Skip to main content

change_password_route

tuwunel_api::client::account::change_password

Function change_password_route 

Source 
pub(crate) async fn change_password_route(
    __arg0: State<State>,
    __arg1: ClientIp,
    body: Args<Request>,
) -> Result<Response>
Expand description

ยงPOST /_matrix/client/r0/account/password

Changes the password of this account.

  • Authenticated changes require UIAA to verify the current user
  • Logged-out resets consume a validated email proof and derive the target from its reverse binding
  • Changes the password of the authenticated or proof-bound user
  • The password hash is calculated using argon2 with 32 character salt, the plain password is not saved

If logout_devices is true, authenticated changes apply the following actions to each device except the sender device. Logged-out resets apply them to every device:

  • Invalidates access token
  • Deletes device metadata (device id, device display name, last seen ip, last seen ts)
  • Forgets to-device events
  • Triggers device list updates