mirror of
https://github.com/element-hq/synapse.git
synced 2024-12-19 09:31:35 +03:00
dbdebc2c6f
This changes the default behaviour of Synapse to send password reset emails itself rather than through an identity server. The reasoning behind the change is to prevent a malicious identity server from being able to initiate a password reset attempt and then answering it, successfully resetting their password, all without the user's knowledge. This also aides in decentralisation by putting less trust on the identity server itself, which traditionally is quite centralised. If users wish to continue with the old behaviour of proxying password reset requests through the user's configured identity server, they can do so by setting email.enable_password_reset_from_is to True in Synapse's config. Users should be able that with that option disabled (the default), password resets will now no longer work unless email sending has been enabled and set up correctly.
5 lines
86 B
Text
5 lines
86 B
Text
here's the link you forgetful person you!
|
|
|
|
{{ link }}
|
|
|
|
now get on back to happy town!
|