Skip to content

MSC2181: Add an Error Code for Signaling a Deactivated User #2181

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 12 commits into from
Jul 31, 2019
Merged

MSC2181: Add an Error Code for Signaling a Deactivated User #2181

Changes from 2 commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
bf747b6
Add proposal regarding user deactivated err codes
anoadragon453 Jul 16, 2019
7a08bc9
Remove template bit
anoadragon453 Jul 16, 2019
4f54b8b
Update with review comments
anoadragon453 Jul 16, 2019
028ea89
/available
anoadragon453 Jul 16, 2019
7f1e822
Update proposals/2181-user-deactivated-errcode.md
anoadragon453 Jul 19, 2019
c1dd804
Specify /login should have M_USER_DEACTIVATED
anoadragon453 Jul 19, 2019
063261b
Merge branch 'anoa/user_deactivated_msc' of github.com:matrix-org/mat…
anoadragon453 Jul 19, 2019
f3ca033
kill the hashes
anoadragon453 Jul 22, 2019
a126fbb
Implementation details
anoadragon453 Jul 22, 2019
8c993ae
respond to review comments
anoadragon453 Jul 23, 2019
f3358e4
Fix typo
anoadragon453 Jul 26, 2019
502f5d5
Be less wishy-washy
anoadragon453 Jul 26, 2019
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions proposals/2181-user-deactivated-errcode.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,6 +15,11 @@ returned whenever an action is attempted that requires an activited user, but
the authenticating user is deactivated. The HTTP code to return alongside is
`403`.

This should initially be returned by `/login`, when an identifier of a
deactivated user is sent in the request. The password does not have to be
correct, as some homeserver implementations remove password information on
deactivation.

## Tradeoffs

The alternative is to continue returning an `M_FORBIDDEN`, but send back a
Expand Down