anonymousland-synapse/synapse/rest/synapse/client
Richard van der Hoff fa71bb18b5
Drop support for delegating email validation (#13192)
* Drop support for delegating email validation

Delegating email validation to an IS is insecure (since it allows the owner of
the IS to do a password reset on your HS), and has long been deprecated. It
will now cause a config error at startup.

* Update unit test which checks for email verification

Give it an `email` config instead of a threepid delegate

* Remove unused method `requestEmailToken`

* Simplify config handling for email verification

Rather than an enum and a boolean, all we need here is a single bool, which
says whether we are or are not doing email verification.

* update docs

* changelog

* upgrade.md: fix typo

* update version number

this will be in 1.64, not 1.63

* update version number

this one too
2022-07-12 19:18:53 +01:00
..
oidc Add missing type hints to non-client REST servlets. (#10817) 2021-09-15 08:45:32 -04:00
saml2 Use direct references for configuration variables (part 5). (#10897) 2021-09-24 07:25:21 -04:00
__init__.py Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986) 2022-06-14 09:12:08 -04:00
new_user_consent.py Add missing type hints to non-client REST servlets. (#10817) 2021-09-15 08:45:32 -04:00
password_reset.py Drop support for delegating email validation (#13192) 2022-07-12 19:18:53 +01:00
pick_idp.py Remove redundant "coding: utf-8" lines (#9786) 2021-04-14 15:34:27 +01:00
pick_username.py Update the SSO username picker template to comply with SIWA guidelines (#12210) 2022-03-11 13:20:00 +00:00
sso_register.py Remove redundant "coding: utf-8" lines (#9786) 2021-04-14 15:34:27 +01:00
unsubscribe.py Move the "email unsubscribe" resource, refactor the macaroon generator & simplify the access token verification logic. (#12986) 2022-06-14 09:12:08 -04:00