synapse/changelog.d/10184.bugfix at 8070b893dbc7b9e17b4843f70e4f4e32a52ce58a - MirrorHub/synapse - tilera Git

MirrorHub/synapse

mirror of https://mau.dev/maunium/synapse.git synced 2024-11-14 22:11:47 +01:00

Patrick Cloke 76f9c701c3

Always require users to re-authenticate for dangerous operations. (#10184 )

Dangerous actions means deactivating an account, modifying an account
password, or adding a 3PID.

Other actions (deleting devices, uploading keys) can re-use the same UI
auth session if ui_auth.session_timeout is configured.

2021-06-16 11:07:28 -04:00

1 line

140 B

Text

Raw Blame History

Always require users to re-authenticate for dangerous operations: deactivating an account, modifying an account password, and adding 3PIDs.