diff options
Diffstat (limited to 'lib/csapi/logout.h')
| -rw-r--r-- | lib/csapi/logout.h | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/lib/csapi/logout.h b/lib/csapi/logout.h index e9a7ef89..78f14e40 100644 --- a/lib/csapi/logout.h +++ b/lib/csapi/logout.h @@ -34,11 +34,12 @@ public: * devices for the user are also deleted. `Device keys <#device-keys>`_ for the * device are deleted alongside the device. * - * This endpoint does not require UI authorization because UI authorization is - * designed to protect against attacks where the someone gets hold of a single - * access token then takes over the account. This endpoint invalidates all - * access tokens for the user, including the token used in the request, and - * therefore the attacker is unable to take over the account in this way. + * This endpoint does not use the `User-Interactive Authentication API`_ because + * User-Interactive Authentication is designed to protect against attacks where + * the someone gets hold of a single access token then takes over the account. + * This endpoint invalidates all access tokens for the user, including the token + * used in the request, and therefore the attacker is unable to take over the + * account in this way. */ class LogoutAllJob : public BaseJob { public: |