OpenCloud
/
MatrixSynapse
mirror of https://github.com/matrix-org/synapse
1
0
Fork 0
Code Issues Releases Wiki Activity

Merge commit '4d3ebc' into matrix-org-hotfixes

pull/8675/head
Richard van der Hoff 2020-05-07 14:16:52 +01:00
parent ae4f6140f1 4d3ebc3620
commit 617541c4c6
1 changed files with 0 additions and 12 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
synapse/handlers/auth.py
View File

@ -329,18 +329,6 @@ class AuthHandler(BaseHandler):
# isn't arbitrary. # isn't arbitrary.
clientdict = session.clientdict clientdict = session.clientdict
# Ensure that the queried operation does not vary between stages of
# the UI authentication session. This is done by generating a stable
# comparator based on the URI, method, and body (minus the auth dict)
# and storing it during the initial query. Subsequent queries ensure
# that this comparator has not changed.
comparator = (uri, method, clientdict)
if (session.uri, session.method, session.clientdict) != comparator:
raise SynapseError(
403,
"Requested operation has changed during the UI authentication session.",
)
if not authdict: if not authdict:
raise InteractiveAuthIncompleteError( raise InteractiveAuthIncompleteError(
self._auth_dict_for_flows(flows, session.session_id) self._auth_dict_for_flows(flows, session.session_id)