Only error if the token doesn't match

5 years ago · e2da3728a0
parent d0fd20fdb4
commit e2da3728a0
1 changed files with 2 additions and 1 deletions
--- a/specification/application_service_api.rst
+++ b/specification/application_service_api.rst
@ -193,7 +193,8 @@ Authorization
 Homeservers MUST include a query parameter named ``access_token`` containing the
 ``hs_token`` from the application service's registration when making requests to
 the application service. Application services MUST verify the provided ``access_token``
-matches their known ``hs_token``, failing the request with a ``M_FORBIDDEN`` error.
+matches their known ``hs_token``, failing the request with a ``M_FORBIDDEN`` error
+if it does not match.

 Legacy routes
 +++++++++++++