summary refs log tree commit diff
path: root/synapse
diff options
context:
space:
mode:
authorreivilibre <oliverw@matrix.org>2022-08-19 11:03:29 +0000
committerGitHub <noreply@github.com>2022-08-19 11:03:29 +0000
commit3a245f6cfe3f35f5a37bcd91f3242ef59dc71332 (patch)
treeb047c97f35c54a9d2569fa99ae5ff31172891334 /synapse
parentAdd metrics to track `/messages` response time by room size (#13545) (diff)
downloadsynapse-3a245f6cfe3f35f5a37bcd91f3242ef59dc71332.tar.xz
Fix validation problem that occurs when a user tries to deactivate their account or change their password. (#13563)
Diffstat (limited to 'synapse')
-rw-r--r--synapse/rest/client/account.py6
1 files changed, 3 insertions, 3 deletions
diff --git a/synapse/rest/client/account.py b/synapse/rest/client/account.py
index e5ee63133b..9041e29d6c 100644
--- a/synapse/rest/client/account.py
+++ b/synapse/rest/client/account.py
@@ -196,7 +196,7 @@ class PasswordRestServlet(RestServlet):
                 params, session_id = await self.auth_handler.validate_user_via_ui_auth(
                     requester,
                     request,
-                    body.dict(),
+                    body.dict(exclude_unset=True),
                     "modify your account password",
                 )
             except InteractiveAuthIncompleteError as e:
@@ -219,7 +219,7 @@ class PasswordRestServlet(RestServlet):
                 result, params, session_id = await self.auth_handler.check_ui_auth(
                     [[LoginType.EMAIL_IDENTITY]],
                     request,
-                    body.dict(),
+                    body.dict(exclude_unset=True),
                     "modify your account password",
                 )
             except InteractiveAuthIncompleteError as e:
@@ -316,7 +316,7 @@ class DeactivateAccountRestServlet(RestServlet):
         await self.auth_handler.validate_user_via_ui_auth(
             requester,
             request,
-            body.dict(),
+            body.dict(exclude_unset=True),
             "deactivate your account",
         )
         result = await self._deactivate_account_handler.deactivate_account(