synapse/changelog.d/10184.bugfix at 7f25d7385909ace3a84ee621f014d56734fecd44 - MirrorHub/synapse - tilera Git

MirrorHub/synapse

mirror of https://mau.dev/maunium/synapse.git synced 2024-11-15 06:21:49 +01:00

Patrick Cloke 76f9c701c3

Always require users to re-authenticate for dangerous operations. (#10184 )

Dangerous actions means deactivating an account, modifying an account
password, or adding a 3PID.

Other actions (deleting devices, uploading keys) can re-use the same UI
auth session if ui_auth.session_timeout is configured.

2021-06-16 11:07:28 -04:00

1 line

140 B

Text

Raw Blame History

Always require users to re-authenticate for dangerous operations: deactivating an account, modifying an account password, and adding 3PIDs.