Merge pull request #195 from etkecc/add-account-suspention

Add support for Account Suspension (MSC3823)
update readme
2024-12-11 18:51:39 +02:00 · 2024-12-11 18:51:20 +02:00 · 2024-12-11 18:46:04 +02:00 · 2024-12-11 18:28:04 +02:00 · 2024-12-11 18:27:41 +02:00 · 2024-12-11 18:24:08 +02:00
59 changed files with 2188 additions and 1376 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,16 +4,16 @@ updates:
    directory: "/"
    schedule:
      interval: "weekly"
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 30

  - package-ecosystem: "docker"
    directory: "/"
    schedule:
      interval: "weekly"
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 30

  - package-ecosystem: "github-actions"
    directory: "/"
    schedule:
      interval: "weekly"
-    open-pull-requests-limit: 10
+    open-pull-requests-limit: 30
--- a/README.md
+++ b/README.md
@@ -21,6 +21,7 @@

 * [Fork differences](#fork-differences)
  * [Changes](#changes)
+    * [exclusive for etke.cc customers](#exclusive-for-etkecc-customers)
  * [Development](#development)
  * [Support](#support)
 * [Configuration](#configuration)
@@ -58,6 +59,8 @@ The full list is described below in the [Changes](#changes) section.

 ### Changes

+_the list will be updated as new changes are added_
+
 The following changes are already implemented:

 * 🛑 [Prevent admins from deleting themselves](https://github.com/etkecc/synapse-admin/pull/1)
@@ -97,9 +100,20 @@ The following changes are already implemented:
 * 🛑 [Prevent accidental user overwrites](https://github.com/etkecc/synapse-admin/pull/139)
 * 🔍 [Allow providing login form details via GET params](https://github.com/etkecc/synapse-admin/pull/140)
 * 🎨 [Add preferred theme colors to login page and footer](https://github.com/etkecc/synapse-admin/pull/155)
-* 🔰 [Add "Assign Admin" button to the rooms](https://github.com/etkecc/synapse-admin/pull/156)
+* 🛡️ [Add "Assign Admin" button to the rooms](https://github.com/etkecc/synapse-admin/pull/156)
+* 🖼️ [Add rooms' avatars](https://github.com/etkecc/synapse-admin/pull/158)
+* 🏷️ [User Badges](https://github.com/etkecc/synapse-admin/pull/160)
+* 🔄 [Allow prefilling any fields on the login form via GET params](https://github.com/etkecc/synapse-admin/pull/181)
+* 🎞️ [Add "Media" tab for rooms](https://github.com/etkecc/synapse-admin/pull/196)
+* 📞 [Support E.164-based Matrix IDs (MSC4009)](https://github.com/etkecc/synapse-admin/pull/214)
+* 🛑 [Add support for Account Suspension (MSC3823)](https://github.com/etkecc/synapse-admin/pull/195)

-_the list will be updated as new changes are added_
+#### exclusive for [etke.cc](https://etke.cc) customers
+
+We at [etke.cc](https://etke.cc) attempting to develop everything open-source, but some things are too specific to be used by anyone else.
+The following list contains such features - they are only available for [etke.cc](https://etke.cc) customers.
+
+* 📊 [Server Status indicator and page](https://github.com/etkecc/synapse-admin/pull/182)

 ### Development

@@ -109,7 +123,8 @@ _the list will be updated as new changes are added_
 This command initializes the development environment (local Synapse server and Postgres DB),
 and launches the app in a dev mode at `http://localhost:5173`

-After that open `http://localhost:5173` in your browser, login using the following credentials:
+After that open [http://localhost:5173](http://localhost:5173?username=admin&password=admin&server=http://localhost:8008) in your browser,
+login using the following credentials:

 * Login: admin
 * Password: admin
@@ -146,13 +161,9 @@ services:

 ### Prefilling login form

-You can prefill `username` and `homeserver` fields on the login page using GET parameters, example:
+You can prefill all fields on the login page using GET parameters.

-```
-https://matrix.example.com/synapse-admin/?username=admin&server=matrix.example.com
-```
-
-That way `username` and `homeserver` fields will be pre-filled with `admin` and `https://matrix.example.com` respectively.
+[Documentation](./docs/prefill-login-form.md)


 ### Restricting available homeserver
--- a/docker-compose-dev.yml
+++ b/docker-compose-dev.yml
@@ -1,6 +1,6 @@
 services:
  synapse:
-    image: ghcr.io/element-hq/synapse:latest
+    image: ghcr.io/element-hq/synapse:develop
    entrypoint: python
    command: "-m synapse.app.homeserver -c /config/homeserver.yaml"
    ports:
--- a/docs/README.md
+++ b/docs/README.md
@@ -0,0 +1,39 @@
+# Documentation
+
+Synapse Admin documentation is under construction right now, so PRs are greatly appreciated!
+
+Table of contents:
+<!-- vim-markdown-toc GFM -->
+
+* [Configuration](#configuration)
+* [Features](#features)
+* [Deployment](#deployment)
+
+<!-- vim-markdown-toc -->
+
+## Configuration
+
+[Full configuration documentation](./config.md)
+
+Specific configuration options:
+
+* [Restricting available homeserver](./restrict-hs.md)
+* [System / Appservice-managed Users](./system-users.md)
+* [Custom Menu Items](./custom-menu.md)
+
+## Features
+
+* [User Badges](./user-badges.md)
+* [Prefilling the Login Form](./prefill-login-form.md)
+
+for [etke.cc](https://etke.cc) customers only:
+
+> **Note:** The following features are only available for etke.cc customers. Due to specifics of the implementation,
+they are not available for any other Synapse Admin deployments.
+
+* [Server Status icon](../src/components/etke.cc/README.md#server-status-icon)
+* [Server Status page](../src/components/etke.cc/README.md#server-status-page)
+
+## Deployment
+
+* [Serving Synapse Admin behind a reverse proxy](./reverse-proxy.md)
--- a/docs/config.md
+++ b/docs/config.md
@@ -35,7 +35,7 @@ In this case, you could provide the configuration in the `/.well-known/matrix/cl
 * `menu` - add custom menu items to the main menu (sidebar) by providing a `menu` array in the config.
  Each `menu` item can contain the following fields:
  * `label` (required): The text to display in the menu.
-  * `icon` (optional): The icon to display next to the label, one of the [../src/components/icons.ts] icons, otherwise a default icon will be used.
+  * `icon` (optional): The icon to display next to the label, one of the [src/utils/icons.ts](../src/utils/icons.ts) icons, otherwise a default icon will be used.
  * `url` (required): The URL to navigate to when the menu item is clicked.
  [More details](custom-menu.md)

--- a/docs/custom-menu.md
+++ b/docs/custom-menu.md
@@ -10,7 +10,7 @@ The examples below contain the configuration settings to add a link to the [Syna
 Each `menu` item can contain the following fields:

 * `label` (required): The text to display in the menu.
-* `icon` (optional): The icon to display next to the label, one of the [../src/components/icons.ts] icons, otherwise a
+* `icon` (optional): The icon to display next to the label, one of the [src/utils/icons.ts](../src/utils/icons.ts) icons, otherwise a
 default icon will be used.
 * `url` (required): The URL to navigate to when the menu item is clicked.

--- a/docs/prefill-login-form.md
+++ b/docs/prefill-login-form.md
@@ -0,0 +1,48 @@
+# Prefilling the Login Form
+
+In some cases you may wish to prefill/preset the login form fields when sharing a link to a Synapse Admin instance.
+This can be done by adding the following query parameters to the URL:
+
+* `username` - The username to prefill in the username field.
+* `server` - The server to prefill in the homeserver url field.
+
+The following query params will work only if the Synapse Admin is loaded from `localhost` or `127.0.0.1`:
+
+* `password` - The password to prefill in the password field (credentials auth). **NEVER** use this in production.
+* `accessToken` - The access token to prefill in the access token field (access token auth). **NEVER** use this in production.
+
+> **WARNING**: Never use the `password` or `accessToken` query parameters in production as they can be easily extracted
+from the URL. These are only meant for development purposes and local environments.
+
+
+## Examples
+
+### Production
+
+```bash
+https://admin.etke.cc?username=admin&server=https://matrix.example.com
+```
+
+This will open `Credentials` (username/password) login form with the username field prefilled with `admin` and the
+Homeserver URL field prefilled with `https://matrix.example.com`.
+
+### Development and Local environments
+
+**With Password**
+
+```bash
+http://localhost:8080?username=admin&server=https://matrix.example.com&password=secret
+```
+
+This will open `Credentials` (username/password) login form with the username field prefilled with `admin`, the
+Homeserver URL field prefilled with `https://matrix.example.com` and the password field prefilled with `secret`.
+
+
+**With Access Token**
+
+```bash
+http://localhost:8080?server=https://matrix.example.com&accessToken=secret
+```
+
+This will open `Access Token` login form with the Homeserver URL field prefilled with `https://matrix.example.com` and
+the access token field prefilled with `secret`.
--- a/docs/user-badges.md
+++ b/docs/user-badges.md
@@ -0,0 +1,36 @@
+# User Badges
+
+To help with identifying users with certain roles or permissions, we have implemented a badge system.
+These badges are displayed on the user's avatar and have a handy tooltip that explains what the badge means.
+
+## Available Badges
+
+### 🧙‍ You
+
+This badge is displayed on your user's avatar.
+Tooltip for this badge will contain additional information, e.g.: `You (Admin)`.
+
+### 👑 Admin
+
+This badge is displayed on homeserver admins' avatars.
+Tooltip for this badge is `Admin`.
+
+### 🛡️ Appservice/System-managed
+
+This badge is displayed on users that are managed by an appservices (or system), [more details](./system-users.md).
+Tooltip for this badge will contain additional information, e.g.: `System-managed (Bot)`.
+
+### 🤖 Bot
+
+This badge is displayed on bots' avatars (users with the `user_type` set to `bot`).
+Tooltip for this badge is `Bot`.
+
+### 📞 Support
+
+This badge is displayed on users that are part of the support team (users with the `user_type` set to `support`).
+Tooltip for this badge is `Support`.
+
+### 👤 Regular User
+
+This badge is displayed on regular users' avatars.
+Tooltip for this badge is `Regular User`.
--- a/package.json
+++ b/package.json
@@ -14,17 +14,17 @@
    "@eslint/js": "^9.13.0",
    "@testing-library/dom": "^10.0.0",
    "@testing-library/jest-dom": "^6.6.3",
-    "@testing-library/react": "^16.0.0",
+    "@testing-library/react": "^16.1.0",
    "@testing-library/user-event": "^14.5.2",
    "@types/jest": "^29.5.14",
    "@types/lodash": "^4.17.13",
-    "@types/node": "^22.8.7",
+    "@types/node": "^22.10.1",
    "@types/papaparse": "^5.3.15",
    "@types/react": "^18.3.12",
    "@typescript-eslint/eslint-plugin": "^8.14.0",
-    "@typescript-eslint/parser": "^8.13.0",
-    "@vitejs/plugin-react": "^4.3.3",
-    "eslint": "^9.15.0",
+    "@typescript-eslint/parser": "^8.15.0",
+    "@vitejs/plugin-react": "^4.3.4",
+    "eslint": "^9.16.0",
    "eslint-config-prettier": "^9.1.0",
    "eslint-plugin-import": "^2.31.0",
    "eslint-plugin-jsx-a11y": "^6.10.2",
@@ -34,38 +34,38 @@
    "jest": "^29.7.0",
    "jest-environment-jsdom": "^29.7.0",
    "jest-fetch-mock": "^3.0.3",
-    "prettier": "^3.3.3",
+    "prettier": "^3.4.2",
    "react-test-renderer": "^18.3.1",
    "ts-jest": "^29.2.5",
    "ts-node": "^10.9.2",
-    "typescript": "^5.6.3",
-    "typescript-eslint": "^8.13.0",
-    "vite": "^5.4.11",
-    "vite-plugin-version-mark": "^0.1.2"
+    "typescript": "^5.7.2",
+    "typescript-eslint": "^8.17.0",
+    "vite": "^6.0.3",
+    "vite-plugin-version-mark": "^0.1.4"
  },
  "dependencies": {
-    "@emotion/react": "^11.13.0",
-    "@emotion/styled": "^11.13.0",
+    "@emotion/react": "^11.13.5",
+    "@emotion/styled": "^11.13.5",
    "@haleos/ra-language-german": "^1.0.0",
    "@haxqer/ra-language-chinese": "^4.16.2",
-    "@mui/icons-material": "^6.1.7",
-    "@mui/material": "^6.1.7",
-    "@mui/utils": "^5.16.6",
-    "@tanstack/react-query": "^5.60.5",
+    "@mui/icons-material": "^6.1.9",
+    "@mui/material": "^6.1.10",
+    "@mui/utils": "^5.16.8",
+    "@tanstack/react-query": "^5.62.3",
    "history": "^5.3.0",
    "lodash": "^4.17.21",
    "papaparse": "^5.4.1",
-    "ra-core": "^5.3.4",
+    "ra-core": "^5.4.1",
    "ra-i18n-polyglot": "^5.3.4",
    "ra-language-english": "^5.3.4",
-    "ra-language-farsi": "^5.0.0",
-    "ra-language-french": "^5.3.4",
+    "ra-language-farsi": "^5.1.0",
+    "ra-language-french": "^5.4.1",
    "ra-language-italian": "^3.13.1",
    "ra-language-russian": "^4.14.2",
    "react": "^18.3.1",
-    "react-admin": "^5.3.3",
+    "react-admin": "^5.4.1",
    "react-dom": "^18.3.1",
-    "react-hook-form": "^7.53.1",
+    "react-hook-form": "^7.54.0",
    "react-is": "^18.3.1",
    "react-router": "^6.26.2",
    "react-router-dom": "^6.28.0"
--- a/screenshots/etke.cc/server-status/indicator.webp
+++ b/screenshots/etke.cc/server-status/indicator.webp
--- a/screenshots/etke.cc/server-status/page.webp
+++ b/screenshots/etke.cc/server-status/page.webp
--- a/src/App.tsx
+++ b/src/App.tsx
@@ -2,10 +2,11 @@ import { merge } from "lodash";
 import polyglotI18nProvider from "ra-i18n-polyglot";

 import { Admin, CustomRoutes, Resource, resolveBrowserLocale } from "react-admin";
+
 import { Route } from "react-router-dom";

-import { AdminLayout } from "./components/AdminLayout";
-import { ImportFeature } from "./components/ImportFeature";
+import AdminLayout from "./components/AdminLayout";
+import UserImport from "./components/UserImport";
 import germanMessages from "./i18n/de";
 import englishMessages from "./i18n/en";
 import frenchMessages from "./i18n/fr";
@@ -23,6 +24,7 @@ import users from "./resources/users";
 import authProvider from "./synapse/authProvider";
 import dataProvider from "./synapse/dataProvider";
 import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import ServerStatusPage from "./components/etke.cc/ServerStatusPage";

 // TODO: Can we use lazy loading together with browser locale?
 const messages = {
@@ -49,7 +51,7 @@ const i18nProvider = polyglotI18nProvider(

 const queryClient = new QueryClient();

-const App = () => (
+export const App = () => (
  <QueryClientProvider client={queryClient}>
    <Admin
      disableTelemetry
@@ -61,7 +63,8 @@ const App = () => (
      i18nProvider={i18nProvider}
    >
      <CustomRoutes>
-        <Route path="/import_users" element={<ImportFeature />} />
+        <Route path="/import_users" element={<UserImport />} />
+        <Route path="/server_status" element={<ServerStatusPage />} />
      </CustomRoutes>
      <Resource {...users} />
      <Resource {...rooms} />
--- a/src/AppContext.tsx
+++ b/src/AppContext.tsx
@@ -1,6 +1,7 @@
 import { createContext, useContext } from "react";
-import { Config } from "./components/config";

-export const AppContext = createContext({});
+import { Config } from "./utils/config";

-export const useAppContext = () => useContext(AppContext) as Config;
+export const AppContext = createContext<Config>({} as Config);
+
+export const useAppContext = () => useContext(AppContext) as Config;
--- a/src/components/AdminLayout.tsx
+++ b/src/components/AdminLayout.tsx
@@ -1,9 +1,10 @@
 import { CheckForApplicationUpdate, AppBar, TitlePortal, InspectorButton, Confirm, Layout, Logout, Menu, useLogout, UserMenu } from "react-admin";
 import { LoginMethod } from "../pages/LoginPage";
 import { useEffect, useState, Suspense } from "react";
-import { Icons, DefaultIcon } from "./icons";
-import { ClearConfig } from "./config";
+import { Icons, DefaultIcon } from "../utils/icons";
+import { MenuItem, GetConfig, ClearConfig } from "../utils/config";
 import Footer from "./Footer";
+import ServerStatusBadge from "./etke.cc/ServerStatusBadge";

 const AdminUserMenu = () => {
  const [open, setOpen] = useState(false);
@@ -48,28 +49,19 @@ const AdminUserMenu = () => {
 const AdminAppBar = () => {
  return (<AppBar userMenu={<AdminUserMenu />}>
    <TitlePortal />
+    <ServerStatusBadge />
    <InspectorButton />
  </AppBar>);
 };

 const AdminMenu = (props) => {
-  const [menu, setMenu] = useState([]);
-
-  useEffect(() => {
-    const menuConfig = localStorage.getItem('menu');
-    if (menuConfig) {
-      try {
-        setMenu(JSON.parse(menuConfig));
-      } catch (e) {
-        console.error('Error parsing menu configuration', e);
-      }
-    }
-  }, []);
+  const [menu, setMenu] = useState([] as MenuItem[]);
+  useEffect(() => setMenu(GetConfig().menu), []);

  return (
    <Menu {...props}>
      <Menu.ResourceItems />
-      {menu.map((item, index) => {
+      {menu && menu.map((item, index) => {
        const { url, icon, label } = item;
        const IconComponent = Icons[icon] as React.ComponentType<any> | undefined;

@@ -105,4 +97,6 @@ export const AdminLayout = ({ children }) => {
    </Layout>
    <Footer />
  </>
-};
+};
+
+export default AdminLayout;
--- a/src/components/AvatarField.tsx
+++ b/src/components/AvatarField.tsx
@@ -1,8 +1,9 @@
 import { get } from "lodash";
-import { Avatar, AvatarProps } from "@mui/material";
-import { FieldProps, useRecordContext } from "react-admin";
+import { Avatar, AvatarProps, Badge, Tooltip } from "@mui/material";
+import { FieldProps, useRecordContext, useTranslate } from "react-admin";
 import { useState, useEffect, useCallback } from "react";
 import { fetchAuthenticatedMedia } from "../utils/fetchMedia";
+import { isMXID, isASManaged } from "../utils/mxid";

 const AvatarField = ({ source, ...rest }: AvatarProps & FieldProps) => {
  const { alt, classes, sizes, sx, variant } = rest;
@@ -31,7 +32,76 @@ const AvatarField = ({ source, ...rest }: AvatarProps & FieldProps) => {
    };
  }, [mxcURL, fetchAvatar]);

-  return <Avatar alt={alt} classes={classes} sizes={sizes} src={src} sx={sx} variant={variant} />;
+  // a hacky way to handle both users and rooms,
+  // where users have an ID, may have a name, and may have a displayname
+  // and rooms have an ID and may have a name
+  let letter = "";
+  if (record?.id) {
+    letter = record.id[0].toUpperCase();
+  }
+  if (record?.name) {
+    letter = record.name[0].toUpperCase();
+  }
+  if (record?.displayname) {
+    letter = record.displayname[0].toUpperCase();
+  }
+
+  // hacky way to determine the user type
+  let badge = "";
+  let tooltip = "";
+  if (isMXID(record?.id)) {
+    const translate = useTranslate();
+    switch (record?.user_type) {
+      case "bot":
+        badge = "🤖";
+        tooltip = translate("resources.users.badge.bot");
+        break;
+      case "support":
+        badge = "📞";
+        tooltip = translate("resources.users.badge.support");
+        break;
+      default:
+        badge = "👤";
+        tooltip = translate("resources.users.badge.regular");
+        break;
+    }
+    if (record?.admin) {
+      badge = "👑";
+      tooltip = translate("resources.users.badge.admin");
+    }
+    if (isASManaged(record?.name)) {
+      badge = "🛡️";
+      tooltip = `${translate("resources.users.badge.system_managed")} (${tooltip})`;
+    }
+    if (localStorage.getItem("user_id") === record?.id) {
+      badge = "🧙‍";
+      tooltip = `${translate("resources.users.badge.you")} (${tooltip})`;
+    }
+  }
+
+  // if there is a badge, wrap the Avatar in a Badge and a Tooltip
+  if (badge) {
+    return (
+      <Tooltip title={tooltip}>
+        <Badge
+          badgeContent={badge}
+          overlap="circular"
+          sx={{ "& .MuiBadge-badge": { width: "10px" } }} // we deliberately set a very small width here, to make the badge actually circular
+          anchorOrigin={{
+            vertical: "bottom",
+            horizontal: "right",
+          }}
+        >
+          <Avatar alt={alt} classes={classes} sizes={sizes} src={src} sx={sx} variant={variant}>
+            {letter}
+          </Avatar>
+        </Badge>
+      </Tooltip>);
+  }
+
+  return (<Avatar alt={alt} classes={classes} sizes={sizes} src={src} sx={sx} variant={variant}>
+          {letter}
+          </Avatar>);
 };

 export default AvatarField;
--- a/src/components/DeviceRemoveButton.tsx
+++ b/src/components/DeviceRemoveButton.tsx
@@ -1,5 +1,5 @@
 import { DeleteWithConfirmButton, DeleteWithConfirmButtonProps, useRecordContext } from "react-admin";
-import { isASManaged } from "./mxid";
+import { isASManaged } from "../utils/mxid";

 export const DeviceRemoveButton = (props: DeleteWithConfirmButtonProps) => {
  const record = useRecordContext();
@@ -26,3 +26,5 @@ export const DeviceRemoveButton = (props: DeleteWithConfirmButtonProps) => {
    />
  );
 };
+
+export default DeviceRemoveButton;
--- a/src/components/ExperimentalFeatures.tsx
+++ b/src/components/ExperimentalFeatures.tsx
@@ -93,3 +93,5 @@ export const ExperimentalFeaturesList = () => {
    </Stack>
  </>
 }
+
+export default ExperimentalFeaturesList;
--- a/src/components/ImportFeature.tsx
+++ b/src/components/ImportFeature.tsx
@@ -15,7 +15,8 @@ import {
 import { DataProvider, useTranslate } from "ra-core";
 import { useDataProvider, useNotify, RaRecord, Title } from "react-admin";

-import { generateRandomMxId, generateRandomPassword, returnMXID } from "../synapse/synapse";
+import { generateRandomMXID, returnMXID } from "../utils/mxid";
+import { generateRandomPassword } from "../utils/password";

 const LOGGING = true;

@@ -274,7 +275,7 @@ const FilePicker = () => {
        // No need to do a bunch of cryptographic random number getting if
        // we are using neither a generated password nor a generated user id.
        if (useridMode === "ignore" || userRecord.id === undefined || userRecord.id === "") {
-          userRecord.id = generateRandomMxId();
+          userRecord.id = generateRandomMXID();
        }
        if (passwordMode === false || entry.password === undefined || entry.password === "") {
          userRecord.password = generateRandomPassword();
@@ -325,7 +326,7 @@ const FilePicker = () => {
                );
              } else {
                const newRecordData = Object.assign({}, recordData, {
-                  id: generateRandomMxId(),
+                  id: generateRandomMXID(),
                });
                retries++;
                if (retries > 512) {
@@ -570,4 +571,5 @@ const FilePicker = () => {
  return [<Title defaultTitle={translate("import_users.title")} />, cardContainer];
 };

-export const ImportFeature = FilePicker;
+export const UserImport = FilePicker;
+export default UserImport;
--- a/src/components/UserRateLimits.tsx
+++ b/src/components/UserRateLimits.tsx
@@ -46,7 +46,7 @@ const RateLimitRow = ({ limit, value, updateRateLimit }: { limit: string, value:
  </Stack>
 }

-export const UserRateLimits = () => {
+const UserRateLimits = () => {
  const translate = useTranslate();
  const notify = useNotify();
  const record = useRecordContext();
@@ -93,3 +93,5 @@ export const UserRateLimits = () => {
    </Stack>
  </>
 };
+
+export default UserRateLimits;
--- a/src/components/config.ts
+++ b/src/components/config.ts
@@ -1,87 +0,0 @@
-import storage from "../storage";
-
-export interface Config {
-  restrictBaseUrl: string | string[];
-  asManagedUsers: string[];
-  supportURL: string;
-  menu: MenuItem[];
-}
-
-export interface MenuItem {
-  label: string;
-  icon: string;
-  url: string;
-}
-
-export const WellKnownKey = "cc.etke.synapse-admin";
-
-export const LoadConfig = (context: Config): Config => {
-  if (context.restrictBaseUrl) {
-    storage.setItem("restrict_base_url", JSON.stringify(context.restrictBaseUrl));
-  }
-
-  if (context.asManagedUsers) {
-    storage.setItem("as_managed_users", JSON.stringify(context.asManagedUsers));
-  }
-
-  let menu: MenuItem[] = [];
-  if (context.menu) {
-    menu = context.menu;
-  }
-  if (context.supportURL) {
-    const migratedSupportURL = {
-      label: "Contact support",
-      icon: "SupportAgent",
-      url: context.supportURL,
-    };
-    console.warn("supportURL config option is deprecated. Please, use the menu option instead. Automatically migrated to the new menu option:", migratedSupportURL);
-    menu.push(migratedSupportURL as MenuItem);
-  }
-  if (menu.length > 0) {
-    storage.setItem("menu", JSON.stringify(menu));
-  }
-
-  // below we try to calculate "final" config, which will contain values from context and already set values in storage
-  // because LoadConfig could be called multiple times to get config from different sources
-  let finalRestrictBaseUrl: string | string[] = "";
-  try {
-    finalRestrictBaseUrl = JSON.parse(storage.getItem("restrict_base_url") || "");
-    if (Array.isArray(finalRestrictBaseUrl) && finalRestrictBaseUrl.length == 1) {
-      finalRestrictBaseUrl = finalRestrictBaseUrl[0];
-    }
-  } catch (e) {}
-  let finalAsManagedUsers: string[] = [];
-  try {
-    finalAsManagedUsers = JSON.parse(storage.getItem("as_managed_users") || "");
-  } catch (e) {}
-
-  let finalMenu: MenuItem[] = [];
-  try {
-    finalMenu = JSON.parse(storage.getItem("menu") || "");
-  } catch (e) {}
-
-  return {
-    restrictBaseUrl: finalRestrictBaseUrl,
-    asManagedUsers: finalAsManagedUsers,
-    supportURL: storage.getItem("support_url") || "",
-    menu: finalMenu,
-  } as Config;
-
-}
-
-
-export const ClearConfig = () => {
-  // config.json
-  storage.removeItem("restrict_base_url");
-  storage.removeItem("as_managed_users");
-  storage.removeItem("support_url");
-  storage.removeItem("menu");
-
-  // session
-  storage.removeItem("home_server");
-  storage.removeItem("base_url");
-  storage.removeItem("user_id");
-  storage.removeItem("device_id");
-  storage.removeItem("access_token");
-  storage.removeItem("login_type");
-}
--- a/src/components/etke.cc/README.md
+++ b/src/components/etke.cc/README.md
@@ -0,0 +1,30 @@
+# etke.cc-specific components
+
+This directory contains [etke.cc](https://etke.cc)-specific components, unusable for any other purposes and/or configuration.
+
+We at [etke.cc](https://etke.cc) attempting to develop everything open-source, but some things are too specific to be used by anyone else. This directory contains such components - they are only available for [etke.cc](https://etke.cc) customers.
+
+Due to the specifics mentioned above, these components are documented here rather than in the [docs](../../../docs/README.md), plus they are not supported as part of the Synapse Admin open-source project (i.e.: no issues, no PRs, no support, no requests, etc.).
+
+## Components
+
+### Server Status icon
+
+![Server Status icon](../../../screenshots/etke.cc/server-status/indicator.webp)
+
+In the application bar the new monitoring icon is displayed that shows the current server status, and has the following color dot (and tooltip indicators):
+
+* 🟢 (green) - the server is up and running, everything is fine, no issues detected
+* 🟡 (yellow) - the server is up and running, but there is a command in progress (likely [maintenance](https://etke.cc/help/extras/scheduler/#maintenance)), so some temporary issues may occur - that's totally fine
+* 🔴 (red) - there is at least 1 issue with one of the server's components
+
+### Server Status page
+
+![Server Status Page](../../../screenshots/etke.cc/server-status/page.webp)
+
+When you click on the [Server Status icon](#server-status-icon) in the application bar, you will be redirected to the
+Server Status page. This page contains the following information:
+
+* Overall server status (up/updating/has issues)
+* Details about the currently running command (if any)
+* Details about the server's components statuses (up/down with error details and suggested actions) by categories
--- a/src/components/etke.cc/ServerStatusBadge.tsx
+++ b/src/components/etke.cc/ServerStatusBadge.tsx
@@ -0,0 +1,169 @@
+import { Avatar, Badge, Theme, Tooltip } from "@mui/material";
+import { useEffect } from "react";
+import { useAppContext } from "../../Context";
+import { Button, useDataProvider, useStore } from "react-admin";
+import { styled } from '@mui/material/styles';
+import MonitorHeartIcon from '@mui/icons-material/MonitorHeart';
+import { BadgeProps } from "@mui/material/Badge";
+import { useNavigate } from "react-router";
+import { useTheme } from "@mui/material/styles";
+import { ServerProcessResponse, ServerStatusResponse } from "../../synapse/dataProvider";
+
+interface StyledBadgeProps extends BadgeProps {
+  backgroundColor: string;
+  badgeColor: string
+  theme?: Theme;
+}
+
+const StyledBadge = styled(Badge, { shouldForwardProp: (prop) => !['badgeColor', 'backgroundColor'].includes(prop as string) })<StyledBadgeProps>
+  (({ theme, backgroundColor, badgeColor }) => ({
+    '& .MuiBadge-badge': {
+      backgroundColor: backgroundColor,
+      color: badgeColor,
+      boxShadow: `0 0 0 2px ${theme.palette.background.paper}`,
+      '&::after': {
+        position: 'absolute',
+        top: 0,
+        left: 0,
+        width: '100%',
+        height: '100%',
+        borderRadius: '50%',
+        animation: 'ripple 2.5s infinite ease-in-out',
+        border: '1px solid currentColor',
+        content: '""',
+      },
+    },
+    '@keyframes ripple': {
+      '0%': {
+        transform: 'scale(.8)',
+        opacity: 1,
+      },
+      '100%': {
+        transform: 'scale(2.4)',
+        opacity: 0,
+      },
+    },
+}));
+
+// every 5 minutes
+const SERVER_STATUS_INTERVAL_TIME = 5 * 60 * 1000;
+// every 5 seconds
+const SERVER_CURRENT_PROCCESS_INTERVAL_TIME = 5 * 1000;
+
+const useServerStatus = () => {
+  const [serverStatus, setServerStatus] = useStore<ServerStatusResponse>("serverStatus", { ok: false, success: false, host: "", results: [] });
+  const { etkeccAdmin } = useAppContext();
+  const dataProvider = useDataProvider();
+  const isOkay = serverStatus.ok;
+  const successCheck = serverStatus.success;
+
+  const checkServerStatus = async () => {
+    const serverStatus: ServerStatusResponse = await dataProvider.getServerStatus(etkeccAdmin);
+    setServerStatus({
+      ok: serverStatus.ok,
+      success: serverStatus.success,
+      host: serverStatus.host,
+      results: serverStatus.results,
+    });
+  };
+
+  useEffect(() => {
+    let serverStatusInterval: NodeJS.Timeout;
+    if (etkeccAdmin) {
+      checkServerStatus();
+      setTimeout(() => {
+        // start the interval after 10 seconds to avoid too many requests
+        serverStatusInterval = setInterval(checkServerStatus, SERVER_STATUS_INTERVAL_TIME);
+      }, 10000);
+    }  else {
+      setServerStatus({ ok: false, success: false, host: "", results: [] });
+    }
+
+    return () => {
+      if (serverStatusInterval) {
+        clearInterval(serverStatusInterval);
+      }
+    }
+  }, [etkeccAdmin]);
+
+  return { isOkay, successCheck };
+};
+
+const useCurrentServerProcess = () => {
+  const [serverProcess, setServerProcess] = useStore<ServerProcessResponse>("serverProcess", { command: "", locked_at: "" });
+  const { etkeccAdmin } = useAppContext();
+  const dataProvider = useDataProvider();
+  const { command, locked_at } = serverProcess;
+
+  const checkServerRunningProcess = async () => {
+    const serverProcess: ServerProcessResponse = await dataProvider.getServerRunningProcess(etkeccAdmin);
+    setServerProcess({
+      ...serverProcess,
+      command: serverProcess.command,
+      locked_at: serverProcess.locked_at
+    });
+  }
+
+  useEffect(() => {
+    let serverCheckInterval: NodeJS.Timeout;
+    if (etkeccAdmin) {
+      checkServerRunningProcess();
+      setTimeout(() => {
+        serverCheckInterval = setInterval(checkServerRunningProcess, SERVER_CURRENT_PROCCESS_INTERVAL_TIME);
+      }, 5000);
+    } else {
+      setServerProcess({ command: "", locked_at: "" });
+    }
+
+    return () => {
+      if (serverCheckInterval) {
+        clearInterval(serverCheckInterval);
+      }
+    }
+  }, [etkeccAdmin]);
+
+  return { command, locked_at };
+};
+
+const ServerStatusBadge = () => {
+    const { isOkay, successCheck } = useServerStatus();
+    const { command, locked_at } = useCurrentServerProcess();
+    const theme = useTheme();
+    const navigate = useNavigate();
+
+    if (!successCheck) {
+      return null;
+    }
+
+    const handleServerStatusClick = () => {
+      navigate("/server_status");
+    };
+
+    let tooltipText = "Click to view Server Status";
+    let badgeBackgroundColor = isOkay ? theme.palette.success.light : theme.palette.error.main;
+    let badgeColor = isOkay ? theme.palette.success.light : theme.palette.error.main;
+
+    if (command && locked_at) {
+      badgeBackgroundColor = theme.palette.warning.main;
+      badgeColor = theme.palette.warning.main;
+      tooltipText = `Running: ${command}; ${tooltipText}`;
+    }
+
+    return <Button onClick={handleServerStatusClick} size="medium" sx={{ minWidth: "auto", ".MuiButton-startIcon": { m: 0 }}}>
+      <Tooltip title={tooltipText} sx={{ cursor: "pointer" }}>
+        <StyledBadge
+          overlap="circular"
+          anchorOrigin={{ vertical: 'bottom', horizontal: 'right' }}
+          variant="dot"
+          backgroundColor={badgeBackgroundColor}
+          badgeColor={badgeColor}
+        >
+          <Avatar sx={{ height: 24, width: 24, background: theme.palette.mode === "dark" ? theme.palette.background.default : "#2196f3" }}>
+            <MonitorHeartIcon sx={{ height: 22, width: 22, color: theme.palette.common.white }} />
+          </Avatar>
+        </StyledBadge>
+      </Tooltip>
+    </Button>
+};
+
+export default ServerStatusBadge;
--- a/src/components/etke.cc/ServerStatusPage.tsx
+++ b/src/components/etke.cc/ServerStatusPage.tsx
@@ -0,0 +1,144 @@
+import { useStore } from "ra-core";
+import { Box, Stack, Typography, Paper, Link, Chip, Divider, Tooltip, ChipProps } from "@mui/material";
+import CheckIcon from '@mui/icons-material/Check';
+import CloseIcon from "@mui/icons-material/Close";
+import EngineeringIcon from '@mui/icons-material/Engineering';
+import { ServerProcessResponse, ServerStatusComponent, ServerStatusResponse } from "../../synapse/dataProvider";
+
+const getTimeSince = (date: string) => {
+  const now = new Date();
+  const past = new Date(date);
+  const diffInMinutes = Math.floor((now.getTime() - past.getTime()) / (1000 * 60));
+
+  if (diffInMinutes < 1) return "a couple of seconds";
+  if (diffInMinutes === 1) return "1 minute";
+  return `${diffInMinutes} minutes`;
+};
+
+const StatusChip = ({ isOkay, size = "medium", command }: { isOkay: boolean, size?: "small" | "medium", command?: string   }) => {
+  let label = "OK";
+  let icon = <CheckIcon />;
+  let color: ChipProps["color"] = "success";
+  if (!isOkay) {
+    label = "Error";
+    icon = <CloseIcon />;
+    color = "error";
+  }
+
+  if (command) {
+    label = command;
+    color = "warning";
+    icon = <EngineeringIcon />;
+  }
+
+  return (
+    <Chip icon={icon} label={label} color={color} variant="outlined" size={size} />
+  );
+};
+
+const ServerComponentText = ({ text }: { text: string }) => {
+  return <Typography variant="body1" dangerouslySetInnerHTML={{ __html: text }} />;
+};
+
+const ServerStatusPage = () => {
+  const [serverStatus, setServerStatus] = useStore<ServerStatusResponse>("serverStatus", {
+    ok: false,
+    success: false,
+    host: "",
+    results: [],
+  });
+  const [ serverProcess, setServerProcess ] = useStore<ServerProcessResponse>("serverProcess", { command: "", locked_at: "" });
+  const { command, locked_at } = serverProcess;
+  const successCheck = serverStatus.success;
+  const isOkay = serverStatus.ok;
+  const host = serverStatus.host;
+  const results = serverStatus.results;
+
+  let groupedResults: Record<string, ServerStatusComponent[]> = {};
+  for (const result of results) {
+    if (!groupedResults[result.category]) {
+      groupedResults[result.category] = [];
+    }
+    groupedResults[result.category].push(result);
+  }
+
+  if (!successCheck) {
+    return (
+      <Paper elevation={3} sx={{ p: 3, mt: 3 }}>
+        <Stack direction="row" spacing={2} alignItems="center">
+          <CloseIcon color="error" />
+          <Typography color="error">
+            Unable to fetch server status. Please try again later.
+          </Typography>
+        </Stack>
+      </Paper>
+    );
+  }
+
+  return (
+    <Stack spacing={3} mt={3}>
+      <Stack spacing={1} direction="row" alignItems="center">
+        <Box sx={{ display: "flex", alignItems: "center", gap: 1 }}>
+          <Typography variant="h4">Status:</Typography>
+          <StatusChip isOkay={isOkay} command={command} />
+        </Box>
+        <Typography variant="h5" color="primary" fontWeight="medium">
+          {host}
+        </Typography>
+      </Stack>
+      {command && locked_at && (
+      <Stack spacing={1} direction="row" alignItems="center">
+        <Box sx={{ display: "flex", alignItems: "center", gap: 1 }}>
+          <Typography variant="h5">Currently running:</Typography>
+          <Typography variant="h5" color="text.secondary">
+            <Link href={"https://etke.cc/help/extras/scheduler/#"+command} target="_blank">
+              {command}
+            </Link>
+              <Tooltip title={locked_at.toString()}>
+                <Typography component="span" color="text.secondary" sx={{ display: "inline-block", ml: 1 }}>(started {getTimeSince(locked_at)} ago)</Typography>
+              </Tooltip>
+          </Typography>
+        </Box>
+      </Stack>
+      )}
+
+      <Stack spacing={2} direction="row">
+        {Object.keys(groupedResults).map((category, idx) => (
+          <Box key={`category_${category}`} sx={{ flex: 1 }}>
+            <Typography variant="h5" mb={1}>
+              {category}
+            </Typography>
+            <Paper elevation={2} sx={{ p: 3 }}>
+              <Stack spacing={1} divider={<Divider />}>
+                {groupedResults[category].map((result, idx) => (
+                  <Box key={`${category}_${idx}`}>
+                    <Stack spacing={2}>
+                      <Box sx={{ display: "flex", alignItems: "center", gap: 1 }}>
+                        <StatusChip isOkay={result.ok} size="small" />
+                        {result.label.url ? (
+                          <Link href={result.label.url} target="_blank" rel="noopener noreferrer">
+                            <ServerComponentText text={result.label.text} />
+                          </Link>
+                        ) : (
+                          <ServerComponentText text={result.label.text} />
+                        )}
+                      </Box>
+                      {result.reason && <Typography color="text.secondary" dangerouslySetInnerHTML={{ __html: result.reason }}/>}
+                      {(!result.ok && result.help) && (
+                        <Link href={result.help} target="_blank" rel="noopener noreferrer" sx={{ mt: 1 }}>
+                          Learn more
+                        </Link>
+                      )}
+                    </Stack>
+                  </Box>
+                ))}
+              </Stack>
+            </Paper>
+          </Box>
+        ))}
+      </Stack>
+    </Stack>
+  );
+};
+
+export default ServerStatusPage;
--- a/src/components/icons.ts
+++ b/src/components/icons.ts
@@ -1,12 +0,0 @@
-import { lazy } from "react";
-
-export const Icons = {
-  Announcement: lazy(() => import('@mui/icons-material/Announcement')),
-  Engineering: lazy(() => import('@mui/icons-material/Engineering')),
-  HelpCenter: lazy(() => import('@mui/icons-material/HelpCenter')),
-  SupportAgent: lazy(() => import('@mui/icons-material/SupportAgent')),
-  Default: lazy(() => import('@mui/icons-material/OpenInNew')),
-  // Add more icons as needed
-};
-
-export const DefaultIcon = Icons.Default;
--- a/src/components/media.tsx
+++ b/src/components/media.tsx
@@ -32,9 +32,8 @@ import {
 } from "react-admin";
 import { useMutation } from "@tanstack/react-query";

-import { dateParser } from "./date";
+import { dateParser } from "../utils/date";
 import { DeleteMediaParams, SynapseDataProvider } from "../synapse/dataProvider";
-import storage from "../storage";
 import { fetchAuthenticatedMedia } from "../utils/fetchMedia";

 const DeleteMediaDialog = ({ open, onClose, onSubmit }) => {
@@ -315,6 +314,7 @@ export const QuarantineMediaButton = (props: ButtonProps) => {
 export const ViewMediaButton = ({ mxcURL, label, uploadName, mimetype }) => {
  const translate = useTranslate();
  const [loading, setLoading] = useState(false);
+  const notify = useNotify();
  const isImage = mimetype && mimetype.startsWith("image/");

  const openFileInNewTab = (blobURL: string) => {
@@ -341,12 +341,25 @@ export const ViewMediaButton = ({ mxcURL, label, uploadName, mimetype }) => {
  const handleFile = async (preview: boolean) => {
    setLoading(true);
    const response = await fetchAuthenticatedMedia(mxcURL, "original");
-    const blob = await response.blob();
-    const blobURL = URL.createObjectURL(blob);
-    if (preview) {
-      openFileInNewTab(blobURL);
+
+    if (response.ok) {
+      const blob = await response.blob();
+      const blobURL = URL.createObjectURL(blob);
+      if (preview) {
+        openFileInNewTab(blobURL);
+      } else {
+        downloadFile(blobURL);
+      }
    } else {
-      downloadFile(blobURL);
+      const body = await response.json();
+      notify("resources.room_media.action.error", {
+        messageArgs: {
+          errcode: body.errcode,
+          errstatus: response.status,
+          error: body.error,
+        },
+        type: "error",
+      });
    }
    setLoading(false);
  };
@@ -385,15 +398,23 @@ export const MediaIDField = ({ source }) => {
  if (!record) {
    return null;
  }
-  const homeserver = storage.getItem("home_server");
+  const homeserver = localStorage.getItem("home_server");

  const mediaID = get(record, source)?.toString();
  if (!mediaID) {
    return null;
  }

-  const uploadName = decodeURIComponent(get(record, "upload_name")?.toString());
-  const mxcURL = `mxc://${homeserver}/${mediaID}`;
+  let uploadName = mediaID;
+  if (get(record, "upload_name")) {
+    uploadName = decodeURIComponent(get(record, "upload_name")?.toString());
+  }
+
+  let mxcURL = mediaID;
+  if (!mediaID.startsWith(`mxc://${homeserver}`)) {
+    // this is user's media, where mediaID doesn't have the mxc://home_server/ prefix as it has in the rooms
+    mxcURL = `mxc://${homeserver}/${mediaID}`;
+  }

  return <ViewMediaButton mxcURL={mxcURL} label={mediaID} uploadName={uploadName} mimetype={record.media_type}/>;
 };
--- a/src/components/mxid.tsx
+++ b/src/components/mxid.tsx
@@ -1,16 +0,0 @@
-import { Identifier } from "ra-core";
-
-/**
- * Check if a user is managed by an application service
- * @param id The user ID to check
- * @returns Whether the user is managed by an application service
- */
-export const isASManaged = (id: string | Identifier): boolean => {
-  const managedUsersString = localStorage.getItem("as_managed_users") || '';
-  try {
-    const asManagedUsers = JSON.parse(managedUsersString).map(regex => new RegExp(regex));
-    return asManagedUsers.some(regex => regex.test(id));
-  } catch (e) {
-    return false;
-  }
-};
--- a/src/i18n/de.ts
+++ b/src/i18n/de.ts
@@ -25,7 +25,7 @@ const fixedGermanMessages = {
    message: {
      ...formalGermanMessages.ra.message,
      access_denied:
-        "Sie haben nicht die richtigen Berechtigungen um auf diese Seite zuzugreifen.",
+        "Sie haben nicht die erforderlichen Berechtigungen um auf diese Seite zuzugreifen.",
      authentication_error:
        "Der Authentifizierungsserver hat einen Fehler zurückgegeben und Ihre Anmeldedaten konnten nicht überprüft werden.",
    },
@@ -64,6 +64,7 @@ const de: SynapseTranslationMessages = {
        members: "Mitglieder",
        detail: "Details",
        permission: "Berechtigungen",
+        media: "Medien",
      },
    },
    reports: { tabs: { basic: "Allgemein", detail: "Details" } },
@@ -159,11 +160,13 @@ const de: SynapseTranslationMessages = {
        is_guest: "Gast",
        admin: "Server Administrator",
        locked: "Gesperrt",
+        suspended: "Suspendiert",
        deactivated: "Deaktiviert",
        erased: "Gelöscht",
        guests: "Zeige Gäste",
        show_deactivated: "Zeige deaktivierte Benutzer",
        show_locked: "Zeige gesperrte Benutzer",
+        show_suspended: "Zeige suspendierte Benutzer",
        user_id: "Suche Benutzer",
        displayname: "Anzeigename",
        password: "Passwort",
@@ -179,13 +182,23 @@ const de: SynapseTranslationMessages = {
      },
      helper: {
        password: "Durch die Änderung des Passworts wird der Benutzer von allen Sitzungen abgemeldet.",
+        create_password: "Generiere ein starkes und sicheres Passwort mit dem Button unten.",
        deactivate: "Sie müssen ein Passwort angeben, um ein Konto wieder zu aktivieren.",
+        suspend: "Ein gesperrter Benutzer kann sich nicht mehr anmelden und wird in den schreibgeschützten Modus versetzt.",
        erase: "DSGVO konformes Löschen der Benutzerdaten.",
        erase_text: "Das bedeutet, dass die von dem/den Benutzer(n) gesendeten Nachrichten für alle, die zum Zeitpunkt des Sendens im Raum waren, sichtbar bleiben, aber für Benutzer, die dem Raum später beitreten, nicht sichtbar sind.",
        erase_admin_error: "Das Löschen des eigenen Benutzers ist nicht erlaubt.",
        modify_managed_user_error: "Das Ändern eines vom System verwalteten Benutzers ist nicht zulässig.",
        username_available: "Benutzername verfügbar",
      },
+      badge: {
+        you: "Sie",
+        bot: "Bot",
+        admin: "Administrator",
+        support: "Unterstützung",
+        regular: "Normaler Benutzer",
+        system_managed: "Systemverwalteter Benutzer",
+      },
      action: {
        erase: "Lösche Benutzerdaten",
        erase_avatar: "Avatar löschen",
@@ -225,10 +238,11 @@ const de: SynapseTranslationMessages = {
        history_visibility: "Historie-Sichtbarkeit",
        topic: "Thema",
        avatar: "Avatar",
+        actions: "Aktionen",
      },
      helper: {
        forward_extremities:
-          "Forward extremities are the leaf events at the end of a Directed acyclic graph (DAG) in a room, aka events that have no children. The more exist in a room, the more state resolution that Synapse needs to perform (hint: it's an expensive operation). While Synapse has code to prevent too many of these existing at one time in a room, bugs can sometimes make them crop up again. If a room has >10 forward extremities, it's worth checking which room is the culprit and potentially removing them using the SQL queries mentioned in #1760.",
+          "Vorderextremitäten sind Blatt-Ereignisse am Ende eines gerichteten azyklischen Graphens (DAG) in einem Raum, auch bekannt als Ereignisse ohne Nachkommen. Je mehr in einem Raum existieren, umso mehr Zustandsauflösungen muss Synapse absolvieren (Hinweis: dies ist eine sehr aufwendige Operation). Obwohl Synapse Code hat um zu verhindern, dass zuviele davon gleichzeitig in einem Raum existieren, können Bugs manchmal dafür sorgen, dass sie sich ansammeln. Wenn ein Raum >10 Vorderextremitäten hat ist es sinnvoll zu überprüfen um welchen Raum es sich handelt und sie gegebenenfalls, wie in #1769 beschrieben, mittels SQL-Queries zu entfernen.",
      },
      enums: {
        join_rules: {
@@ -253,9 +267,9 @@ const de: SynapseTranslationMessages = {
        erase: {
          title: "Raum löschen",
          content:
-            "Sind Sie sicher dass Sie den Raum löschen möchten? Diese Aktion kann nicht rückgängig gemacht werden. Alle Nachrichten und Medien, die der Raum beinhaltet werden vom Server gelöscht!",
+            "Sind Sie sicher, dass Sie den Raum löschen möchten? Diese Aktion kann nicht rückgängig gemacht werden. Alle Nachrichten und Medien, die der Raum beinhaltet werden vom Server gelöscht!",
          fields: {
-            block: "Benutzer blockieren und daran hindern, dem Raum beizutreten",
+            block: "Blockieren und Benutzer daran hindern, dem Raum beizutreten",
          },
          success: "Raum/Räume erfolgreich gelöscht.",
          failure: "Der/die Raum/Räume konnten nicht gelöscht werden.",
@@ -264,7 +278,7 @@ const de: SynapseTranslationMessages = {
          assign_admin: "Raumadministrator zuweisen",
          title: "Raumadministrator zu %{roomName} zuweisen",
          confirm: "Raumadministrator zuweisen",
-          content: "Geben Sie die vollständige MXID des Benutzers an, der als Administrator gesetzt werden soll.\nWarnung: Damit dies funktioniert, muss der Raum mindestens einen lokalen Mitglied als Administrator haben.",
+          content: "Geben Sie die vollständige MXID des Benutzers an, der als Administrator gesetzt werden soll.\nWarnung: Damit dies funktioniert, muss der Raum mindestens ein lokales Mitglied als Administrator haben.",
          success: "Der/die Benutzer wurde/n als Raumadministrator gesetzt.",
          failure: "Der/die Benutzer konnte/n nicht als Raumadministrator gesetzt werden. %{errMsg}",
        }
@@ -301,7 +315,7 @@ const de: SynapseTranslationMessages = {
        erase: {
          title: "Gemeldetes Event löschen",
          content:
-            "Sind Sie sicher dass Sie das gemeldete Event löschen möchten? Diese Aktion kann nicht rückgängig gemacht werden.",
+            "Sind Sie sicher, dass Sie das gemeldete Event löschen möchten? Diese Aktion kann nicht rückgängig gemacht werden.",
        },
      },
    },
@@ -348,8 +362,8 @@ const de: SynapseTranslationMessages = {
    },
    protect_media: {
      action: {
-        create: "Ungeschützt, Schutz erstellen",
-        delete: "Geschützt, Schutz aufheben",
+        create: "Ungeschützt, Schutz aktivieren",
+        delete: "Geschützt, Schutz deaktivieren",
        none: "In Quarantäne",
        send_success: "Erfolgreich den Schutz-Status geändert.",
        send_failure: "Beim Versenden ist ein Fehler aufgetreten.",
@@ -419,6 +433,18 @@ const de: SynapseTranslationMessages = {
        sender: "Absender",
      },
    },
+    room_media: {
+      name: "Medien",
+      fields: {
+        media_id: "Medien ID",
+      },
+      helper: {
+        info: "Dies ist eine Liste der Medien, die in den Raum hochgeladen wurden. Es ist nicht möglich, Medien zu löschen, die in externen Medien-Repositories hochgeladen wurden.",
+      },
+      action: {
+        error: "%{errcode} (%{errstatus}) %{error}"
+      }
+    },
    room_directory: {
      name: "Raumverzeichnis",
      fields: {
@@ -429,8 +455,8 @@ const de: SynapseTranslationMessages = {
        title: "Raum aus Verzeichnis löschen |||| %{smart_count} Räume aus Verzeichnis löschen",
        content:
          "Möchten Sie den Raum wirklich aus dem Raumverzeichnis löschen? |||| Möchten Sie die %{smart_count} Räume wirklich aus dem Raumverzeichnis löschen?",
-        erase: "Lösche aus Verzeichnis",
-        create: "Eintragen ins Verzeichnis",
+        erase: "Aus Verzeichnis löschen",
+        create: "Ins Verzeichnis eintragen",
        send_success: "Raum erfolgreich eingetragen.",
        send_failure: "Beim Entfernen ist ein Fehler aufgetreten.",
      },
@@ -452,7 +478,7 @@ const de: SynapseTranslationMessages = {
      fields: {
        token: "Token",
        valid: "Gültige Token",
-        uses_allowed: "Anzahl",
+        uses_allowed: "Verwendungen erlaubt",
        pending: "Ausstehend",
        completed: "Abgeschlossen",
        expiry_time: "Ablaufzeit",
--- a/src/i18n/en.ts
+++ b/src/i18n/en.ts
@@ -38,6 +38,7 @@ const en: SynapseTranslationMessages = {
        members: "Members",
        detail: "Details",
        permission: "Permissions",
+        media: "Media",
      }
    },
    reports: { tabs: { basic: "Basic", detail: "Details" } },
@@ -132,11 +133,13 @@ const en: SynapseTranslationMessages = {
        is_guest: "Guest",
        admin: "Server Administrator",
        locked: "Locked",
+        suspended: "Suspended",
        deactivated: "Deactivated",
        erased: "Erased",
        guests: "Show guests",
        show_deactivated: "Show deactivated users",
        show_locked: "Show locked users",
+        show_suspended: "Show suspended users",
        user_id: "Search user",
        displayname: "Displayname",
        password: "Password",
@@ -152,7 +155,9 @@ const en: SynapseTranslationMessages = {
      },
      helper: {
        password: "Changing password will log user out of all sessions.",
+        create_password: "Generate a strong and secure password using the button below.",
        deactivate: "You must provide a password to re-activate an account.",
+        suspend: "Suspending user means they are put into a read-only mode.",
        erase: "Mark the user as GDPR-erased",
        erase_text: "This means messages sent by the user(-s) will still be visible by anyone who was in the room when these messages were sent, but hidden from users joining the room afterward.",
        erase_admin_error: "Deleting own user is not allowed.",
@@ -170,6 +175,14 @@ const en: SynapseTranslationMessages = {
        overwrite_cancel: "Cancel",
        overwrite_confirm: "Overwrite",
      },
+      badge: {
+        you: "You",
+        bot: "Bot",
+        admin: "Admin",
+        support: "Support",
+        regular: "Regular User",
+        system_managed: "System-managed",
+      },
      limits: {
        messages_per_second: "Messages per second",
        messages_per_second_text: "The number of actions that can be performed in a second.",
@@ -198,6 +211,7 @@ const en: SynapseTranslationMessages = {
        history_visibility: "History visibility",
        topic: "Topic",
        avatar: "Avatar",
+        actions: "Actions",
      },
      helper: {
        forward_extremities:
@@ -391,6 +405,18 @@ const en: SynapseTranslationMessages = {
        sender: "Sender",
      },
    },
+    room_media: {
+      name: "Media",
+      fields: {
+        media_id: "Media ID",
+      },
+      helper: {
+        info: "This is a list of media that has been uploaded to the room. It is not possible to delete media that has been uploaded to external media repositories.",
+      },
+      action: {
+        error: "%{errcode} (%{errstatus}) %{error}",
+      },
+    },
    room_directory: {
      name: "Room directory",
      fields: {
--- a/src/i18n/fa.ts
+++ b/src/i18n/fa.ts
@@ -32,6 +32,7 @@ const fa: SynapseTranslationMessages = {
        members: "اعضا",
        detail: "جزئیات",
        permission: "مجوزها",
+        media: "رسانه ها",
      },
    },
    reports: { tabs: { basic: "اصلی", detail: "جزئیات" } },
@@ -126,9 +127,12 @@ const fa: SynapseTranslationMessages = {
        is_guest: "مهمان",
        admin: "مدیر سرور",
        deactivated: "غیرفعال",
+        locked: "قفل شده",
+        suspended: "معلق",
        guests: "نمایش مهمانان",
        show_deactivated: "نمایش کاربران غیرفعال شده",
        show_locked: "نمایش کاربران قفل شده",
+        show_suspended: "نمایش کاربران معلق",
        user_id: "جستجوی کاربر",
        displayname: "نام نمایشی",
        password: "رمز عبور",
@@ -144,13 +148,23 @@ const fa: SynapseTranslationMessages = {
      },
      helper: {
        password: "با تغییر رمز عبور کاربر از تمام دستگاه ها خارج می شود.",
+        create_password: "رمز عبور قوی و امنی را با استفاده از دکمه زیر ایجاد کنید.",
        deactivate: "برای فعالسازی مجدد حساب باید رمز عبور وارد کنید.",
+        suspend: "کاربران معلق نمی توانند وارد شوند و پیام های آنها به دیگران نمایش داده نمی شود.",
        erase: "کاربر را به عنوان GDPR پاک شده علامت گذاری کنید",
        erase_text: "وهذا يعني أن الرسائل المرسلة من قبل المستخدم (المستخدمين) ستظل مرئية من قبل أي شخص كان في الغرفة عند إرسال هذه الرسائل، ولكنها مخفية عن المستخدمين الذين ينضمون إلى الغرفة بعد ذلك.",
        erase_admin_error: "حذف المستخدم الخاص غير مسموح به.",
        modify_managed_user_error: "لا يُسمح بتغيير المستخدم الذي يديره النظام.",
        username_available: "نام کاربری موجود",
      },
+      badge: {
+        you: "شما",
+        bot: "ربات",
+        admin: "مدیر",
+        support: "پشتیبان",
+        regular: "کاربر عادی",
+        system_managed: "مدیریت سیستم",
+      },
      action: {
        erase: "پاک کردن اطلاعات کاربر",
        erase_avatar: "محو الصورة الرمزية",
@@ -190,6 +204,7 @@ const fa: SynapseTranslationMessages = {
        history_visibility: "مشاهده تاریخچه",
        topic: "موضوع",
        avatar: "آواتار",
+        actions: "عملیات",
      },
      helper: {
        forward_extremities:
@@ -370,6 +385,18 @@ const fa: SynapseTranslationMessages = {
        sender: "فرستنده",
      },
    },
+    room_media: {
+      name: "رسانه ها",
+      fields: {
+        media_id: "شناسه رسانه",
+      },
+      helper: {
+        info: "این یک لیست از رسانه ها است که در اتاق بارگذاری شده است. نمی توان رسانه ها را حذف کرد که در اتاق های خارجی بارگذاری شده اند.",
+      },
+      action: {
+        error: "%{errcode} (%{errstatus}) %{error}"
+      }
+    },
    room_directory: {
      name: "راهنمای اتاق",
      fields: {
--- a/src/i18n/fr.ts
+++ b/src/i18n/fr.ts
@@ -32,6 +32,7 @@ const fr: SynapseTranslationMessages = {
        members: "Membres",
        detail: "Détails",
        permission: "Permissions",
+        media: "Médias",
      },
    },
    reports: { tabs: { basic: "Informations de base", detail: "Détails" } },
@@ -129,10 +130,12 @@ const fr: SynapseTranslationMessages = {
        is_guest: "Visiteur",
        admin: "Administrateur du serveur",
        locked: "Verrouillé",
+        suspended: "Suspendu",
        deactivated: "Désactivé",
        guests: "Afficher les visiteurs",
        show_deactivated: "Afficher les utilisateurs désactivés",
        show_locked: "Afficher les utilisateurs verrouillés",
+        show_suspended: "Afficher les utilisateurs suspendus",
        user_id: "Rechercher un utilisateur",
        displayname: "Nom d'affichage",
        password: "Mot de passe",
@@ -146,13 +149,24 @@ const fr: SynapseTranslationMessages = {
        auth_provider: "Fournisseur d'identité",
      },
      helper: {
+        password: "Changer le mot de passe déconnectera l'utilisateur de toutes les sessions.",
+        create_password: "Générer un mot de passe fort et sécurisé en utilisant le bouton ci-dessous.",
        deactivate: "Vous devrez fournir un mot de passe pour réactiver le compte.",
+        suspend: "L'utilisateur sera suspendu jusqu'à ce que vous le réactiviez.",
        erase: "Marquer l'utilisateur comme effacé conformément au RGPD",
        erase_text: "Cela signifie que les messages envoyés par le(s) utilisateur(s) seront toujours visibles par toute personne qui se trouvait dans la salle au moment où ces messages ont été envoyés, mais qu'ils seront cachés aux utilisateurs qui rejoindront la salle par la suite.",
        erase_admin_error: "La suppression de son propre utilisateur n'est pas autorisée.",
        modify_managed_user_error: "La modification d'un utilisateur géré par le système n'est pas autorisée.",
        username_available: "Nom d'utilisateur disponible",
      },
+      badge: {
+        you: "Vous",
+        bot: "Bot",
+        admin: "Admin",
+        support: "Support",
+        regular: "Utilisateur régulier",
+        system_managed: "Géré par le système",
+      },
      action: {
        erase: "Effacer les données de l'utilisateur",
        erase_avatar: "Effacer l'avatar",
@@ -192,6 +206,7 @@ const fr: SynapseTranslationMessages = {
        history_visibility: "Visibilité de l'historique",
        topic: "Sujet",
        avatar: "Avatar",
+        actions: "Actions",
      },
      helper: {
        forward_extremities:
@@ -372,6 +387,18 @@ const fr: SynapseTranslationMessages = {
        sender: "Expéditeur",
      },
    },
+    room_media: {
+      name: "Médias",
+      fields: {
+        media_id: "Identifiant du média",
+      },
+      helper: {
+        info: "Cette liste contient les médias qui ont été téléchargés dans le salon. Il n'est pas possible de supprimer les médias qui ont été téléversés dans des dépôts de médias externes.",
+      },
+      action: {
+        error: "%{errcode} (%{errstatus}) %{error}"
+      }
+    },
    room_directory: {
      name: "Répertoire des salons",
      fields: {
--- a/src/i18n/index.d.ts
+++ b/src/i18n/index.d.ts
@@ -31,6 +31,7 @@ interface SynapseTranslationMessages extends TranslationMessages {
        members: string;
        detail: string;
        permission: string;
+        media: string;
      };
    };
    reports: { tabs: { basic: string; detail: string } };
@@ -124,11 +125,13 @@ interface SynapseTranslationMessages extends TranslationMessages {
        is_guest: string;
        admin: string;
        locked?: string; // TODO: fa, zh
+        suspended: string;
        deactivated: string;
        erased?: string; // TODO: fa, fr, it, zh
        guests: string;
        show_deactivated: string;
        show_locked?: string; // TODO: de, fa, fr, it, zh
+        show_suspended: string;
        user_id: string;
        displayname: string;
        password: string;
@@ -143,8 +146,10 @@ interface SynapseTranslationMessages extends TranslationMessages {
        user_type?: string;
      };
      helper: {
-        password?: string;
+        password: string;
+        create_password: string;
        deactivate: string;
+        suspend: string;
        erase: string;
        erase_text: string;
        erase_admin_error: string;
@@ -162,6 +167,14 @@ interface SynapseTranslationMessages extends TranslationMessages {
        overwrite_cancel: string;
        overwrite_confirm: string;
      };
+      badge: {
+        you: string;
+        bot: string;
+        admin: string;
+        support: string;
+        regular: string;
+        system_managed: string;
+      }
      limits: {
        messages_per_second: string;
        messages_per_second_text: string;
@@ -190,6 +203,7 @@ interface SynapseTranslationMessages extends TranslationMessages {
        history_visibility: string;
        topic?: string;
        avatar?: string;
+        actions: string;
      };
      helper?: {
        forward_extremities: string;
@@ -383,6 +397,18 @@ interface SynapseTranslationMessages extends TranslationMessages {
        sender: string;
      };
    };
+    room_media?: {
+      name: string;
+      fields: {
+        media_id: string;
+      };
+      helper: {
+        info: string;
+      };
+      action: {
+        error: string;
+      };
+    };
    room_directory?: {
      name: string;
      fields: {
--- a/src/i18n/it.ts
+++ b/src/i18n/it.ts
@@ -32,6 +32,7 @@ const it: SynapseTranslationMessages = {
        members: "Membro",
        detail: "Dettagli",
        permission: "Permessi",
+        media: "Media",
      },
    },
    reports: { tabs: { basic: "Semplice", detail: "Dettagli" } },
@@ -126,10 +127,12 @@ const it: SynapseTranslationMessages = {
        is_guest: "Ospite",
        admin: "Amministratore",
        locked: "Bloccato",
+        suspended: "Sospeso",
        deactivated: "Disattivato",
        guests: "Mostra gli ospiti",
        show_deactivated: "Mostra gli utenti disattivati",
        show_locked: "Mostra gli utenti bloccati",
+        show_suspended: "Mostra gli utenti sospesi",
        user_id: "Cerca utente",
        displayname: "Nickname",
        password: "Password",
@@ -145,13 +148,23 @@ const it: SynapseTranslationMessages = {
      },
      helper: {
        password: "Cambiando la password l'utente verrà disconnesso da tutte le sessioni attive.",
+        create_password: "Genera una password forte e sicura utilizzando il pulsante sottostante.",
        deactivate: "Devi fornire una password per riattivare l'account.",
+        suspend: "Sospendi l'utente",
        erase: "Constrassegna l'utente come cancellato dal GDPR",
        erase_text: "Ciò significa che i messaggi inviati dall'utente (o dagli utenti) saranno ancora visibili da chiunque si trovasse nella stanza al momento dell'invio, ma saranno nascosti agli utenti che si uniranno alla stanza in seguito.",
        erase_admin_error: "Non è consentito eliminare il proprio utente.",
        modify_managed_user_error: "La modifica di un utente gestito dal sistema non è consentita.",
        username_available: "Nome utente disponibile",
      },
+      badge: {
+        you: "Tu",
+        bot: "Bot",
+        admin: "Amministratore",
+        support: "Supporto",
+        regular: "Utente normale",
+        system_managed: "Gestito dal sistema",
+      },
      action: {
        erase: "Cancella i dati dell'utente",
        erase_avatar: "Cancella l'avatar dell'utente",
@@ -191,6 +204,7 @@ const it: SynapseTranslationMessages = {
        history_visibility: "Visibilità temporale",
        topic: "Topic",
        avatar: "Avatar",
+        actions: "Azioni",
      },
      helper: {
        /*        forward_extremities:
@@ -366,6 +380,18 @@ const it: SynapseTranslationMessages = {
      sender: "Mittente",
    },
  },
+  room_media: {
+    name: "Media",
+    fields: {
+      media_id: "ID Media",
+    },
+    helper: {
+      info: "Questo è un elenco dei media caricati nella stanza. Non è possibile eliminare i media caricati su repository esterni.",
+    },
+    action: {
+      error: "%{errcode} (%{errstatus}) %{error}"
+    }
+  },
  room_directory: {
    name: "Elenco delle stanze",
    fields: {
--- a/src/i18n/ru.ts
+++ b/src/i18n/ru.ts
@@ -59,6 +59,7 @@ const ru: SynapseTranslationMessages = {
        members: "Участники",
        detail: "Подробности",
        permission: "Права доступа",
+        media: "Медиа",
      },
    },
    reports: { tabs: { basic: "Основные", detail: "Подробности" } },
@@ -147,10 +148,10 @@ const ru: SynapseTranslationMessages = {
    helper: {
      send: "Это API удаляет локальные файлы с вашего собственного сервера, включая локальные миниатюры и копии скачанных файлов. \
      Данный API не затрагивает файлы, загруженные во внешние хранилища.",
-      },
-      },
-      resources: {
-      users: {
+    },
+  },
+  resources: {
+    users: {
      name: "Пользователь |||| Пользователи",
      email: "Почта",
      msisdn: "Телефон",
@@ -162,11 +163,13 @@ const ru: SynapseTranslationMessages = {
        is_guest: "Гость",
        admin: "Администратор сервера",
        locked: "Заблокирован",
+        suspended: "Приостановлен",
        deactivated: "Деактивирован",
        erased: "Удалён",
        guests: "Показывать гостей",
        show_deactivated: "Показывать деактивированных",
        show_locked: "Показывать заблокированных",
+        show_suspended: "Показывать приостановленных",
        user_id: "Поиск пользователя",
        displayname: "Отображаемое имя",
        password: "Пароль",
@@ -182,13 +185,23 @@ const ru: SynapseTranslationMessages = {
      },
      helper: {
        password: "Смена пароля завершит все сессии пользователя.",
+        create_password: "Сгенерировать надёжный и безопасный пароль, используя кнопку ниже.",
        deactivate: "Вы должны предоставить пароль для реактивации учётной записи.",
+        suspend: "Приостановка учётной записи означает, что пользователь не сможет войти в свою учётную запись, пока она не будет снова активирована.",
        erase: "Пометить пользователя как удалённого в соответствии с GDPR",
        erase_text: "Это означает, что сообщения, отправленные пользователем (-ами), будут по-прежнему видны всем, кто находился в комнате в момент их отправки, но будут скрыты от пользователей, присоединившихся к комнате после этого.",
        erase_admin_error: "Удаление собственного пользователя запрещено.",
        modify_managed_user_error: "Изменение пользователя, управляемого системой, не допускается.",
        username_available: "Имя пользователя доступно",
      },
+      badge: {
+        you: "Вы",
+        bot: "Бот",
+        admin: "Админ",
+        support: "Поддержка",
+        regular: "Обычный пользователь",
+        system_managed: "Управляемый системой",
+      },
      action: {
        erase: "Удалить данные пользователя",
        erase_avatar: "Удалить аватар",
@@ -207,265 +220,278 @@ const ru: SynapseTranslationMessages = {
        burst_count_text: "Количество действий, которые могут быть выполнены до ограничения.",
      }
    },
-      rooms: {
-        name: "Комната |||| Комнаты",
-        fields: {
-          room_id: "ID комнаты",
-          name: "Название",
-          canonical_alias: "Псевдоним",
-          joined_members: "Участники",
-          joined_local_members: "Локальные участники",
-          joined_local_devices: "Локальные устройства",
-          state_events: "События состояния / Сложность",
-          version: "Версия",
-          is_encrypted: "Зашифровано",
-          encryption: "Шифрование",
-          federatable: "Федерация",
-          public: "Отображается в каталоге комнат",
-          creator: "Создатель",
-          join_rules: "Правила входа",
-          guest_access: "Гостевой доступ",
-          history_visibility: "Видимость истории",
-          topic: "Тема",
-          avatar: "Аватар",
-        },
-        helper: {
-          forward_extremities:
-            "Оконечности — это события-листья в конце ориентированного ациклического графа (DAG) в комнате, т.е. события без дочерних элементов. \
-          Чем больше их в комнате, тем больше Synapse работает над разрешением состояния (это дорогостоящая операция). \
-          Хотя Synapse старается не допускать существования слишком большого числа таких событий в комнате, из-за ошибок они иногда снова появляются. \
-          Если в комнате >10 оконечностей, стоит найти комнату-виновника и попробовать удалить их с помощью SQL-запросов из #1760.",
-        },
-        enums: {
-          join_rules: {
-            public: "Для всех",
-            knock: "Надо постучать",
-            invite: "По приглашению",
-            private: "Приватная",
-          },
-          guest_access: {
-            can_join: "Гости могут войти",
-            forbidden: "Гости не могут войти",
-          },
-          history_visibility: {
-            invited: "С момента приглашения",
-            joined: "С момента входа",
-            shared: "С момента открытия доступа",
-            world_readable: "Для всех",
-          },
-          unencrypted: "Без шифрования",
-        },
-        action: {
-          erase: {
-            title: "Удалить комнату",
-            content:
-              "Действительно удалить эту комнату? Это действие будет невозможно отменить. Все сообщения и файлы в комнате будут удалены с сервера!",
-            fields: {
-              block: "Заблокировать и запретить пользователям присоединяться к комнате",
-            },
-            success: "Комната/ы успешно удалены",
-            failure: "Комната/ы не могут быть удалены.",
-          },
-          make_admin: {
-            assign_admin: "Назначить администратора",
-            title: "Назначить администратора комнате %{roomName}",
-            confirm: "Назначить администратора",
-            content: "Введите полную MXID пользователя, которого нужно назначить администратором.\nПредупреждение: для этого должен быть назначен хотя бы один локальный участник в качестве администратора.",
-            success: "Пользователь назначен администратором комнаты.",
-            failure: "Пользователь не может быть назначен администратором комнаты. %{errMsg}",
-          }
-        },
+    rooms: {
+      name: "Комната |||| Комнаты",
+      fields: {
+        room_id: "ID комнаты",
+        name: "Название",
+        canonical_alias: "Псевдоним",
+        joined_members: "Участники",
+        joined_local_members: "Локальные участники",
+        joined_local_devices: "Локальные устройства",
+        state_events: "События состояния / Сложность",
+        version: "Версия",
+        is_encrypted: "Зашифровано",
+        encryption: "Шифрование",
+        federatable: "Федерация",
+        public: "Отображается в каталоге комнат",
+        creator: "Создатель",
+        join_rules: "Правила входа",
+        guest_access: "Гостевой доступ",
+        history_visibility: "Видимость истории",
+        topic: "Тема",
+        avatar: "Аватар",
+        actions: "Действия",
      },
-      reports: {
-        name: "Жалоба |||| Жалобы",
-        fields: {
-          id: "ID",
-          received_ts: "Дата и время жалобы",
-          user_id: "Автор жалобы",
-          name: "Название комнаты",
-          score: "Баллы",
-          reason: "Причина",
-          event_id: "ID события",
-          event_json: {
-            origin: "Исходнный сервер",
-            origin_server_ts: "Дата и время отправки",
-            type: "Тип события",
-            content: {
-              msgtype: "Тип содержимого",
-              body: "Содержимое",
-              format: "Формат",
-              formatted_body: "Форматированное содержимое",
-              algorithm: "Алгоритм",
-              url: "Ссылка",
-              info: {
-                mimetype: "Тип",
-              },
-            },
-          },
-        },
-        action: {
-          erase: {
-            title: "Удалить жалобу",
-            content: "Действительно удалить жалобу? Это действие будет невозможно отменить.",
-          },
-        },
+      helper: {
+        forward_extremities:
+          "Оконечности — это события-листья в конце ориентированного ациклического графа (DAG) в комнате, т.е. события без дочерних элементов. \
+        Чем больше их в комнате, тем больше Synapse работает над разрешением состояния (это дорогостоящая операция). \
+        Хотя Synapse старается не допускать существования слишком большого числа таких событий в комнате, из-за ошибок они иногда снова появляются. \
+        Если в комнате >10 оконечностей, стоит найти комнату-виновника и попробовать удалить их с помощью SQL-запросов из #1760.",
      },
-      connections: {
-        name: "Подключения",
-        fields: {
-          last_seen: "Дата",
-          ip: "IP адрес",
-          user_agent: "Юзер-агент",
+      enums: {
+        join_rules: {
+          public: "Для всех",
+          knock: "Надо постучать",
+          invite: "По приглашению",
+          private: "Приватная",
        },
+        guest_access: {
+          can_join: "Гости могут войти",
+          forbidden: "Гости не могут войти",
+        },
+        history_visibility: {
+          invited: "С момента приглашения",
+          joined: "С момента входа",
+          shared: "С момента открытия доступа",
+          world_readable: "Для всех",
+        },
+        unencrypted: "Без шифрования",
      },
-      devices: {
-        name: "Устройство |||| Устройства",
-        fields: {
-          device_id: "ID устройства",
-          display_name: "Название",
-          last_seen_ts: "Дата и время",
-          last_seen_ip: "IP адрес",
-        },
-        action: {
-          erase: {
-            title: "Удаление %{id}",
-            content: 'Действительно удалить устройство "%{name}"?',
-            success: "Устройство успешно удалено.",
-            failure: "Произошла ошибка.",
-          },
-        },
-      },
-      users_media: {
-        name: "Файлы",
-        fields: {
-          media_id: "ID файла",
-          media_length: "Размер файла (в байтах)",
-          media_type: "Тип",
-          upload_name: "Имя файла",
-          quarantined_by: "На карантине",
-          safe_from_quarantine: "Защитить от карантина",
-          created_ts: "Создано",
-          last_access_ts: "Последний доступ",
-        },
-        action: {
-          open: "Открыть файл в новом окне",
-        },
-      },
-      protect_media: {
-        action: {
-          create: "Не защищён, установить защиту",
-          delete: "Защищён, снять защиту",
-          none: "На карантине",
-          send_success: "Статус защиты успешно изменён.",
-          send_failure: "Произошла ошибка.",
-        },
-      },
-      quarantine_media: {
-        action: {
-          name: "Карантин",
-          create: "Поместить на карантин",
-          delete: "На карантине, снять карантин",
-          none: "Защищено от карантина",
-          send_success: "Статус карантина успешно изменён.",
-          send_failure: "Произошла ошибка.",
-        },
-      },
-      pushers: {
-        name: "Пушер |||| Пушеры",
-        fields: {
-          app: "Приложение",
-          app_display_name: "Название приложения",
-          app_id: "ID приложения",
-          device_display_name: "Название устройства",
-          kind: "Вид",
-          lang: "Язык",
-          profile_tag: "Тег профиля",
-          pushkey: "Ключ",
-          data: { url: "URL" },
-        },
-      },
-      servernotices: {
-        name: "Серверные уведомления",
-        send: "Отправить серверные уведомления",
-        fields: {
-          body: "Сообщение",
-        },
-        action: {
-          send: "Отправить",
-          send_success: "Серверное уведомление успешно отправлено.",
-          send_failure: "Произошла ошибка.",
-        },
-        helper: {
-          send: 'Отправить серверное уведомление выбранным пользователям. На сервере должна быть активна функция "Server Notices".',
-        },
-      },
-      user_media_statistics: {
-        name: "Файлы пользователей",
-        fields: {
-          media_count: "Количество файлов",
-          media_length: "Размер файлов",
-        },
-      },
-      forward_extremities: {
-        name: "Оконечности",
-        fields: {
-          id: "ID события",
-          received_ts: "Дата и время",
-          depth: "Глубина",
-          state_group: "Группа состояния",
-        },
-      },
-      room_state: {
-        name: "События состояния",
-        fields: {
-          type: "Тип",
-          content: "Содержимое",
-          origin_server_ts: "Дата отправки",
-          sender: "Отправитель",
-        },
-      },
-      room_directory: {
-        name: "Каталог комнат",
-        fields: {
-          world_readable: "Гости могут просматривать без входа",
-          guest_can_join: "Гости могут войти",
-        },
-        action: {
-          title:
-            "Удалить комнату из каталога |||| Удалить %{smart_count} комнаты из каталога |||| Удалить %{smart_count} комнат из каталога",
+      action: {
+        erase: {
+          title: "Удалить комнату",
          content:
-            "Действительно удалить комнату из каталога? |||| Действительно удалить %{smart_count} комнаты из каталога? |||| Действительно удалить %{smart_count} комнат из каталога?",
-          erase: "Удалить из каталога комнат",
-          create: "Опубликовать в каталоге комнат",
-          send_success: "Комната успешно опубликована.",
-          send_failure: "Произошла ошибка.",
+            "Действительно удалить эту комнату? Это действие будет невозможно отменить. Все сообщения и файлы в комнате будут удалены с сервера!",
+          fields: {
+            block: "Заблокировать и запретить пользователям присоединяться к комнате",
+          },
+          success: "Комната/ы успешно удалены",
+          failure: "Комната/ы не могут быть удалены.",
+        },
+        make_admin: {
+          assign_admin: "Назначить администратора",
+          title: "Назначить администратора комнате %{roomName}",
+          confirm: "Назначить администратора",
+          content: "Введите полную MXID пользователя, которого нужно назначить администратором.\nПредупреждение: для этого должен быть назначен хотя бы один локальный участник в качестве администратора.",
+          success: "Пользователь назначен администратором комнаты.",
+          failure: "Пользователь не может быть назначен администратором комнаты. %{errMsg}",
+        }
+      },
+    },
+    reports: {
+      name: "Жалоба |||| Жалобы",
+      fields: {
+        id: "ID",
+        received_ts: "Дата и время жалобы",
+        user_id: "Автор жалобы",
+        name: "Название комнаты",
+        score: "Баллы",
+        reason: "Причина",
+        event_id: "ID события",
+        event_json: {
+          origin: "Исходнный сервер",
+          origin_server_ts: "Дата и время отправки",
+          type: "Тип события",
+          content: {
+            msgtype: "Тип содержимого",
+            body: "Содержимое",
+            format: "Формат",
+            formatted_body: "Форматированное содержимое",
+            algorithm: "Алгоритм",
+            url: "Ссылка",
+            info: {
+              mimetype: "Тип",
+            },
+          },
        },
      },
-      destinations: {
-        name: "Федерация",
-        fields: {
-          destination: "Назначение",
-          failure_ts: "Дата и время ошибки",
-          retry_last_ts: "Дата и время последней попытки",
-          retry_interval: "Интервал между попытками",
-          last_successful_stream_ordering: "Последний успешный поток",
-          stream_ordering: "Поток",
+      action: {
+        erase: {
+          title: "Удалить жалобу",
+          content: "Действительно удалить жалобу? Это действие будет невозможно отменить.",
        },
-        action: { reconnect: "Переподключиться" },
      },
-      registration_tokens: {
-        name: "Токены регистрации",
-        fields: {
-          token: "Токен",
-          valid: "Рабочий токен",
-          uses_allowed: "Количество использований",
-          pending: "Ожидает",
-          completed: "Завершено",
-          expiry_time: "Дата окончания",
-          length: "Длина",
+    },
+    connections: {
+      name: "Подключения",
+      fields: {
+        last_seen: "Дата",
+        ip: "IP адрес",
+        user_agent: "Юзер-агент",
+      },
+    },
+    devices: {
+      name: "Устройство |||| Устройства",
+      fields: {
+        device_id: "ID устройства",
+        display_name: "Название",
+        last_seen_ts: "Дата и время",
+        last_seen_ip: "IP адрес",
+      },
+      action: {
+        erase: {
+          title: "Удаление %{id}",
+          content: 'Действительно удалить устройство "%{name}"?',
+          success: "Устройство успешно удалено.",
+          failure: "Произошла ошибка.",
        },
-        helper: { length: "Длина токена, если токен не задан." },
      },
-},
+    },
+    users_media: {
+      name: "Файлы",
+      fields: {
+        media_id: "ID файла",
+        media_length: "Размер файла (в байтах)",
+        media_type: "Тип",
+        upload_name: "Имя файла",
+        quarantined_by: "На карантине",
+        safe_from_quarantine: "Защитить от карантина",
+        created_ts: "Создано",
+        last_access_ts: "Последний доступ",
+      },
+      action: {
+        open: "Открыть файл в новом окне",
+      },
+    },
+    protect_media: {
+      action: {
+        create: "Не защищён, установить защиту",
+        delete: "Защищён, снять защиту",
+        none: "На карантине",
+        send_success: "Статус защиты успешно изменён.",
+        send_failure: "Произошла ошибка.",
+      },
+    },
+    quarantine_media: {
+      action: {
+        name: "Карантин",
+        create: "Поместить на карантин",
+        delete: "На карантине, снять карантин",
+        none: "Защищено от карантина",
+        send_success: "Статус карантина успешно изменён.",
+        send_failure: "Произошла ошибка.",
+      },
+    },
+    pushers: {
+      name: "Пушер |||| Пушеры",
+      fields: {
+        app: "Приложение",
+        app_display_name: "Название приложения",
+        app_id: "ID приложения",
+        device_display_name: "Название устройства",
+        kind: "Вид",
+        lang: "Язык",
+        profile_tag: "Тег профиля",
+        pushkey: "Ключ",
+        data: { url: "URL" },
+      },
+    },
+    servernotices: {
+      name: "Серверные уведомления",
+      send: "Отправить серверные уведомления",
+      fields: {
+        body: "Сообщение",
+      },
+      action: {
+        send: "Отправить",
+        send_success: "Серверное уведомление успешно отправлено.",
+        send_failure: "Произошла ошибка.",
+      },
+      helper: {
+        send: 'Отправить серверное уведомление выбранным пользователям. На сервере должна быть активна функция "Server Notices".',
+      },
+    },
+    user_media_statistics: {
+      name: "Файлы пользователей",
+      fields: {
+        media_count: "Количество файлов",
+        media_length: "Размер файлов",
+      },
+    },
+    forward_extremities: {
+      name: "Оконечности",
+      fields: {
+        id: "ID события",
+        received_ts: "Дата и время",
+        depth: "Глубина",
+        state_group: "Группа состояния",
+      },
+    },
+    room_state: {
+      name: "События состояния",
+      fields: {
+        type: "Тип",
+        content: "Содержимое",
+        origin_server_ts: "Дата отправки",
+        sender: "Отправитель",
+      },
+    },
+    room_media: {
+      name: "Медиа",
+      fields: {
+        media_id: "ID медиа",
+      },
+      helper: {
+        info: "Это список медиа, которые были загружены в комнату. Невозможно удалить медиа, которые были загружены в внешние медиа-репозитории.",
+      },
+      action: {
+        error: "%{errcode} (%{errstatus}) %{error}"
+      }
+    },
+    room_directory: {
+      name: "Каталог комнат",
+      fields: {
+        world_readable: "Гости могут просматривать без входа",
+        guest_can_join: "Гости могут войти",
+      },
+      action: {
+        title:
+          "Удалить комнату из каталога |||| Удалить %{smart_count} комнаты из каталога |||| Удалить %{smart_count} комнат из каталога",
+        content:
+          "Действительно удалить комнату из каталога? |||| Действительно удалить %{smart_count} комнаты из каталога? |||| Действительно удалить %{smart_count} комнат из каталога?",
+        erase: "Удалить из каталога комнат",
+        create: "Опубликовать в каталоге комнат",
+        send_success: "Комната успешно опубликована.",
+        send_failure: "Произошла ошибка.",
+      },
+    },
+    destinations: {
+      name: "Федерация",
+      fields: {
+        destination: "Назначение",
+        failure_ts: "Дата и время ошибки",
+        retry_last_ts: "Дата и время последней попытки",
+        retry_interval: "Интервал между попытками",
+        last_successful_stream_ordering: "Последний успешный поток",
+        stream_ordering: "Поток",
+      },
+      action: { reconnect: "Переподключиться" },
+    },
+    registration_tokens: {
+      name: "Токены регистрации",
+      fields: {
+        token: "Токен",
+        valid: "Рабочий токен",
+        uses_allowed: "Количество использований",
+        pending: "Ожидает",
+        completed: "Завершено",
+        expiry_time: "Дата окончания",
+        length: "Длина",
+      },
+      helper: { length: "Длина токена, если токен не задан." },
+    },
+  },
 };
 export default ru;
--- a/src/i18n/zh.ts
+++ b/src/i18n/zh.ts
@@ -60,6 +60,7 @@ const zh: SynapseTranslationMessages = {
        members: "成员",
        detail: "细节",
        permission: "权限",
+        media: "媒体",
      },
    },
    reports: { tabs: { basic: "基本", detail: "细节" } },
@@ -153,10 +154,13 @@ const zh: SynapseTranslationMessages = {
        name: "用户名",
        is_guest: "访客",
        admin: "服务器管理员",
+        locked: "锁定",
        deactivated: "被禁用",
+        suspended: "被锁定",
        guests: "显示访客",
        show_deactivated: "显示被禁用的账户",
        show_locked: "显示被锁定的账户",
+        show_suspended: "显示被锁定的账户",
        user_id: "搜索用户",
        displayname: "显示名字",
        password: "密码",
@@ -169,13 +173,24 @@ const zh: SynapseTranslationMessages = {
        consent_version: "协议版本",
      },
      helper: {
+        password: "更改密码会使用户注销所有会话。",
+        create_password: "使用下面的按钮生成一个强大和安全的密码。",
        deactivate: "您必须提供一串密码来激活账户。",
+        suspend: "您必须提供一串密码来暂停账户。",
        erase: "将用户标记为根据 GDPR 的要求抹除了",
        erase_text: "这意味着用户发送的信息对于发送信息时在房间内的任何人来说都是可见的，但对于之后加入房间的用户来说则是隐藏的。",
        erase_admin_error: "不允许删除自己的用户",
        modify_managed_user_error: "不允许修改系统管理的用户。",
        username_available: "用户名可用",
      },
+      badge: {
+        you: "您",
+        bot: "机器人",
+        admin: "管理员",
+        support: "支持",
+        regular: "普通用户",
+        system_managed: "系统管理",
+      },
      action: {
        erase: "抹除用户信息",
        erase_avatar: "抹掉头像",
@@ -212,6 +227,9 @@ const zh: SynapseTranslationMessages = {
        join_rules: "加入规则",
        guest_access: "访客访问",
        history_visibility: "历史可见性",
+        topic: "主题",
+        avatar: "头像",
+        actions: "操作",
      },
      enums: {
        join_rules: {
@@ -331,6 +349,18 @@ const zh: SynapseTranslationMessages = {
        media_length: "媒体文件长度",
      },
    },
+    room_media: {
+      name: "媒体",
+      fields: {
+        media_id: "媒体ID",
+      },
+      helper: {
+        info: "这是上传到房间的媒体列表。无法删除上传到外部媒体存储库的媒体。",
+      },
+      action: {
+        error: "%{errcode} (%{errstatus}) %{error}"
+      }
+    },
  },
 };
 export default zh;
--- a/src/index.tsx
+++ b/src/index.tsx
@@ -2,47 +2,15 @@ import React from "react";

 import { createRoot } from "react-dom/client";

-import App from "./App";
-import { Config, WellKnownKey, LoadConfig } from "./components/config";
-import { AppContext } from "./AppContext";
-import storage from "./storage";
+import { App } from "./App";
+import { AppContext } from "./Context";
+import { FetchConfig, GetConfig } from "./utils/config";

-// load config.json
-let props: Config = {
-  restrictBaseUrl: [],
-  asManagedUsers: [],
-  supportURL: "",
-  menu: [],
-};
-try {
-  const resp = await fetch("config.json");
-  const configJSON = await resp.json();
-  console.log("Loaded config.json", configJSON);
-  props = LoadConfig(configJSON as Config);
-} catch (e) {
-  console.error(e);
-}
-
-// if home_server is set, try to load https://home_server/.well-known/matrix/client
-const homeserver = storage.getItem("home_server");
-if (homeserver) {
-  try {
-    const resp = await fetch(`https://${homeserver}/.well-known/matrix/client`);
-    const configWK = await resp.json();
-    if (!configWK[WellKnownKey]) {
-      console.log(`Loaded https://${homeserver}.well-known/matrix/client, but it doesn't contain ${WellKnownKey} key, skipping`, configWK);
-    } else {
-      console.log(`Loaded https://${homeserver}.well-known/matrix/client`, configWK);
-      props = LoadConfig(configWK[WellKnownKey] as Config);
-    }
-  } catch (e) {
-    console.log(`https://${homeserver}/.well-known/matrix/client not found, skipping`, e);
-  }
-}
+await FetchConfig();

 createRoot(document.getElementById("root")).render(
      <React.StrictMode>
-        <AppContext.Provider value={props}>
+        <AppContext.Provider value={GetConfig()}>
          <App />
        </AppContext.Provider>
      </React.StrictMode>
--- a/src/pages/LoginPage.test.tsx
+++ b/src/pages/LoginPage.test.tsx
@@ -4,7 +4,7 @@ import { render, screen } from "@testing-library/react";
 import { AdminContext } from "react-admin";

 import LoginPage from "./LoginPage";
-import { AppContext } from "../AppContext";
+import { AppContext } from "../Context";
 import englishMessages from "../i18n/en";

 const i18nProvider = polyglotI18nProvider(() => englishMessages, "en", [{ locale: "en", name: "English" }]);
@@ -33,7 +33,9 @@ describe("LoginForm", () => {

  it("renders with single restricted homeserver", () => {
    render(
-      <AppContext.Provider value={{ restrictBaseUrl: "https://matrix.example.com" }}>
+      <AppContext.Provider
+        value={{ restrictBaseUrl: "https://matrix.example.com", asManagedUsers: [], menu: [] }}
+      >
        <AdminContext i18nProvider={i18nProvider}>
          <LoginPage />
        </AdminContext>
@@ -56,6 +58,8 @@ describe("LoginForm", () => {
      <AppContext.Provider
        value={{
          restrictBaseUrl: ["https://matrix.example.com", "https://matrix.example.org"],
+          asManagedUsers: [],
+          menu: [],
        }}
      >
        <AdminContext i18nProvider={i18nProvider}>
--- a/src/pages/LoginPage.tsx
+++ b/src/pages/LoginPage.tsx
@@ -16,7 +16,7 @@ import {
 } from "react-admin";
 import { useFormContext } from "react-hook-form";
 import LoginFormBox from "../components/LoginFormBox";
-import { useAppContext } from "../AppContext";
+import { useAppContext } from "../Context";
 import {
  getServerVersion,
  getSupportedFeatures,
@@ -24,8 +24,7 @@ import {
  getWellKnownUrl,
  isValidBaseUrl,
  splitMxid,
-} from "../synapse/synapse";
-import storage from "../storage";
+} from "../synapse/matrix";
 import Footer from "../components/Footer";

 export type LoginMethod = "credentials" | "accessToken";
@@ -46,7 +45,7 @@ const LoginPage = () => {
  const [locale, setLocale] = useLocaleState();
  const locales = useLocales();
  const translate = useTranslate();
-  const base_url = allowSingleBaseUrl ? restrictBaseUrl : storage.getItem("base_url");
+  const base_url = allowSingleBaseUrl ? restrictBaseUrl : localStorage.getItem("base_url");
  const [ssoBaseUrl, setSSOBaseUrl] = useState("");
  const loginToken = /\?loginToken=([a-zA-Z0-9_-]+)/.exec(window.location.href);
  const [loginMethod, setLoginMethod] = useState<LoginMethod>("credentials");
@@ -60,8 +59,8 @@ const LoginPage = () => {
    console.log("SSO token is", ssoToken);
    // Prevent further requests
    window.history.replaceState({}, "", window.location.href.replace(loginToken[0], "#").split("#")[0]);
-    const baseUrl = storage.getItem("sso_base_url");
-    storage.removeItem("sso_base_url");
+    const baseUrl = localStorage.getItem("sso_base_url");
+    localStorage.removeItem("sso_base_url");
    if (baseUrl) {
      const auth = {
        base_url: baseUrl,
@@ -114,7 +113,7 @@ const LoginPage = () => {
  };

  const handleSSO = () => {
-    storage.setItem("sso_base_url", ssoBaseUrl);
+    localStorage.setItem("sso_base_url", ssoBaseUrl);
    const ssoFullUrl = `${ssoBaseUrl}/_matrix/client/r0/login/sso/redirect?redirectUrl=${encodeURIComponent(
      window.location.href
    )}`;
@@ -172,11 +171,24 @@ const LoginPage = () => {

    useEffect(() => {
      const params = new URLSearchParams(window.location.search);
+      const hostname = window.location.hostname;
      const username = params.get("username");
+      const password = params.get("password");
+      const accessToken = params.get("accessToken");
      let serverURL = params.get("server");
      if (username) {
        form.setValue("username", username);
      }
+
+      if (hostname === "localhost" || hostname === "127.0.0.1") {
+        if (password) {
+          form.setValue("password", password);
+        }
+        if (accessToken) {
+          setLoginMethod("accessToken");
+          form.setValue("accessToken", accessToken);
+        }
+      }
      if (serverURL) {
        const isFullUrl = serverURL.match(/^(http|https):\/\//);
        if (!isFullUrl) {
--- a/src/resources/destinations.tsx
+++ b/src/resources/destinations.tsx
@@ -33,7 +33,7 @@ import {
  DateFieldProps,
 } from "react-admin";

-import { DATE_FORMAT } from "../components/date";
+import { DATE_FORMAT } from "../utils/date";
 import { get } from "lodash";

 const DestinationPagination = () => <Pagination rowsPerPageOptions={[10, 25, 50, 100, 500, 1000]} />;
@@ -123,13 +123,14 @@ export const DestinationList = (props: ListProps) => {
      filters={destinationFilters}
      pagination={<DestinationPagination />}
      sort={{ field: "destination", order: "ASC" }}
+      perPage={50}
    >
      <DatagridConfigurable rowClick={id => `${id}/show/rooms`} bulkActionButtons={false}>
-        <FunctionField source="destination" render={destinationFieldRender} />
-        <DateField source="failure_ts" showTime options={DATE_FORMAT} />
-        <RetryDateField source="retry_last_ts" showTime options={DATE_FORMAT} />
-        <TextField source="retry_interval" />
-        <TextField source="last_successful_stream_ordering" />
+        <FunctionField source="destination" render={destinationFieldRender} label="resources.destinations.fields.destination" />
+        <DateField source="failure_ts" showTime options={DATE_FORMAT} label="resources.destinations.fields.failure_ts" />
+        <RetryDateField source="retry_last_ts" showTime options={DATE_FORMAT} label="resources.destinations.fields.retry_last_ts" />
+        <TextField source="retry_interval" label="resources.destinations.fields.retry_interval" />
+        <TextField source="last_successful_stream_ordering" label="resources.destinations.fields.last_successful_stream_ordering" />
        <DestinationReconnectButton />
      </DatagridConfigurable>
    </List>
--- a/src/resources/registration_tokens.tsx
+++ b/src/resources/registration_tokens.tsx
@@ -24,7 +24,7 @@ import {
  Toolbar,
 } from "react-admin";

-import { DATE_FORMAT, dateFormatter, dateParser } from "../components/date";
+import { DATE_FORMAT, dateFormatter, dateParser } from "../utils/date";

 const validateToken = [regex(/^[A-Za-z0-9._~-]{0,64}$/)];
 const validateUsesAllowed = [number()];
@@ -38,14 +38,14 @@ export const RegistrationTokenList = (props: ListProps) => (
    filters={registrationTokenFilters}
    filterDefaultValues={{ valid: true }}
    pagination={false}
-    perPage={500}
+    perPage={50}
  >
    <DatagridConfigurable rowClick="edit">
-      <TextField source="token" sortable={false} />
-      <NumberField source="uses_allowed" sortable={false} />
-      <NumberField source="pending" sortable={false} />
-      <NumberField source="completed" sortable={false} />
-      <DateField source="expiry_time" showTime options={DATE_FORMAT} sortable={false} />
+      <TextField source="token" sortable={false} label="resources.registration_tokens.fields.token"/>
+      <NumberField source="uses_allowed" sortable={false} label="resources.registration_tokens.fields.uses_allowed" />
+      <NumberField source="pending" sortable={false} label="resources.registration_tokens.fields.pending" />
+      <NumberField source="completed" sortable={false} label="resources.registration_tokens.fields.completed" />
+      <DateField source="expiry_time" showTime options={DATE_FORMAT} sortable={false} label="resources.registration_tokens.fields.expiry_time" />
    </DatagridConfigurable>
  </List>
 );
--- a/src/resources/reports.tsx
+++ b/src/resources/reports.tsx
@@ -22,7 +22,7 @@ import {
  useTranslate,
 } from "react-admin";

-import { DATE_FORMAT } from "../components/date";
+import { DATE_FORMAT } from "../utils/date";
 import { ReportMediaContent } from "../components/media";

 const ReportPagination = () => <Pagination rowsPerPageOptions={[10, 25, 50, 100, 500, 1000]} />;
@@ -90,13 +90,13 @@ const ReportShowActions = () => {
 };

 export const ReportList = (props: ListProps) => (
-  <List {...props} pagination={<ReportPagination />} sort={{ field: "received_ts", order: "DESC" }}>
+  <List {...props} pagination={<ReportPagination />} perPage={50} sort={{ field: "received_ts", order: "DESC" }}>
    <DatagridConfigurable rowClick="show" bulkActionButtons={false}>
-      <TextField source="id" sortable={false} />
-      <DateField source="received_ts" showTime options={DATE_FORMAT} sortable={true} />
-      <TextField sortable={false} source="user_id" />
-      <TextField sortable={false} source="name" />
-      <TextField sortable={false} source="score" />
+      <TextField source="id" sortable={false} label="resources.reports.fields.id" />
+      <DateField source="received_ts" showTime options={DATE_FORMAT} sortable={true} label="resources.reports.fields.received_ts" />
+      <TextField sortable={false} source="user_id" label="resources.reports.fields.user_id" />
+      <TextField sortable={false} source="name" label="resources.reports.fields.name" />
+      <TextField sortable={false} source="score" label="resources.reports.fields.score" />
    </DatagridConfigurable>
  </List>
 );
--- a/src/resources/room_directory.tsx
+++ b/src/resources/room_directory.tsx
@@ -135,7 +135,7 @@ const RoomDirectoryListActions = () => (
 );

 export const RoomDirectoryList = () => (
-  <List pagination={<RoomDirectoryPagination />} perPage={100} actions={<RoomDirectoryListActions />}>
+  <List pagination={<RoomDirectoryPagination />} perPage={50} actions={<RoomDirectoryListActions />}>
    <DatagridConfigurable
      rowClick={id => "/rooms/" + id + "/show"}
      bulkActionButtons={<RoomDirectoryBulkUnpublishButton />}
--- a/src/resources/rooms.tsx
+++ b/src/resources/rooms.tsx
@@ -7,12 +7,12 @@ import PageviewIcon from "@mui/icons-material/Pageview";
 import ViewListIcon from "@mui/icons-material/ViewList";
 import RoomIcon from "@mui/icons-material/ViewList";
 import VisibilityIcon from "@mui/icons-material/Visibility";
+import PermMediaIcon from "@mui/icons-material/PermMedia";
 import Box from "@mui/material/Box";
 import { useTheme } from "@mui/material/styles";
 import {
  BooleanField,
  DateField,
-  EditButton,
  WrapperField,
  Datagrid,
  DatagridConfigurable,
@@ -38,6 +38,7 @@ import {
  useTranslate,
  useListContext,
  useNotify,
+  DeleteButton,
 } from "react-admin";

 import TextField from "@mui/material/TextField";
@@ -47,8 +48,9 @@ import {
  RoomDirectoryUnpublishButton,
  RoomDirectoryPublishButton,
 } from "./room_directory";
-import { DATE_FORMAT } from "../components/date";
+import { DATE_FORMAT } from "../utils/date";
 import DeleteRoomButton from "../components/DeleteRoomButton";
+import { MediaIDField } from "../components/media";
 import AvatarField from "../components/AvatarField";
 import { Room } from "../synapse/dataProvider";
 import { useMutation } from "@tanstack/react-query";
@@ -58,6 +60,8 @@ import { useState } from "react";
 import Button from "@mui/material/Button";
 import PersonIcon from '@mui/icons-material/Person';
 import Typography from "@mui/material/Typography";
+import Alert from "@mui/material/Alert";
+
 const RoomPagination = () => <Pagination rowsPerPageOptions={[10, 25, 50, 100, 500, 1000]} />;

 const RoomTitle = () => {
@@ -216,7 +220,7 @@ export const RoomShow = (props: ShowProps) => {
        <Tab label="synapseadmin.rooms.tabs.members" icon={<UserIcon />} path="members">
          <MakeAdminBtn />
          <ReferenceManyField reference="room_members" target="room_id" label={false}>
-            <Datagrid style={{ width: "100%" }} rowClick={id => "/users/" + id} bulkActionButtons={false}>
+            <Datagrid sx={{ width: "100%" }} rowClick={id => "/users/" + id} bulkActionButtons={false}>
              <RaTextField source="id" sortable={false} label="resources.users.fields.id" />
              <ReferenceField
                label="resources.users.fields.displayname"
@@ -231,6 +235,16 @@ export const RoomShow = (props: ShowProps) => {
          </ReferenceManyField>
        </Tab>

+        <Tab label="synapseadmin.rooms.tabs.media" icon={<PermMediaIcon />} path="media">
+          <Alert severity="warning">{translate("resources.room_media.helper.info")}</Alert>
+          <ReferenceManyField reference="room_media" target="room_id" label={false}>
+            <Datagrid sx={{ width: "100%" }} bulkActionButtons={false}>
+              <MediaIDField source="media_id" />
+              <DeleteButton mutationMode="pessimistic" redirect={false} />
+            </Datagrid>
+          </ReferenceManyField>
+        </Tab>
+
        <Tab label="synapseadmin.rooms.tabs.permission" icon={<VisibilityIcon />} path="permission">
          <BooleanField source="federatable" />
          <BooleanField source="public" />
@@ -284,7 +298,7 @@ export const RoomShow = (props: ShowProps) => {

        <Tab label={translate("resources.room_state.name", { smart_count: 2 })} icon={<EventIcon />} path="state">
          <ReferenceManyField reference="room_state" target="room_id" label={false}>
-            <Datagrid style={{ width: "100%" }} bulkActionButtons={false}>
+            <Datagrid sx={{ width: "100%" }} bulkActionButtons={false}>
              <RaTextField source="type" sortable={false} />
              <DateField source="origin_server_ts" showTime options={DATE_FORMAT} sortable={false} />
              <FunctionField source="content" sortable={false} render={record => `${JSON.stringify(record.content, null, 2)}`} />
@@ -305,7 +319,7 @@ export const RoomShow = (props: ShowProps) => {
            {translate("resources.rooms.helper.forward_extremities")}
          </Box>
          <ReferenceManyField reference="forward_extremities" target="room_id" label={false}>
-            <Datagrid style={{ width: "100%" }} bulkActionButtons={false}>
+            <Datagrid sx={{ width: "100%" }} bulkActionButtons={false}>
              <RaTextField source="id" sortable={false} />
              <DateField source="received_ts" showTime options={DATE_FORMAT} sortable={false} />
              <NumberField source="depth" sortable={false} />
@@ -352,31 +366,39 @@ export const RoomList = (props: ListProps) => {
      sort={{ field: "name", order: "ASC" }}
      filters={roomFilters}
      actions={<RoomListActions />}
+      perPage={50}
    >
      <DatagridConfigurable
        rowClick="show"
        bulkActionButtons={<RoomBulkActionButtons />}
        omit={["joined_local_members", "state_events", "version", "federatable"]}
      >
-        <BooleanField
-          source="is_encrypted"
-          sortBy="encryption"
-          TrueIcon={HttpsIcon}
-          FalseIcon={NoEncryptionIcon}
-          label={<HttpsIcon />}
-          sx={{
-            [`& [data-testid="true"]`]: { color: theme.palette.success.main },
-            [`& [data-testid="false"]`]: { color: theme.palette.error.main },
-          }}
-        />
-        <FunctionField source="name" render={record => record["name"] || record["canonical_alias"] || record["id"]} />
-        <RaTextField source="joined_members" />
-        <RaTextField source="joined_local_members" />
-        <RaTextField source="state_events" />
-        <RaTextField source="version" />
-        <BooleanField source="federatable" />
-        <BooleanField source="public" />
-        <MakeAdminBtn />
+        <ReferenceField reference="rooms" source="id" label="resources.users.fields.avatar" link={false} sortable={false}>
+          <AvatarField source="avatar" sx={{ height: "40px", width: "40px" }} />
+        </ReferenceField>
+        <WrapperField source="encryption" sortBy="is_encrypted" label="resources.rooms.fields.encryption">
+          <BooleanField
+            source="is_encrypted"
+            sortBy="encryption"
+            TrueIcon={HttpsIcon}
+            FalseIcon={NoEncryptionIcon}
+            label={<HttpsIcon />}
+            sx={{
+              [`& [data-testid="true"]`]: { color: theme.palette.success.main },
+              [`& [data-testid="false"]`]: { color: theme.palette.error.main },
+            }}
+          />
+        </WrapperField>
+        <FunctionField source="name" render={record => record["name"] || record["canonical_alias"] || record["id"]} label="resources.rooms.fields.name" />
+        <RaTextField source="joined_members" label="resources.rooms.fields.joined_members" />
+        <RaTextField source="joined_local_members" label="resources.rooms.fields.joined_local_members" />
+        <RaTextField source="state_events" label="resources.rooms.fields.state_events" />
+        <RaTextField source="version" label="resources.rooms.fields.version" />
+        <BooleanField source="federatable" label="resources.rooms.fields.federatable" />
+        <BooleanField source="public" label="resources.rooms.fields.public" />
+        <WrapperField label="resources.rooms.fields.actions">
+          <MakeAdminBtn />
+        </WrapperField>
      </DatagridConfigurable>
    </List>
  );
--- a/src/resources/user_media_statistics.tsx
+++ b/src/resources/user_media_statistics.tsx
@@ -37,6 +37,7 @@ export const UserMediaStatsList = (props: ListProps) => (
    filters={userMediaStatsFilters}
    pagination={<UserMediaStatsPagination />}
    sort={{ field: "media_length", order: "DESC" }}
+    perPage={50}
  >
    <DatagridConfigurable rowClick={id => "/users/" + id + "/media"} bulkActionButtons={false}>
      <TextField source="user_id" label="resources.users.fields.id" />
--- a/src/resources/users.tsx
+++ b/src/resources/users.tsx
@@ -69,15 +69,15 @@ import { Link } from "react-router-dom";

 import AvatarField from "../components/AvatarField";
 import DeleteUserButton from "../components/DeleteUserButton";
-import { isASManaged } from "../components/mxid";
+import { isASManaged } from "../utils/mxid";
 import { ServerNoticeButton, ServerNoticeBulkButton } from "../components/ServerNotices";
-import { DATE_FORMAT } from "../components/date";
-import { DeviceRemoveButton } from "../components/devices";
+import { DATE_FORMAT } from "../utils/date";
+import DeviceRemoveButton from "../components/DeviceRemoveButton";
 import { MediaIDField, ProtectMediaButton, QuarantineMediaButton } from "../components/media";
-import { generateRandomPassword } from "../synapse/synapse";
+import { generateRandomPassword } from "../utils/password";
 import { useFormContext } from "react-hook-form";
-import { ExperimentalFeaturesList } from "../components/ExperimentalFeatures";
-import { UserRateLimits } from "../components/UserRateLimits";
+import ExperimentalFeaturesList from "../components/ExperimentalFeatures";
+import UserRateLimits from "../components/UserRateLimits";
 import { User, UsernameAvailabilityResult } from "../synapse/dataProvider";
 import { MakeAdminBtn } from "./rooms";

@@ -111,6 +111,7 @@ const userFilters = [
  <BooleanInput source="guests" alwaysOn />,
  <BooleanInput label="resources.users.fields.show_deactivated" source="deactivated" alwaysOn />,
  <BooleanInput label="resources.users.fields.show_locked" source="locked" alwaysOn />,
+  <BooleanInput label="resources.users.fields.show_suspended" source="suspended" alwaysOn />,
 ];

 const UserPreventSelfDelete: React.FC<{ children: React.ReactNode; ownUserIsSelected: boolean; asManagedUserIsSelected: boolean }> = props => {
@@ -162,23 +163,25 @@ export const UserList = (props: ListProps) => (
  <List
    {...props}
    filters={userFilters}
-    filterDefaultValues={{ guests: true, deactivated: false, locked: false }}
+    filterDefaultValues={{ guests: true, deactivated: false, locked: false, suspended: false }}
    sort={{ field: "name", order: "ASC" }}
    actions={<UserListActions />}
    pagination={<UserPagination />}
+    perPage={50}
  >
    <DatagridConfigurable
      rowClick={(id: Identifier, resource: string) => `/${resource}/${id}`}
      bulkActionButtons={<UserBulkActionButtons />}
    >
-      <AvatarField source="avatar_src" sx={{ height: "40px", width: "40px" }} sortBy="avatar_url" />
-      <TextField source="id" sortBy="name" />
-      <TextField source="displayname" />
-      <BooleanField source="is_guest" />
-      <BooleanField source="admin" />
-      <BooleanField source="deactivated" />
-      <BooleanField source="locked" />
-      <BooleanField source="erased" sortable={false} />
+      <AvatarField source="avatar_src" sx={{ height: "40px", width: "40px" }} sortBy="avatar_url" label="resources.users.fields.avatar" />
+      <TextField source="id" sortBy="name" label="resources.users.fields.id" />
+      <TextField source="displayname" label="resources.users.fields.displayname" />
+      <BooleanField source="is_guest" label="resources.users.fields.is_guest" />
+      <BooleanField source="admin" label="resources.users.fields.admin" />
+      <BooleanField source="deactivated" label="resources.users.fields.deactivated" />
+      <BooleanField source="locked" label="resources.users.fields.locked" />
+      <BooleanField source="suspended" label="resources.users.fields.suspended" />
+      <BooleanField source="erased" sortable={false} label="resources.users.fields.erased" />
      <DateField source="creation_ts" label="resources.users.fields.creation_ts_ms" showTime options={DATE_FORMAT} />
    </DatagridConfigurable>
  </List>
@@ -188,7 +191,7 @@ export const UserList = (props: ListProps) => (
 // here only local part of user_id
 // maxLength = 255 - "@" - ":" - storage.getItem("home_server").length
 // storage.getItem("home_server").length is not valid here
-const validateUser = [required(), maxLength(253), regex(/^[a-z0-9._=\-/]+$/, "synapseadmin.users.invalid_user_id")];
+const validateUser = [required(), maxLength(253), regex(/^[a-z0-9._=\-\+/]+$/, "synapseadmin.users.invalid_user_id")];

 const validateAddress = [required(), maxLength(255)];

@@ -284,7 +287,7 @@ export const UserCreate = (props: CreateProps) => {
    >
      <TextInput source="id" autoComplete="off" validate={validateUser} onBlur={checkAvailability} helperText={userAvailabilityEl}/>
      <TextInput source="displayname" validate={maxLength(256)} />
-      <PasswordInput source="password" autoComplete="new-password" validate={maxLength(512)} />
+      <UserPasswordInput source="password" autoComplete="new-password" helperText="resources.users.helper.password" />
      <SelectInput source="user_type" choices={choices_type} translateChoice={false} resettable />
      <BooleanInput source="admin" />
      <ArrayInput source="threepids">
@@ -320,9 +323,6 @@ const UserTitle = () => {
  }

  let username = record ? (record.displayname ? `"${record.displayname}"` : `"${record.name}"`) : ""
-  if (isASManaged(record?.id)) {
-    username += " 🤖";
-  }
  return (
    <span>
      {translate("resources.users.name", {
@@ -386,19 +386,15 @@ const UserPasswordInput = props => {

  const generatePassword = () => {
    const password = generateRandomPassword();
-    if (record) {
-      form.setValue("password", password, { shouldDirty: true });
-    }
+    form.setValue("password", password, { shouldDirty: true });
  };

  return (
    <>
-      <PasswordInput {...props} helperText="resources.users.helper.modify_managed_user_error"
-        {...(asManagedUserIsSelected ? { disabled: true } : {})}
-       />
+      <PasswordInput {...props} helperText={asManagedUserIsSelected ? "resources.users.helper.modify_managed_user_error" : (record ? "resources.users.helper.password" : "resources.users.helper.create_password")} disabled={asManagedUserIsSelected} />
       <Button
        variant="outlined"
-        label="Generate Password"
+        label="resources.users.action.generate_password"
        onClick={generatePassword}
        sx={{ marginBottom: "10px" }}
        disabled={asManagedUserIsSelected}
@@ -439,6 +435,7 @@ export const UserEdit = (props: EditProps) => {
          <BooleanInput source="admin" />
          <UserBooleanInput source="locked" />
          <UserBooleanInput source="deactivated" helperText="resources.users.helper.deactivate" />
+          <UserBooleanInput source="suspended" helperText="resources.users.helper.suspend" />
          <BooleanInput source="erased" disabled />
          <DateField source="creation_ts_ms" showTime options={DATE_FORMAT} />
          <TextField source="consent_version" />
@@ -464,7 +461,7 @@ export const UserEdit = (props: EditProps) => {

        <FormTab label={translate("resources.devices.name", { smart_count: 2 })} icon={<DevicesIcon />} path="devices">
          <ReferenceManyField reference="devices" target="user_id" label={false}>
-            <Datagrid style={{ width: "100%" }} bulkActionButtons={false}>
+            <Datagrid sx={{ width: "100%" }} bulkActionButtons={false}>
              <TextField source="device_id" sortable={false} />
              <TextField source="display_name" sortable={false} />
              <TextField source="last_seen_ip" sortable={false} />
@@ -477,7 +474,7 @@ export const UserEdit = (props: EditProps) => {
        <FormTab label="resources.connections.name" icon={<SettingsInputComponentIcon />} path="connections">
          <ReferenceField reference="connections" source="id" label={false} link={false}>
            <ArrayField source="devices[].sessions[0].connections" label="resources.connections.name">
-              <Datagrid style={{ width: "100%" }} bulkActionButtons={false}>
+              <Datagrid sx={{ width: "100%" }} bulkActionButtons={false}>
                <TextField source="ip" sortable={false} />
                <DateField source="last_seen" showTime options={DATE_FORMAT} sortable={false} />
                <TextField source="user_agent" sortable={false} style={{ width: "100%" }} />
@@ -499,7 +496,7 @@ export const UserEdit = (props: EditProps) => {
            perPage={50}
            sort={{ field: "created_ts", order: "DESC" }}
          >
-            <Datagrid style={{ width: "100%" }}>
+            <Datagrid sx={{ width: "100%" }}>
              <MediaIDField source="media_id" />
              <DateField source="created_ts" showTime options={DATE_FORMAT} />
              <DateField source="last_access_ts" showTime options={DATE_FORMAT} />
@@ -516,19 +513,19 @@ export const UserEdit = (props: EditProps) => {

        <FormTab label={translate("resources.rooms.name", { smart_count: 2 })} icon={<ViewListIcon />} path="rooms">
          <ReferenceManyField reference="joined_rooms" target="user_id" label={false}>
-            <Datagrid style={{ width: "100%" }} rowClick={id => "/rooms/" + id + "/show"} bulkActionButtons={false}>
-              <TextField source="id" sortable={false} label="resources.rooms.fields.room_id" />
-              <ReferenceField
-                label="resources.rooms.fields.name"
-                source="id"
-                reference="rooms"
-                sortable={false}
-                link=""
-              >
-                <TextField source="name" sortable={false} />
-              </ReferenceField>
-              <MakeAdminBtn />
-            </Datagrid>
+              <Datagrid sx={{ width: "100%" }} rowClick={id => "/rooms/" + id + "/show"} bulkActionButtons={false}>
+                <ReferenceField reference="rooms" source="id" label={false} link={false} sortable={false}>
+                  <AvatarField source="avatar" sx={{ height: "40px", width: "40px" }} />
+                </ReferenceField>
+                  <TextField source="id" label="resources.rooms.fields.room_id" sortable={false}/>
+                <ReferenceField reference="rooms" source="id" label="resources.rooms.fields.name" link={false} sortable={false}>
+                  <TextField source="name" />
+                </ReferenceField>
+                <ReferenceField reference="rooms" source="id" label="resources.rooms.fields.joined_members" link={false} sortable={false}>
+                  <TextField source="joined_members" sortable={false} />
+                </ReferenceField>
+                  <MakeAdminBtn />
+              </Datagrid>
          </ReferenceManyField>
        </FormTab>

@@ -538,7 +535,7 @@ export const UserEdit = (props: EditProps) => {
          path="pushers"
        >
          <ReferenceManyField reference="pushers" target="user_id" label={false}>
-            <Datagrid style={{ width: "100%" }} bulkActionButtons={false}>
+            <Datagrid sx={{ width: "100%" }} bulkActionButtons={false}>
              <TextField source="kind" sortable={false} />
              <TextField source="app_display_name" sortable={false} />
              <TextField source="app_id" sortable={false} />
--- a/src/storage.ts
+++ b/src/storage.ts
@@ -1,3 +0,0 @@
-const storage = localStorage;
-
-export default storage;
--- a/src/synapse/authProvider.test.ts
+++ b/src/synapse/authProvider.test.ts
@@ -1,7 +1,6 @@
 import fetchMock from "jest-fetch-mock";

 import authProvider from "./authProvider";
-import storage from "../storage";
 import { HttpError } from "ra-core";

 fetchMock.enableMocks();
@@ -9,7 +8,7 @@ fetchMock.enableMocks();
 describe("authProvider", () => {
  beforeEach(() => {
    fetchMock.resetMocks();
-    storage.clear();
+    localStorage.clear();
  });

  describe("login", () => {
@@ -38,10 +37,10 @@ describe("authProvider", () => {
        }),
        method: "POST",
      });
-      expect(storage.getItem("base_url")).toEqual("http://example.com");
-      expect(storage.getItem("user_id")).toEqual("@user:example.com");
-      expect(storage.getItem("access_token")).toEqual("foobar");
-      expect(storage.getItem("device_id")).toEqual("some_device");
+      expect(localStorage.getItem("base_url")).toEqual("http://example.com");
+      expect(localStorage.getItem("user_id")).toEqual("@user:example.com");
+      expect(localStorage.getItem("access_token")).toEqual("foobar");
+      expect(localStorage.getItem("device_id")).toEqual("some_device");
    });
  });

@@ -69,16 +68,16 @@ describe("authProvider", () => {
      }),
      method: "POST",
    });
-    expect(storage.getItem("base_url")).toEqual("https://example.com");
-    expect(storage.getItem("user_id")).toEqual("@user:example.com");
-    expect(storage.getItem("access_token")).toEqual("foobar");
-    expect(storage.getItem("device_id")).toEqual("some_device");
+    expect(localStorage.getItem("base_url")).toEqual("https://example.com");
+    expect(localStorage.getItem("user_id")).toEqual("@user:example.com");
+    expect(localStorage.getItem("access_token")).toEqual("foobar");
+    expect(localStorage.getItem("device_id")).toEqual("some_device");
  });

  describe("logout", () => {
    it("should remove the access_token from storage", async () => {
-      storage.setItem("base_url", "example.com");
-      storage.setItem("access_token", "foo");
+      localStorage.setItem("base_url", "example.com");
+      localStorage.setItem("access_token", "foo");
      fetchMock.mockResponse(JSON.stringify({}));

      await authProvider.logout(null);
@@ -91,7 +90,7 @@ describe("authProvider", () => {
        method: "POST",
        user: { authenticated: true, token: "Bearer foo" },
      });
-      expect(storage.getItem("access_token")).toBeNull();
+      expect(localStorage.getItem("access_token")).toBeNull();
    });
  });

@@ -115,7 +114,7 @@ describe("authProvider", () => {
    });

    it("should resolve when logged in", async () => {
-      storage.setItem("access_token", "foobar");
+      localStorage.setItem("access_token", "foobar");

      await expect(authProvider.checkAuth({})).resolves.toBeUndefined();
    });
--- a/src/synapse/authProvider.ts
+++ b/src/synapse/authProvider.ts
@@ -1,9 +1,8 @@
 import { AuthProvider, HttpError, Options, fetchUtils } from "react-admin";

-import storage from "../storage";
-import { MatrixError, displayError } from "../components/error";
+import { MatrixError, displayError } from "../utils/error";
 import { fetchAuthenticatedMedia } from "../utils/fetchMedia";
-import { ClearConfig } from "../components/config";
+import { FetchConfig, ClearConfig } from "../utils/config";

 const authProvider: AuthProvider = {
  // called when the user attempts to log in
@@ -26,7 +25,7 @@ const authProvider: AuthProvider = {
      body: JSON.stringify(
        Object.assign(
          {
-            device_id: storage.getItem("device_id"),
+            device_id: localStorage.getItem("device_id"),
            initial_device_display_name: "Synapse Admin",
          },
          loginToken
@@ -52,11 +51,11 @@ const authProvider: AuthProvider = {
    if (!base_url) {
      // there is some kind of bug with base_url being present in the form, but not submitted
      // ref: https://github.com/etkecc/synapse-admin/issues/14
-      storage.removeItem("base_url")
+      localStorage.removeItem("base_url")
      throw new Error("Homeserver URL is required.");
    }
    base_url = base_url.replace(/\/+$/g, "");
-    storage.setItem("base_url", base_url);
+    localStorage.setItem("base_url", base_url);

    const decoded_base_url = window.decodeURIComponent(base_url);
    let login_api_url = decoded_base_url + (accessToken ? "/_matrix/client/v3/account/whoami" : "/_matrix/client/v3/login");
@@ -76,11 +75,16 @@ const authProvider: AuthProvider = {

      response = await fetchUtils.fetchJson(login_api_url, options);
      const json = response.json;
-      storage.setItem("home_server", accessToken ? json.user_id.split(":")[1] : json.home_server);
-      storage.setItem("user_id", json.user_id);
-      storage.setItem("access_token", accessToken ? accessToken : json.access_token);
-      storage.setItem("device_id", json.device_id);
-      storage.setItem("login_type", accessToken ? "accessToken" : "credentials");
+      localStorage.setItem("home_server", accessToken ? json.user_id.split(":")[1] : json.home_server);
+      localStorage.setItem("user_id", json.user_id);
+      localStorage.setItem("access_token", accessToken ? accessToken : json.access_token);
+      localStorage.setItem("device_id", json.device_id);
+      localStorage.setItem("login_type", accessToken ? "accessToken" : "credentials");
+
+      // when doing access token auth, config is not fetched, so we need to do it here
+      if (accessToken) {
+        await FetchConfig();
+      }

      return Promise.resolve({redirectTo: "/"});
    } catch(err) {
@@ -98,9 +102,9 @@ const authProvider: AuthProvider = {
    }
  },
  getIdentity: async () => {
-    const access_token = storage.getItem("access_token");
-    const user_id = storage.getItem("user_id");
-    const base_url = storage.getItem("base_url");
+    const access_token = localStorage.getItem("access_token");
+    const user_id = localStorage.getItem("user_id");
+    const base_url = localStorage.getItem("base_url");

    if (typeof access_token !== "string" || typeof user_id !== "string" || typeof base_url !== "string") {
      return Promise.reject();
@@ -138,8 +142,8 @@ const authProvider: AuthProvider = {
  logout: async () => {
    console.log("logout");

-    const logout_api_url = storage.getItem("base_url") + "/_matrix/client/v3/logout";
-    const access_token = storage.getItem("access_token");
+    const logout_api_url = localStorage.getItem("base_url") + "/_matrix/client/v3/logout";
+    const access_token = localStorage.getItem("access_token");

    const options: Options = {
      method: "POST",
@@ -171,8 +175,7 @@ const authProvider: AuthProvider = {
  },
  // called when the user navigates to a new location, to check for authentication
  checkAuth: () => {
-    const access_token = storage.getItem("access_token");
-    console.log("checkAuth " + access_token);
+    const access_token = localStorage.getItem("access_token");
    return typeof access_token === "string" ? Promise.resolve() : Promise.reject();
  },
  // called when the user navigates to a new location, to check for permissions / roles
--- a/src/synapse/dataProvider.test.ts
+++ b/src/synapse/dataProvider.test.ts
@@ -1,7 +1,6 @@
 import fetchMock from "jest-fetch-mock";

 import dataProvider from "./dataProvider";
-import storage from "../storage";

 fetchMock.enableMocks();

@@ -10,8 +9,8 @@ beforeEach(() => {
 });

 describe("dataProvider", () => {
-  storage.setItem("base_url", "http://localhost");
-  storage.setItem("access_token", "access_token");
+  localStorage.setItem("base_url", "http://localhost");
+  localStorage.setItem("access_token", "access_token");

  it("fetches all users", async () => {
    fetchMock.mockResponseOnce(
--- a/src/synapse/dataProvider.ts
+++ b/src/synapse/dataProvider.ts
@@ -13,13 +13,12 @@ import {
  withLifecycleCallbacks,
 } from "react-admin";

-import storage from "../storage";
-import { returnMXID } from "./synapse";
-import { MatrixError, displayError } from "../components/error";
+import { returnMXID } from "../utils/mxid";
+import { MatrixError, displayError } from "../utils/error";

 // Adds the access token to all requests
 const jsonClient = async (url: string, options: Options = {}) => {
-  const token = storage.getItem("access_token");
+  const token = localStorage.getItem("access_token");
  console.log("httpClient " + url);
  if (token !== null) {
    options.user = {
@@ -139,6 +138,7 @@ export interface User {
  external_ids: ExternalId[];
  user_type?: string;
  locked: boolean;
+  suspended?: boolean;
 }

 interface Device {
@@ -266,6 +266,31 @@ export interface UsernameAvailabilityResult {
  errcode?: string;
 }

+export interface ServerStatusComponent {
+  ok: boolean;
+  category: string;
+  reason: string;
+  url: string;
+  help: string;
+  label: {
+    url: string;
+    icon: string;
+    text: string;
+  }
+}
+
+export interface ServerStatusResponse {
+  success: boolean;
+  ok: boolean;
+  host: string;
+  results: ServerStatusComponent[];
+}
+
+export interface ServerProcessResponse {
+  locked_at?: string;
+  command?: string;
+}
+
 export interface SynapseDataProvider extends DataProvider {
  deleteMedia: (params: DeleteMediaParams) => Promise<DeleteMediaResult>;
  uploadMedia: (params: UploadMediaParams) => Promise<UploadMediaResult>;
@@ -274,6 +299,8 @@ export interface SynapseDataProvider extends DataProvider {
  setRateLimits: (id: Identifier, rateLimits: RateLimitsModel) => Promise<void>;
  checkUsernameAvailability: (username: string) => Promise<UsernameAvailabilityResult>;
  makeRoomAdmin: (room_id: string, user_id: string) => Promise<{ success: boolean; error?: string; errcode?: string }>;
+  getServerRunningProcess: (etkeAdminUrl: string) => Promise<ServerProcessResponse>;
+  getServerStatus: (etkeAdminUrl: string) => Promise<ServerStatusResponse>;
 }

 const resourceMap = {
@@ -358,6 +385,20 @@ const resourceMap = {
    data: "members",
    total: json => json.total,
  },
+  room_media: {
+    map: (mediaId: string) => ({
+      id: mediaId.replace("mxc://" + localStorage.getItem("home_server") + "/", ""),
+      media_id: mediaId.replace("mxc://" + localStorage.getItem("home_server") + "/", ""),
+    }),
+    reference: (id: Identifier) => ({
+      endpoint: `/_synapse/admin/v1/room/${id}/media`,
+    }),
+    total: json => json.total,
+    data: "local",
+    delete: (params: DeleteParams) => ({
+      endpoint: `/_synapse/admin/v1/media/${localStorage.getItem("home_server")}/${params.id}`,
+    }),
+  },
  room_state: {
    map: (rs: RoomState) => ({
      ...rs,
@@ -401,7 +442,7 @@ const resourceMap = {
    data: "media",
    total: json => json.total,
    delete: (params: DeleteParams) => ({
-      endpoint: `/_synapse/admin/v1/media/${storage.getItem("home_server")}/${params.id}`,
+      endpoint: `/_synapse/admin/v1/media/${localStorage.getItem("home_server")}/${params.id}`,
    }),
  },
  protect_media: {
@@ -418,11 +459,11 @@ const resourceMap = {
  quarantine_media: {
    map: (qm: UserMedia) => ({ id: qm.media_id }),
    create: (params: UserMedia) => ({
-      endpoint: `/_synapse/admin/v1/media/quarantine/${storage.getItem("home_server")}/${params.media_id}`,
+      endpoint: `/_synapse/admin/v1/media/quarantine/${localStorage.getItem("home_server")}/${params.media_id}`,
      method: "POST",
    }),
    delete: (params: DeleteParams) => ({
-      endpoint: `/_synapse/admin/v1/media/unquarantine/${storage.getItem("home_server")}/${params.id}`,
+      endpoint: `/_synapse/admin/v1/media/unquarantine/${localStorage.getItem("home_server")}/${params.id}`,
      method: "POST",
    }),
  },
@@ -549,7 +590,7 @@ function getSearchOrder(order: "ASC" | "DESC") {
 const baseDataProvider: SynapseDataProvider = {
  getList: async (resource, params) => {
    console.log("getList " + resource);
-    const { user_id, name, guests, deactivated, locked, search_term, destination, valid } = params.filter;
+    const { user_id, name, guests, deactivated, locked, suspended, search_term, destination, valid } = params.filter;
    const { page, perPage } = params.pagination as PaginationPayload;
    const { field, order } = params.sort as SortPayload;
    const from = (page - 1) * perPage;
@@ -563,11 +604,12 @@ const baseDataProvider: SynapseDataProvider = {
      guests: guests,
      deactivated: deactivated,
      locked: locked,
+      suspended: suspended,
      valid: valid,
      order_by: field,
      dir: getSearchOrder(order),
    };
-    const homeserver = storage.getItem("base_url");
+    const homeserver = localStorage.getItem("base_url");
    if (!homeserver || !(resource in resourceMap)) throw Error("Homeserver not set");

    const res = resourceMap[resource];
@@ -586,7 +628,7 @@ const baseDataProvider: SynapseDataProvider = {

  getOne: async (resource, params) => {
    console.log("getOne " + resource);
-    const homeserver = storage.getItem("base_url");
+    const homeserver = localStorage.getItem("base_url");
    if (!homeserver || !(resource in resourceMap)) throw Error("Homeserver not set");

    const res = resourceMap[resource];
@@ -598,8 +640,8 @@ const baseDataProvider: SynapseDataProvider = {

  getMany: async (resource, params) => {
    console.log("getMany " + resource);
-    const base_url = storage.getItem("base_url");
-    const homeserver = storage.getItem("home_server");
+    const base_url = localStorage.getItem("base_url");
+    const homeserver = localStorage.getItem("home_server");
    if (!base_url || !(resource in resourceMap)) throw Error("base_url not set");

    const res = resourceMap[resource];
@@ -638,7 +680,7 @@ const baseDataProvider: SynapseDataProvider = {
      dir: getSearchOrder(order),
    };

-    const homeserver = storage.getItem("base_url");
+    const homeserver = localStorage.getItem("base_url");
    if (!homeserver || !(resource in resourceMap)) throw Error("Homeserver not set");

    const res = resourceMap[resource];
@@ -655,7 +697,7 @@ const baseDataProvider: SynapseDataProvider = {

  update: async (resource, params) => {
    console.log("update " + resource);
-    const homeserver = storage.getItem("base_url");
+    const homeserver = localStorage.getItem("base_url");
    if (!homeserver || !(resource in resourceMap)) throw Error("Homeserver not set");

    const res = resourceMap[resource];
@@ -670,7 +712,7 @@ const baseDataProvider: SynapseDataProvider = {

  updateMany: async (resource, params) => {
    console.log("updateMany " + resource);
-    const homeserver = storage.getItem("base_url");
+    const homeserver = localStorage.getItem("base_url");
    if (!homeserver || !(resource in resourceMap)) throw Error("Homeserver not set");

    const res = resourceMap[resource];
@@ -687,7 +729,7 @@ const baseDataProvider: SynapseDataProvider = {

  create: async (resource, params) => {
    console.log("create " + resource);
-    const homeserver = storage.getItem("base_url");
+    const homeserver = localStorage.getItem("base_url");
    if (!homeserver || !(resource in resourceMap)) throw Error("Homeserver not set");

    const res = resourceMap[resource];
@@ -704,7 +746,7 @@ const baseDataProvider: SynapseDataProvider = {

  createMany: async (resource: string, params: { ids: Identifier[]; data: RaRecord }) => {
    console.log("createMany " + resource);
-    const homeserver = storage.getItem("base_url");
+    const homeserver = localStorage.getItem("base_url");
    if (!homeserver || !(resource in resourceMap)) throw Error("Homeserver not set");

    const res = resourceMap[resource];
@@ -726,7 +768,7 @@ const baseDataProvider: SynapseDataProvider = {

  delete: async (resource, params) => {
    console.log("delete " + resource);
-    const homeserver = storage.getItem("base_url");
+    const homeserver = localStorage.getItem("base_url");
    if (!homeserver || !(resource in resourceMap)) throw Error("Homeserver not set");

    const res = resourceMap[resource];
@@ -751,7 +793,7 @@ const baseDataProvider: SynapseDataProvider = {

  deleteMany: async (resource, params) => {
    console.log("deleteMany " + resource, "params", params);
-    const homeserver = storage.getItem("base_url");
+    const homeserver = localStorage.getItem("base_url");
    if (!homeserver || !(resource in resourceMap)) throw Error("Homeserver not set");

    const res = resourceMap[resource];
@@ -798,17 +840,17 @@ const baseDataProvider: SynapseDataProvider = {
   * @returns
   */
  deleteMedia: async ({ before_ts, size_gt = 0, keep_profiles = true }) => {
-    const homeserver = storage.getItem("home_server"); // TODO only required for synapse < 1.78.0
+    const homeserver = localStorage.getItem("home_server"); // TODO only required for synapse < 1.78.0
    const endpoint = `/_synapse/admin/v1/media/${homeserver}/delete?before_ts=${before_ts}&size_gt=${size_gt}&keep_profiles=${keep_profiles}`;

-    const base_url = storage.getItem("base_url");
+    const base_url = localStorage.getItem("base_url");
    const endpoint_url = base_url + endpoint;
    const { json } = await jsonClient(endpoint_url, { method: "POST" });
    return json as DeleteMediaResult;
  },

  uploadMedia: async ({ file, filename, content_type }: UploadMediaParams) => {
-    const base_url = storage.getItem("base_url");
+    const base_url = localStorage.getItem("base_url");
    const uploadMediaURL = `${base_url}/_matrix/media/v3/upload`;

    const { json } = await jsonClient(`${uploadMediaURL}?filename=${filename}`, {
@@ -822,18 +864,18 @@ const baseDataProvider: SynapseDataProvider = {
    return json as UploadMediaResult;
  },
  getFeatures: async (id: Identifier) => {
-    const base_url = storage.getItem("base_url");
+    const base_url = localStorage.getItem("base_url");
    const endpoint_url = `${base_url}/_synapse/admin/v1/experimental_features/${encodeURIComponent(returnMXID(id))}`;
    const { json } = await jsonClient(endpoint_url);
    return json.features as ExperimentalFeaturesModel;
  },
  updateFeatures: async (id: Identifier, features: ExperimentalFeaturesModel) => {
-    const base_url = storage.getItem("base_url");
+    const base_url = localStorage.getItem("base_url");
    const endpoint_url = `${base_url}/_synapse/admin/v1/experimental_features/${encodeURIComponent(returnMXID(id))}`;
    await jsonClient(endpoint_url, { method: "PUT", body: JSON.stringify({ features }) });
  },
  getRateLimits: async (id: Identifier) => {
-    const base_url = storage.getItem("base_url");
+    const base_url = localStorage.getItem("base_url");
    const endpoint_url = `${base_url}/_synapse/admin/v1/users/${encodeURIComponent(returnMXID(id))}/override_ratelimit`;
    const { json } = await jsonClient(endpoint_url);
    return json as RateLimitsModel;
@@ -846,7 +888,7 @@ const baseDataProvider: SynapseDataProvider = {
        return obj;
      }, {});

-    const base_url = storage.getItem("base_url");
+    const base_url = localStorage.getItem("base_url");
    const endpoint_url = `${base_url}/_synapse/admin/v1/users/${encodeURIComponent(returnMXID(id))}/override_ratelimit`;
    if (Object.keys(filtered).length === 0) {
      await jsonClient(endpoint_url, { method: "DELETE" });
@@ -856,7 +898,7 @@ const baseDataProvider: SynapseDataProvider = {
    await jsonClient(endpoint_url, { method: "POST", body: JSON.stringify(filtered) });
  },
  checkUsernameAvailability: async (username: string) => {
-    const base_url = storage.getItem("base_url");
+    const base_url = localStorage.getItem("base_url");
    const endpoint_url = `${base_url}/_synapse/admin/v1/username_available?username=${encodeURIComponent(username)}`;
    try {
      const { json } = await jsonClient(endpoint_url);
@@ -869,7 +911,7 @@ const baseDataProvider: SynapseDataProvider = {
    }
  },
  makeRoomAdmin: async (room_id: string, user_id: string) => {
-    const base_url = storage.getItem("base_url");
+    const base_url = localStorage.getItem("base_url");

    const endpoint_url = `${base_url}/_synapse/admin/v1/rooms/${encodeURIComponent(room_id)}/make_room_admin`;
    try {
@@ -881,6 +923,60 @@ const baseDataProvider: SynapseDataProvider = {
      }
      throw error;
    }
+  },
+  getServerRunningProcess: async (runningProcessUrl: string): Promise<ServerProcessResponse> => {
+    const locked_at = "";
+    const command = "";
+
+    try {
+      const response = await fetch(`${runningProcessUrl}/lock`, {
+        headers: {
+          "Authorization": `Bearer ${localStorage.getItem("access_token")}`
+        }
+      });
+
+      if (!response.ok) {
+        console.error(`Error getting server running process: ${response.status} ${response.statusText}`);
+        return { locked_at, command };
+      }
+      const status = response.status;
+
+      if (status === 200) {
+        const json = await response.json();
+        return json as { locked_at: string; command: string };
+      }
+      if (status === 204) {
+        return { locked_at, command };
+      }
+    } catch (error) {
+      console.error("Error getting server running process", error);
+    }
+
+    return { locked_at, command };
+  },
+  getServerStatus: async (serverStatusUrl: string): Promise<ServerStatusResponse> => {
+    try {
+      const response = await fetch(`${serverStatusUrl}/status`, {
+        headers: {
+          "Authorization": `Bearer ${localStorage.getItem("access_token")}`
+        }
+      });
+      if (!response.ok) {
+        console.error(`Error getting server status: ${response.status} ${response.statusText}`);
+        return { success: false, ok: false, host: "", results: [] };
+      }
+
+      const status = response.status;
+      if (status === 200) {
+        const json = await response.json();
+        const result = { success: true, ...json } as ServerStatusResponse;
+        return result;
+      }
+    } catch (error) {
+      console.error("Error getting server status", error);
+    }
+
+    return { success: false, ok: false, host: "", results: [] };
  }
 };

@@ -914,13 +1010,13 @@ const dataProvider = withLifecycleCallbacks(baseDataProvider, [
    },
    beforeDelete: async (params: DeleteParams<any>, dataProvider: DataProvider) => {
      if (params.meta?.deleteMedia) {
-        const base_url = storage.getItem("base_url");
+        const base_url = localStorage.getItem("base_url");
        const endpoint_url = `${base_url}/_synapse/admin/v1/users/${encodeURIComponent(returnMXID(params.id))}/media`;
        await jsonClient(endpoint_url, { method: "DELETE" });
      }

      if (params.meta?.redactEvents) {
-        const base_url = storage.getItem("base_url");
+        const base_url = localStorage.getItem("base_url");
        const endpoint_url = `${base_url}/_synapse/admin/v1/user/${encodeURIComponent(returnMXID(params.id))}/redact`;
        await jsonClient(endpoint_url, { method: "POST", body: JSON.stringify({ rooms: [] }) });
      }
@@ -931,13 +1027,13 @@ const dataProvider = withLifecycleCallbacks(baseDataProvider, [
      await Promise.all(
        params.ids.map(async id => {
          if (params.meta?.deleteMedia) {
-            const base_url = storage.getItem("base_url");
+            const base_url = localStorage.getItem("base_url");
            const endpoint_url = `${base_url}/_synapse/admin/v1/users/${encodeURIComponent(returnMXID(id))}/media`;
            await jsonClient(endpoint_url, { method: "DELETE" });
          }

          if (params.meta?.redactEvents) {
-            const base_url = storage.getItem("base_url");
+            const base_url = localStorage.getItem("base_url");
            const endpoint_url = `${base_url}/_synapse/admin/v1/user/${encodeURIComponent(returnMXID(id))}/redact`;
            await jsonClient(endpoint_url, { method: "POST", body: JSON.stringify({ rooms: [] }) });
          }
--- a/src/synapse/synapse.test.ts
+++ b/src/synapse/synapse.test.ts
@@ -1,4 +1,4 @@
-import { isValidBaseUrl, splitMxid } from "./synapse";
+import { isValidBaseUrl, splitMxid } from "./matrix";

 describe("splitMxid", () => {
  it("splits valid MXIDs", () =>
--- a/src/synapse/synapse.ts
+++ b/src/synapse/synapse.ts
@@ -1,6 +1,6 @@
 import { Identifier, fetchUtils } from "react-admin";

-import storage from "../storage";
+import { isMXID } from "../utils/mxid";

 export const splitMxid = mxid => {
  const re = /^@(?<name>[a-zA-Z0-9._=\-/]+):(?<domain>[a-zA-Z0-9\-.]+\.[a-zA-Z]+)$/;
@@ -49,51 +49,7 @@ export const getSupportedFeatures = async baseUrl => {
 * @returns array of supported login flows
 */
 export const getSupportedLoginFlows = async baseUrl => {
-  const loginFlowsUrl = `${baseUrl}/_matrix/client/r0/login`;
+  const loginFlowsUrl = `${baseUrl}/_matrix/client/v3/login`;
  const response = await fetchUtils.fetchJson(loginFlowsUrl, { method: "GET" });
  return response.json.flows;
 };
-
-/**
- * Generate a random MXID for current homeserver
- * @returns full MXID as string
- */
-export function generateRandomMxId(): string {
-  const homeserver = storage.getItem("home_server");
-  const characters = "0123456789abcdefghijklmnopqrstuvwxyz";
-  const localpart = Array.from(crypto.getRandomValues(new Uint32Array(8)))
-    .map(x => characters[x % characters.length])
-    .join("");
-  return `@${localpart}:${homeserver}`;
-}
-
-/**
- * Return the full MXID from an arbitrary input
- * @param input  the input string
- * @returns full MXID as string
- */
-export function returnMXID(input: string | Identifier): string {
-  const homeserver = storage.getItem("home_server");
-
-  // Check if the input already looks like a valid MXID (i.e., starts with "@" and contains ":")
-  const mxidPattern = /^@[^@:]+:[^@:]+$/;
-  if (typeof input === 'string' && mxidPattern.test(input)) {
-    return input; // Already a valid MXID
-  }
-
-  // If input is not a valid MXID, assume it's a localpart and construct the MXID
-  const localpart = typeof input === 'string' && input.startsWith('@') ? input.slice(1) : input;
-  return `@${localpart}:${homeserver}`;
-}
-
-
-/**
- * Generate a random user password
- * @returns a new random password as string
- */
-export function generateRandomPassword(length = 64): string {
-  const characters = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz~`!@#$%^&*()_-+={[}]|:;'.?/<>,";
-  return Array.from(crypto.getRandomValues(new Uint32Array(length)))
-    .map(x => characters[x % characters.length])
-    .join("");
-}
--- a/src/utils/config.ts
+++ b/src/utils/config.ts
@@ -0,0 +1,90 @@
+export interface Config {
+  restrictBaseUrl: string | string[];
+  asManagedUsers: RegExp[];
+  menu: MenuItem[];
+  etkeccAdmin?: string;
+}
+
+export interface MenuItem {
+  label: string;
+  icon: string;
+  url: string;
+}
+
+export const WellKnownKey = "cc.etke.synapse-admin";
+
+// current configuration
+let config: Config = {
+  restrictBaseUrl: "",
+  asManagedUsers: [],
+  menu: [],
+  etkeccAdmin: ""
+};
+
+export const FetchConfig = async () => {
+  try {
+    const resp = await fetch("config.json");
+    const configJSON = await resp.json();
+    console.log("Loaded config.json", configJSON);
+    LoadConfig(configJSON);
+  } catch (e) {
+    console.error(e);
+  }
+
+  // if home_server is set, try to load https://home_server/.well-known/matrix/client
+  const homeserver = localStorage.getItem("home_server");
+  if (homeserver) {
+    try {
+      const resp = await fetch(`https://${homeserver}/.well-known/matrix/client`);
+        const configWK = await resp.json();
+      if (!configWK[WellKnownKey]) {
+        console.log(`Loaded https://${homeserver}.well-known/matrix/client, but it doesn't contain ${WellKnownKey} key, skipping`, configWK);
+      } else {
+        console.log(`Loaded https://${homeserver}.well-known/matrix/client`, configWK);
+        LoadConfig(configWK[WellKnownKey]);
+      }
+    } catch (e) {
+      console.log(`https://${homeserver}/.well-known/matrix/client not found, skipping`, e);
+    }
+  }
+
+}
+
+// load config from context
+// we deliberately processing each key separately to avoid overwriting the whole config, loosing some keys, and messing
+// with typescript types
+export const LoadConfig = (context: any) => {
+  if (context?.restrictBaseUrl) {
+    config.restrictBaseUrl = context.restrictBaseUrl as string | string[];
+  }
+
+  if (context?.asManagedUsers) {
+    config.asManagedUsers = context.asManagedUsers.map((regex: string) => new RegExp(regex));
+  }
+
+  let menu: MenuItem[] = [];
+  if (context?.menu) {
+    menu = context.menu as MenuItem[];
+  }
+  if (menu.length > 0) {
+    config.menu = menu;
+  }
+
+  if (context?.etkeccAdmin) {
+    config.etkeccAdmin = context.etkeccAdmin;
+  }
+}
+
+// get config
+export const GetConfig = (): Config => {
+  return config;
+}
+
+
+// clear config
+export const ClearConfig = () => {
+  // config.json
+  config = {} as Config;
+  // session
+  localStorage.clear();
+}
--- a/src/components/date.ts
+++ b/src/components/date.ts
--- a/src/components/error.ts
+++ b/src/components/error.ts
--- a/src/utils/fetchMedia.ts
+++ b/src/utils/fetchMedia.ts
@@ -1,9 +1,6 @@
-import storage from "../storage";
-
 export const getServerAndMediaIdFromMxcUrl = (mxcUrl: string): { serverName: string, mediaId: string } => {
    const re = /^mxc:\/\/([^/]+)\/(\w+)/;
    const ret = re.exec(mxcUrl);
-    console.log("mxcClient " + ret);
    if (ret == null) {
      throw new Error("Invalid mxcUrl");
    }
@@ -15,8 +12,8 @@ export const getServerAndMediaIdFromMxcUrl = (mxcUrl: string): { serverName: str
 export type MediaType = "thumbnail" | "original";

 export const fetchAuthenticatedMedia = async (mxcUrl: string, type: MediaType): Promise<Response> => {
-  const homeserver = storage.getItem("base_url");
-  const accessToken = storage.getItem("access_token");
+  const homeserver = localStorage.getItem("base_url");
+  const accessToken = localStorage.getItem("access_token");

  const { serverName, mediaId } = getServerAndMediaIdFromMxcUrl(mxcUrl);
  if (!serverName || !mediaId) {
@@ -40,4 +37,4 @@ export const fetchAuthenticatedMedia = async (mxcUrl: string, type: MediaType):
  });

  return response;
-};
+};
--- a/src/utils/icons.ts
+++ b/src/utils/icons.ts
@@ -0,0 +1,16 @@
+import AnnouncementIcon from '@mui/icons-material/Announcement';
+import EngineeringIcon from '@mui/icons-material/Engineering';
+import HelpCenterIcon from '@mui/icons-material/HelpCenter';
+import SupportAgentIcon from '@mui/icons-material/SupportAgent';
+import OpenInNewIcon from '@mui/icons-material/OpenInNew';
+
+export const Icons = {
+  Announcement: AnnouncementIcon,
+  Engineering: EngineeringIcon,
+  HelpCenter: HelpCenterIcon,
+  SupportAgent: SupportAgentIcon,
+  Default: OpenInNewIcon,
+  // Add more icons as needed
+};
+
+export const DefaultIcon = Icons.Default;
--- a/src/utils/mxid.ts
+++ b/src/utils/mxid.ts
@@ -0,0 +1,51 @@
+import { Identifier } from "ra-core";
+import { GetConfig } from "../utils/config";
+
+const mxidPattern = /^@[^@:]+:[^@:]+$/;
+
+/*
+ * Check if id is a valid Matrix ID (user)
+ * @param id The ID to check
+ * @returns Whether the ID is a valid Matrix ID
+ */
+export const isMXID = (id: string | Identifier): boolean => mxidPattern.test(id as string);
+
+/**
+ * Check if a user is managed by an application service
+ * @param id The user ID to check
+ * @returns Whether the user is managed by an application service
+ */
+export const isASManaged = (id: string | Identifier): boolean => {
+  return GetConfig().asManagedUsers.some(regex => regex.test(id as string));
+};
+
+/**
+ * Generate a random MXID for current homeserver
+ * @returns full MXID as string
+ */
+export function generateRandomMXID(): string {
+  const homeserver = localStorage.getItem("home_server");
+  const characters = "0123456789abcdefghijklmnopqrstuvwxyz";
+  const localpart = Array.from(crypto.getRandomValues(new Uint32Array(8)))
+    .map(x => characters[x % characters.length])
+    .join("");
+  return `@${localpart}:${homeserver}`;
+}
+
+/**
+ * Return the full MXID from an arbitrary input
+ * @param input  the input string
+ * @returns full MXID as string
+ */
+export function returnMXID(input: string | Identifier): string {
+  const homeserver = localStorage.getItem("home_server");
+
+  // Check if the input already looks like a valid MXID (i.e., starts with "@" and contains ":")
+  if (isMXID(input)) {
+    return input as string; // Already a valid MXID
+  }
+
+  // If input is not a valid MXID, assume it's a localpart and construct the MXID
+  const localpart = typeof input === 'string' && input.startsWith('@') ? input.slice(1) : input;
+  return `@${localpart}:${homeserver}`;
+}
--- a/src/utils/password.ts
+++ b/src/utils/password.ts
@@ -0,0 +1,10 @@
+/**
+ * Generate a random user password
+ * @returns a new random password as string
+ */
+export function generateRandomPassword(length = 64): string {
+  const characters = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz~`!@#$%^&*()_-+={[}]|:;'.?/<>,";
+  return Array.from(crypto.getRandomValues(new Uint32Array(length)))
+    .map(x => characters[x % characters.length])
+    .join("");
+}
--- a/yarn.lock
+++ b/yarn.lock