diff options
| -rw-r--r-- | CHANGES.rst | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/CHANGES.rst b/CHANGES.rst index 94b83027e2..9d40b2ac1e 100644 --- a/CHANGES.rst +++ b/CHANGES.rst @@ -3,9 +3,9 @@ Changes in synapse <unreleased> Potentially breaking change: -* Make Client-Server API return 403 for invalid token (PR #3161). +* Make Client-Server API return 401 for invalid token (PR #3161). - This changes the Client-server spec to return a 403 error code instead of 401 + This changes the Client-server spec to return a 401 error code instead of 403 when the access token is unrecognised. This is the behaviour required by the specification, but some clients may be relying on the old, incorrect behaviour. |