Skip to content

MSC2425: Remove Authentication on /submitToken Identity Service API#2425

Closed
anoadragon453 wants to merge 1 commit intoold_masterfrom
anoa/no_auth_on_submit_token
Closed

MSC2425: Remove Authentication on /submitToken Identity Service API#2425
anoadragon453 wants to merge 1 commit intoold_masterfrom
anoa/no_auth_on_submit_token

Conversation

@anoadragon453
Copy link
Copy Markdown
Member

@anoadragon453 anoadragon453 commented Jan 24, 2020

@anoadragon453 anoadragon453 added proposal-in-review proposal A matrix spec change proposal labels Jan 24, 2020
@anoadragon453 anoadragon453 force-pushed the anoa/no_auth_on_submit_token branch from d6434ee to 564252b Compare January 24, 2020 16:41
@anoadragon453 anoadragon453 changed the title Remove Authentication on /submitToken Identity Service API MSC2425: Remove Authentication on /submitToken Identity Service API Jan 24, 2020
@anoadragon453
Copy link
Copy Markdown
Member Author

Just testing mscbot :)

@mscbot fcp cancel

@mscbot
Copy link
Copy Markdown
Collaborator

mscbot commented Mar 23, 2020

This proposal is not in FCP.

@turt2live turt2live self-requested a review March 27, 2020 02:49
@turt2live turt2live added the kind:maintenance MSC which clarifies/updates existing spec label Apr 20, 2020
Copy link
Copy Markdown
Member

@turt2live turt2live left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Otherwise lgtm. Like other MSCs, this needs a backwards compatibility section.

Comment on lines +30 to +31
implementations of v2 3PID validation) already operate this way. The spec is
just wrong here.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The spec is just wrong here

citation needed - please point to the MSC where the spec incorrectly inferred that authentication is required on these endpoints (which would make this MSC not needed) or remove this claim.

@turt2live turt2live added the needs-implementation This MSC does not have a qualifying implementation for the SCT to review. The MSC cannot enter FCP. label Jun 8, 2021
@KitsuneRal
Copy link
Copy Markdown
Member

This can be closed in the light of OIDC, can't it?

@anoadragon453
Copy link
Copy Markdown
Member Author

anoadragon453 commented Dec 1, 2025

This can be closed in the light of OIDC, can't it?

Yes, you should add email addresses in your OIDC provider these days. Good catch!

@turt2live turt2live added the obsolete A proposal which has been overtaken by other proposals label Dec 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind:maintenance MSC which clarifies/updates existing spec needs-implementation This MSC does not have a qualifying implementation for the SCT to review. The MSC cannot enter FCP. obsolete A proposal which has been overtaken by other proposals proposal A matrix spec change proposal

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants