summary refs log tree commit diff
path: root/changelog.d/10184.bugfix (follow)
Commit message (Collapse)AuthorAgeFilesLines
* 1.37.0rc1Brendan Abolivier2021-06-231-1/+0
|
* Always require users to re-authenticate for dangerous operations. (#10184)Patrick Cloke2021-06-161-0/+1
Dangerous actions means deactivating an account, modifying an account password, or adding a 3PID. Other actions (deleting devices, uploading keys) can re-use the same UI auth session if ui_auth.session_timeout is configured.