Clarify that an access token is optional on /account/password and /account/deactivate (#1843)

Signed-off-by: Kévin Commaille <zecakeh@tedomum.fr>
Co-authored-by: Richard van der Hoff <1389908+richvdh@users.noreply.github.com>
This commit is contained in:
Kévin Commaille 2024-06-18 17:59:26 +02:00 committed by GitHub
parent 6dfab46268
commit 4e32fca05f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 3 additions and 0 deletions

View file

@ -0,0 +1 @@
Clarify that an access token is optional on the `POST /account/password` and `POST /account/deactivate` endpoints.

View file

@ -387,6 +387,7 @@ paths:
access token provided in the request. Whether other access tokens for access token provided in the request. Whether other access tokens for
the user are revoked depends on the request parameters. the user are revoked depends on the request parameters.
security: security:
- {}
- accessTokenQuery: [] - accessTokenQuery: []
- accessTokenBearer: [] - accessTokenBearer: []
operationId: changePassword operationId: changePassword
@ -592,6 +593,7 @@ paths:
parameter because the homeserver is expected to sign the request to the parameter because the homeserver is expected to sign the request to the
identity server instead. identity server instead.
security: security:
- {}
- accessTokenQuery: [] - accessTokenQuery: []
- accessTokenBearer: [] - accessTokenBearer: []
operationId: deactivateAccount operationId: deactivateAccount