summary refs log tree commit diff
diff options
context:
space:
mode:
authorBen Banfield-Zanin <benbz@matrix.org>2020-09-29 09:17:11 +0100
committerBen Banfield-Zanin <benbz@matrix.org>2020-09-29 09:17:11 +0100
commitcc716784257388574f6a7c8c41d1c6cf04e9fd40 (patch)
tree47210a6102e25db5d02dee2dc52f1aa5b6ea95e9
parentMerge remote-tracking branch 'origin/release-v1.20.1' into bbz/info-mainline-... (diff)
parentDon't check whether a 3pid is allowed to register during password reset (diff)
downloadsynapse-cc716784257388574f6a7c8c41d1c6cf04e9fd40.tar.xz
Merge remote-tracking branch 'origin/anoa/info-mainline-no-check-password-reset-backport' into bbz/info-mainline-1.20.1
-rw-r--r--synapse/rest/client/v2_alpha/account.py7
1 files changed, 0 insertions, 7 deletions
diff --git a/synapse/rest/client/v2_alpha/account.py b/synapse/rest/client/v2_alpha/account.py
index cad3f9bbb7..a206b75541 100644
--- a/synapse/rest/client/v2_alpha/account.py
+++ b/synapse/rest/client/v2_alpha/account.py
@@ -91,13 +91,6 @@ class EmailPasswordRequestTokenRestServlet(RestServlet):
         send_attempt = body["send_attempt"]
         next_link = body.get("next_link")  # Optional param
 
-        if not await check_3pid_allowed(self.hs, "email", email):
-            raise SynapseError(
-                403,
-                "Your email domain is not authorized on this server",
-                Codes.THREEPID_DENIED,
-            )
-
         # The email will be sent to the stored address.
         # This avoids a potential account hijack by requesting a password reset to
         # an email address which is controlled by the attacker but which, after