Drop support for delegating email validation (#13192)
* Drop support for delegating email validation Delegating email validation to an IS is insecure (since it allows the owner of the IS to do a password reset on your HS), and has long been deprecated. It will now cause a config error at startup. * Update unit test which checks for email verification Give it an `email` config instead of a threepid delegate * Remove unused method `requestEmailToken` * Simplify config handling for email verification Rather than an enum and a boolean, all we need here is a single bool, which says whether we are or are not doing email verification. * update docs * changelog * upgrade.md: fix typo * update version number this will be in 1.64, not 1.63 * update version number this one too
Showing
- CHANGES.md 5 additions, 2 deletionsCHANGES.md
- changelog.d/13192.removal 1 addition, 0 deletionschangelog.d/13192.removal
- docs/upgrade.md 15 additions, 0 deletionsdocs/upgrade.md
- docs/usage/configuration/config_documentation.md 12 additions, 16 deletionsdocs/usage/configuration/config_documentation.md
- synapse/app/homeserver.py 1 addition, 2 deletionssynapse/app/homeserver.py
- synapse/config/emailconfig.py 5 additions, 40 deletionssynapse/config/emailconfig.py
- synapse/config/registration.py 10 additions, 1 deletionsynapse/config/registration.py
- synapse/handlers/identity.py 1 addition, 55 deletionssynapse/handlers/identity.py
- synapse/handlers/ui_auth/checkers.py 3 additions, 18 deletionssynapse/handlers/ui_auth/checkers.py
- synapse/rest/client/account.py 34 additions, 73 deletionssynapse/rest/client/account.py
- synapse/rest/client/register.py 20 additions, 39 deletionssynapse/rest/client/register.py
- synapse/rest/synapse/client/password_reset.py 2 additions, 6 deletionssynapse/rest/synapse/client/password_reset.py
- tests/rest/client/test_register.py 1 addition, 1 deletiontests/rest/client/test_register.py
Loading
Please register or sign in to comment