Skip to content
This repository was archived by the owner on Apr 12, 2024. It is now read-only.

Commit e154f7c

Browse files
Don't check whether a 3pid is allowed to register during password reset (#8414)
* Don't check whether a 3pid is allowed to register during password reset This endpoint should only deal with emails that have already been approved, and are attached with user's account. There's no need to re-check them here. * Changelog
2 parents b1433bf + f43c66d commit e154f7c

File tree

2 files changed

+1
-7
lines changed

2 files changed

+1
-7
lines changed

changelog.d/8414.bugfix

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
Remove unnecessary 3PID registration check when resetting password via an email address. Bug introduced in v0.34.0rc2.

synapse/rest/client/v2_alpha/account.py

Lines changed: 0 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -96,13 +96,6 @@ async def on_POST(self, request):
9696
send_attempt = body["send_attempt"]
9797
next_link = body.get("next_link") # Optional param
9898

99-
if not check_3pid_allowed(self.hs, "email", email):
100-
raise SynapseError(
101-
403,
102-
"Your email domain is not authorized on this server",
103-
Codes.THREEPID_DENIED,
104-
)
105-
10699
if next_link:
107100
# Raise if the provided next_link value isn't valid
108101
assert_valid_next_link(self.hs, next_link)

0 commit comments

Comments
 (0)