From 6103cce13414c8f9ea254ea25e6d50d5fa68ebb8 Mon Sep 17 00:00:00 2001 From: Charles Wright Date: Thu, 24 Feb 2022 14:41:49 -0600 Subject: [PATCH] Added updates for the /login endpoint Signed-off-by: Charles Wright --- proposals/3744-flexible-auth.md | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) diff --git a/proposals/3744-flexible-auth.md b/proposals/3744-flexible-auth.md index f9103c0f9..f96bb51a8 100644 --- a/proposals/3744-flexible-auth.md +++ b/proposals/3744-flexible-auth.md @@ -188,6 +188,33 @@ DELETE /account/authenticator/m.login.webauthn/abcdwxyz ``` +### Changes to `POST /login` + +For `/login`, the top-level elements `type` and `password` in the JSON +body are replaced by an `authenticators` object containing authentication +data for one or more auth types. + +For example, with `m.login.password`: + +``` +POST /login +``` + +```json +{ + "identifier": { + "type": "m.id.user", + "user": "cheeky_monkey" + }, + "initial_device_display_name": "Jungle Phone", + "authenticators": { + "m.login.password": { + "password": "ilovebananas" + } + } +} +``` + ## Potential issues