Merge pull request #2042 from matrix-org/travis/1.0/ordered-flows

Clarify that login flows must be completed in order
This commit is contained in:
Travis Ralston 2019-05-29 16:26:22 -06:00 committed by GitHub
commit d2232aca97
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
2 changed files with 5 additions and 2 deletions

View file

@ -0,0 +1 @@
Clarify that login flows are meant to be completed in order.

View file

@ -406,8 +406,10 @@ an additional stage. This exchange continues until the final success.
For each endpoint, a server offers one or more 'flows' that the client can use
to authenticate itself. Each flow comprises a series of stages, as described
above. The client is free to choose which flow it follows. When all stages in a
flow are complete, authentication is complete and the API call succeeds.
above. The client is free to choose which flow it follows, however the flow's
stages must be completed in order. Failing to follow the flows in order must
result in an HTTP 401 response, as defined below. When all stages in a flow
are complete, authentication is complete and the API call succeeds.
User-interactive API in the REST API
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<