Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

User-interactive auth on delete device #1168

Merged
merged 2 commits into from
Oct 13, 2016
Merged

Conversation

richvdh
Copy link
Member

@richvdh richvdh commented Oct 12, 2016

(client-side support is matrix-org/matrix-react-sdk#517)

@richvdh richvdh force-pushed the rav/ui_auth_on_device_delete branch from 5a76516 to fbd3866 Compare October 12, 2016 15:16
body = servlet.parse_json_object_from_request(request)

authed, result, params, _ = yield self.auth_handler.check_auth([
[constants.LoginType.PASSWORD],
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm, this is probably fine for now, but isn't going to work with servers that only allow e.g. LDAP auth.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

or worse, only CAS auth :/

We should probably return a 401 rather than a 400 for existing clients that
don't know they have to do the UIA dance to delete a device.
@erikjohnston
Copy link
Member

LGTM

@richvdh richvdh merged commit f7aed3d into develop Oct 13, 2016
@richvdh richvdh deleted the rav/ui_auth_on_device_delete branch October 13, 2016 08:39
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants