Merge branch 'main' into refresh_token_spec

This commit is contained in:
Hubert Chathi 2022-05-31 16:16:27 -04:00
commit 84747f90e8
37 changed files with 179 additions and 87 deletions

View file

@ -1107,8 +1107,8 @@ as follows:
}
```
As with [token-based]() interactive login, the `token` must encode the
user ID. In the case that the token is not valid, the homeserver must
The `token` must encode the user ID, since there is no other identifying
data in the request. In the case that the token is not valid, the homeserver must
respond with `403 Forbidden` and an error code of `M_FORBIDDEN`.
If the homeserver advertises `m.login.sso` as a viable flow, and the