Skip to content
Snippets Groups Projects
Unverified Commit e154f7cc authored by Andrew Morgan's avatar Andrew Morgan Committed by GitHub
Browse files

Don't check whether a 3pid is allowed to register during password reset (#8414)

* Don't check whether a 3pid is allowed to register during password reset

This endpoint should only deal with emails that have already been approved, and
are attached with user's account. There's no need to re-check them here.

* Changelog
parents b1433bf2 f43c66d2
No related branches found
No related tags found
No related merge requests found
Remove unnecessary 3PID registration check when resetting password via an email address. Bug introduced in v0.34.0rc2.
\ No newline at end of file
...@@ -96,13 +96,6 @@ class EmailPasswordRequestTokenRestServlet(RestServlet): ...@@ -96,13 +96,6 @@ class EmailPasswordRequestTokenRestServlet(RestServlet):
send_attempt = body["send_attempt"] send_attempt = body["send_attempt"]
next_link = body.get("next_link") # Optional param next_link = body.get("next_link") # Optional param
if not check_3pid_allowed(self.hs, "email", email):
raise SynapseError(
403,
"Your email domain is not authorized on this server",
Codes.THREEPID_DENIED,
)
if next_link: if next_link:
# Raise if the provided next_link value isn't valid # Raise if the provided next_link value isn't valid
assert_valid_next_link(self.hs, next_link) assert_valid_next_link(self.hs, next_link)
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment