Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

When updating password of a user, ask whether sessions should be logged out #268

Open
jcgruenhage opened this issue Jun 2, 2022 · 0 comments
Labels
enhancement New feature or request

Comments

@jcgruenhage
Copy link

jcgruenhage commented Jun 2, 2022

I used to reset passwords for people by updating the hash in the database, but I had started using this admin panel a few times by now, and a user has just informed me that they were logged out of every session. While this is documented plainly in the admin API docs of Synapse, the main use of this dashboard is that it reduces the barrier and provides abstractions. In this case though, the abstraction is quite dangerous, as it can lead to accidental data loss. The API, starting with Synapse 1.61.0, does provide the option to no log out users. This option should be exposed if available, and if not, a warning to the admin using the panel should be displayed, that you'll be logging out all of this users devices, and that they might loose access to their whole message history.

@jcgruenhage jcgruenhage changed the title Show warning before updating password, that sessions will be logged out When updating password of a user, ask whether sessions should be logged out Jun 11, 2022
@awesome-michael awesome-michael added the enhancement New feature or request label Jun 13, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants