00c6a866e2
Historical note: this was originally a series of several commits, spread out over several weeks. They have been squashed together to make `git annotate` work properly. The original commits were: * 91ab3934 <Will> 2021-01-25 21:16:42 -0800 Add raw API end event schemas into /data directory * aae22f47 <Will> 2021-01-25 21:33:06 -0800 Remove non-data files * 1092d4ca <Will> 2021-01-26 20:41:33 -0800 Add data-compatiuble extension (.yaml) to all data files that currently omit one * 21060109 <Will> 2021-01-26 20:57:28 -0800 Remove symlink to event-schemas, and update openAPI schema paths accordingly * 4f633845 <Travis Ralston> 2021-04-12 21:54:54 -0600 Fix event schema examples too * 301c7b2f <Will> 2021-02-05 10:15:42 -0800 Restore docs describing OpenAPI extensions that we use
73 lines
2.6 KiB
YAML
73 lines
2.6 KiB
YAML
# Copyright 2016 OpenMarket Ltd
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
swagger: '2.0'
|
|
info:
|
|
title: "Matrix Client-Server Registration and Login API"
|
|
version: "1.0.0"
|
|
host: localhost:8008
|
|
schemes:
|
|
- https
|
|
- http
|
|
basePath: /_matrix/client/%CLIENT_MAJOR_VERSION%
|
|
consumes:
|
|
- application/json
|
|
produces:
|
|
- application/json
|
|
securityDefinitions:
|
|
$ref: definitions/security.yaml
|
|
paths:
|
|
"/logout":
|
|
post:
|
|
summary: Invalidates a user access token
|
|
description: |-
|
|
Invalidates an existing access token, so that it can no longer be used for
|
|
authorization. The device associated with the access token is also deleted.
|
|
`Device keys <#device-keys>`_ for the device are deleted alongside the device.
|
|
operationId: logout
|
|
security:
|
|
- accessToken: []
|
|
responses:
|
|
200:
|
|
description: The access token used in the request was successfully invalidated.
|
|
schema:
|
|
type: object
|
|
properties: {}
|
|
tags:
|
|
- Session management
|
|
"/logout/all":
|
|
post:
|
|
summary: Invalidates all access tokens for a user
|
|
description: |-
|
|
Invalidates all access tokens for a user, so that they can no longer be used for
|
|
authorization. This includes the access token that made this request. All devices
|
|
for the user are also deleted. `Device keys <#device-keys>`_ for the device are
|
|
deleted alongside the device.
|
|
|
|
This endpoint does not use the `User-Interactive Authentication API`_ because
|
|
User-Interactive Authentication is designed to protect against attacks where the
|
|
someone gets hold of a single access token then takes over the account. This
|
|
endpoint invalidates all access tokens for the user, including the token used in
|
|
the request, and therefore the attacker is unable to take over the account in
|
|
this way.
|
|
operationId: logout_all
|
|
security:
|
|
- accessToken: []
|
|
responses:
|
|
200:
|
|
description: The user's access tokens were successfully invalidated.
|
|
schema:
|
|
type: object
|
|
properties: {}
|
|
tags:
|
|
- Session management
|