wholetrans/docs-matrix-spec
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Clarify that logging out deletes devices too

Browse source 
Fixes https://github.com/matrix-org/matrix-doc/issues/1651
This commit is contained in:
Travis Ralston 2019-05-26 21:30:55 -06:00
parent 5c268ef21f
commit 221d9f24fd
2 changed files with 4 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

5
api/client-server/logout.yaml
View file

@ -32,7 +32,7 @@ paths:
summary: Invalidates a user access token
description: |-
Invalidates an existing access token, so that it can no longer be used for
authorization.
authorization. The device associated with the access token is also deleted.
operationId: logout
security:
- accessToken: []
@ -49,7 +49,8 @@ paths:
summary: Invalidates all access tokens for a user
description: |-
Invalidates all access tokens for a user, so that they can no longer be used for
authorization. This includes the access token that made this request.
authorization. This includes the access token that made this request. All devices
for the user are also deleted.
This endpoint does not require UI authorization because UI authorization is
designed to protect against attacks where the someone gets hold of a single access

1
changelogs/client_server/newsfragments/2028.clarification Normal file
View file

@ -0,0 +1 @@
Clarify that devices are deleted upon logout.