Skip to content
This repository has been archived by the owner on Apr 26, 2024. It is now read-only.

Hash passwords earlier in the password reset process #7538

Merged
merged 2 commits into from
May 20, 2020

Conversation

clokep
Copy link
Member

@clokep clokep commented May 20, 2020

This is essentially #7523, but for the password reset process. This makes the two sets of code much more similar:

  • The validation done on both is now the same.
  • The validation on the new password is done before the UI Auth process.
  • Both now hash passwords immediately.

I targeted this against 1.13.0 since it would be nice to include this in a 1.13.1 if one is done. It should retarget fine against develop.

@clokep clokep requested a review from a team May 20, 2020 12:21
Copy link
Member

@richvdh richvdh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm otherwise

synapse/rest/client/v2_alpha/account.py Outdated Show resolved Hide resolved
@clokep clokep changed the base branch from release-v1.13.0 to develop May 20, 2020 13:21
@clokep clokep merged commit 9dc6f30 into develop May 20, 2020
@clokep clokep deleted the clokep/hash-passwords-uia branch May 20, 2020 13:48
phil-flex pushed a commit to phil-flex/synapse that referenced this pull request Jun 16, 2020
This now matches the logic of the registration process as modified in
56db0b1 / matrix-org#7523.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants