nil {