File tree Expand file tree Collapse file tree 3 files changed +8
-7
lines changed Expand file tree Collapse file tree 3 files changed +8
-7
lines changed Original file line number Diff line number Diff line change @@ -54,11 +54,12 @@ paths:
5454 for the user are also deleted. `Device keys <#device-keys>`_ for the device are
5555 deleted alongside the device.
5656
57- This endpoint does not require UI authorization because UI authorization is
58- designed to protect against attacks where the someone gets hold of a single access
59- token then takes over the account. This endpoint invalidates all access tokens for
60- the user, including the token used in the request, and therefore the attacker is
61- unable to take over the account in this way.
57+ This endpoint does not use the `User-Interactive Authentication API`_ because
58+ User-Interactive Authentication is designed to protect against attacks where the
59+ someone gets hold of a single access token then takes over the account. This
60+ endpoint invalidates all access tokens for the user, including the token used in
61+ the request, and therefore the attacker is unable to take over the account in
62+ this way.
6263 operationId : logout_all
6364 security :
6465 - accessToken : []
Original file line number Diff line number Diff line change 1+ Reword "UI Authorization" to "User-Interactive Authentication" to be more clear.
Original file line number Diff line number Diff line change @@ -1090,8 +1090,7 @@ Login
10901090
10911091A client can obtain access tokens using the ``/login `` API.
10921092
1093- Note that this endpoint does `not ` currently use the user-interactive
1094- authentication API.
1093+ Note that this endpoint does `not ` currently use the `User-Interactive Authentication API `_.
10951094
10961095For a simple username/password login, clients should submit a ``/login ``
10971096request as follows:
You can’t perform that action at this time.
0 commit comments