-
-
Notifications
You must be signed in to change notification settings - Fork 2.1k
Remove local threepids on account deactivation #6426
Conversation
Don't we want to just delete the local threepids from the DB rather than trying to unbind them? |
And does |
True, it is unnecessary/a privacy leak to ask IS' about it.
I believe so, though perhaps we should also remove any pending 3PID validation sessions so a threepid can't be added after deactivation occurs. |
Yeah, we want to 🔥🔥🔥 everything to do with the user |
This looks more involved, so I'll do it in a separate PR. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Regression test 😇
…ctivated_accounts_fix
* commit 'a9c44d400': Remove local threepids on account deactivation (#6426)
* commit '2030193e5': Remove local threepids on account deactivation (#6426)
Threepids bound to identity servers were being removed from a user's account on deactivation, but not local threepids. Probably best to clean these up.