Fix resetting password via a phone number (#21)
This commit is contained in:
1
changelog.d/21.bugfix
Normal file
1
changelog.d/21.bugfix
Normal file
@@ -0,0 +1 @@
|
||||
Fix resetting user passwords via a phone number.
|
||||
@@ -339,7 +339,7 @@ class PasswordResetSubmitTokenServlet(RestServlet):
|
||||
|
||||
assert_valid_client_secret(body["client_secret"])
|
||||
|
||||
valid, _ = yield self.datastore.validate_threepid_validation_token(
|
||||
valid, _ = yield self.datastore.validate_threepid_session(
|
||||
body['sid'],
|
||||
body['client_secret'],
|
||||
body['token'],
|
||||
|
||||
Reference in New Issue
Block a user