Skip to content

Commit f8ff2ad

Browse files
authored
Reword "UI Authorization" to "User-Interactive Authentication" (#2667)
Signed-off-by: Aaron Raimist <[email protected]>
1 parent a91c644 commit f8ff2ad

File tree

3 files changed

+8
-7
lines changed

3 files changed

+8
-7
lines changed

api/client-server/logout.yaml

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -54,11 +54,12 @@ paths:
5454
for the user are also deleted. `Device keys <#device-keys>`_ for the device are
5555
deleted alongside the device.
5656
57-
This endpoint does not require UI authorization because UI authorization is
58-
designed to protect against attacks where the someone gets hold of a single access
59-
token then takes over the account. This endpoint invalidates all access tokens for
60-
the user, including the token used in the request, and therefore the attacker is
61-
unable to take over the account in this way.
57+
This endpoint does not use the `User-Interactive Authentication API`_ because
58+
User-Interactive Authentication is designed to protect against attacks where the
59+
someone gets hold of a single access token then takes over the account. This
60+
endpoint invalidates all access tokens for the user, including the token used in
61+
the request, and therefore the attacker is unable to take over the account in
62+
this way.
6263
operationId: logout_all
6364
security:
6465
- accessToken: []
Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
Reword "UI Authorization" to "User-Interactive Authentication" to be more clear.

specification/client_server_api.rst

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1090,8 +1090,7 @@ Login
10901090

10911091
A client can obtain access tokens using the ``/login`` API.
10921092

1093-
Note that this endpoint does `not` currently use the user-interactive
1094-
authentication API.
1093+
Note that this endpoint does `not` currently use the `User-Interactive Authentication API`_.
10951094

10961095
For a simple username/password login, clients should submit a ``/login``
10971096
request as follows:

0 commit comments

Comments
 (0)