summary refs log tree commit diff
path: root/synapse/handlers/set_password.py
diff options
context:
space:
mode:
authorDaniel Hoffend <dh@dotlan.net>2019-06-27 19:37:29 +0200
committerRichard van der Hoff <1389908+richvdh@users.noreply.github.com>2019-06-27 18:37:29 +0100
commit9646a593ac555e7b68c6133c29a9f5bac83d1c2f (patch)
tree5713d4de9a618466aba4b6a0eeafeb926cc3a20c /synapse/handlers/set_password.py
parentInclude systemd-python in Debian package to allow logging to journal (#5261) (diff)
downloadsynapse-9646a593ac555e7b68c6133c29a9f5bac83d1c2f.tar.xz
Added possibilty to disable local password authentication (#5092)
Signed-off-by: Daniel Hoffend <dh@dotlan.net>

Diffstat (limited to 'synapse/handlers/set_password.py')
-rw-r--r--synapse/handlers/set_password.py3
1 files changed, 3 insertions, 0 deletions
diff --git a/synapse/handlers/set_password.py b/synapse/handlers/set_password.py
index 5a0995d4fe..d90c9e0108 100644
--- a/synapse/handlers/set_password.py
+++ b/synapse/handlers/set_password.py
@@ -33,6 +33,9 @@ class SetPasswordHandler(BaseHandler):
 
     @defer.inlineCallbacks
     def set_password(self, user_id, newpassword, requester=None):
+        if not self.hs.config.password_localdb_enabled:
+            raise SynapseError(403, "Password change disabled", errcode=Codes.FORBIDDEN)
+
         password_hash = yield self._auth_handler.hash(newpassword)
 
         except_device_id = requester.device_id if requester else None