wholetrans/docs-matrix-spec
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Suggest the use of a unstable flag

Browse source
This commit is contained in:
Andrew Morgan 2019-09-17 17:01:18 +01:00
parent 1e69a7f3f2
commit 169174e00b
1 changed files with 7 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

12
proposals/2290-separate-threepid-bind-hs.md
View file

@ -172,17 +172,19 @@ about hundreds of fake threepid additions to a user's account).
## Backwards compatibility ## Backwards compatibility
A new flag will be added to `/versions`' unstable_features section,
`m.separate_add_and_bind`. If this flag is present and set to `true`, then
clients should use the new API endpoints to carry out threepid adds and
binds. If this flag is not present or set to `false`, clients should use
`/account/3pid`, being aware that they can only bind threepids to the
homeserver, not the identity server.
Old matrix clients will continue to use the `/account/3pid` endpoint. This Old matrix clients will continue to use the `/account/3pid` endpoint. This
MSC removes the `bind` parameter and forces `/account/3pid` calls to act as MSC removes the `bind` parameter and forces `/account/3pid` calls to act as
if `bind` was set to `false`. Old clients will still be able to add 3pids to if `bind` was set to `false`. Old clients will still be able to add 3pids to
the homeserver, but not bind to the identity server. New homeservers must the homeserver, but not bind to the identity server. New homeservers must
ignore any `id_server` information passed to this endpoint. ignore any `id_server` information passed to this endpoint.
New matrix clients running with old homeservers should try their desired
endpoint (either `/account/3pid/add` or `/account/3pid/bind`) and on
receiving a HTTP `404` error code, should either attempt to use
`/account/3pid` with the `bind` parameter or give up, at their discretion.
## Security considerations ## Security considerations
Reducing the homeserver's trust in identity servers should be a boost to Reducing the homeserver's trust in identity servers should be a boost to