From 0da26cd7e16135c5203548d3ee8581b5da3286ad Mon Sep 17 00:00:00 2001
From: Daniel Wagner-Hall <daniel@matrix.org>
Date: Fri, 29 Jan 2016 16:49:54 +0000
Subject: [PATCH] Specify login behaviour for unknown 3pids

---
 specification/client_server_api.rst | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/specification/client_server_api.rst b/specification/client_server_api.rst
index df73ca28..b13daac1 100644
--- a/specification/client_server_api.rst
+++ b/specification/client_server_api.rst
@@ -332,6 +332,9 @@ follows:
     "password": "<password>"
   }
 
+In the case that the homeserver does not know about the supplied 3pid, the
+homeserver must respond with 403 Forbidden.
+
 .. WARNING::
   Clients SHOULD enforce that the password provided is suitably complex. The
   password SHOULD include a lower-case letter, an upper-case letter, a number