mirror of
https://github.com/vector-im/element-web.git
synced 2024-11-18 14:44:58 +08:00
warn on logout too
This commit is contained in:
parent
5b61d00533
commit
b148619c52
@ -22,6 +22,7 @@ import Notifier from './Notifier';
|
|||||||
import UserActivity from './UserActivity';
|
import UserActivity from './UserActivity';
|
||||||
import Presence from './Presence';
|
import Presence from './Presence';
|
||||||
import dis from './dispatcher';
|
import dis from './dispatcher';
|
||||||
|
import Modal from './Modal';
|
||||||
import DMRoomMap from './utils/DMRoomMap';
|
import DMRoomMap from './utils/DMRoomMap';
|
||||||
|
|
||||||
/**
|
/**
|
||||||
@ -289,19 +290,35 @@ export function logout() {
|
|||||||
return;
|
return;
|
||||||
}
|
}
|
||||||
|
|
||||||
return MatrixClientPeg.get().logout().then(onLoggedOut,
|
var QuestionDialog = sdk.getComponent("dialogs.QuestionDialog");
|
||||||
(err) => {
|
Modal.createDialog(QuestionDialog, {
|
||||||
// Just throwing an error here is going to be very unhelpful
|
title: "Warning",
|
||||||
// if you're trying to log out because your server's down and
|
description:
|
||||||
// you want to log into a different server, so just forget the
|
<div>
|
||||||
// access token. It's annoying that this will leave the access
|
For security, logging out will delete any end-to-end encryption keys from this browser,
|
||||||
// token still valid, but we should fix this by having access
|
making previous encrypted chat history unreadable if you log back in.
|
||||||
// tokens expire (and if you really think you've been compromised,
|
In future this <a href="https://github.com/vector-im/riot-web/issues/2108">will be improved</a>,
|
||||||
// change your password).
|
but for now be warned.
|
||||||
console.log("Failed to call logout API: token will not be invalidated");
|
</div>,
|
||||||
onLoggedOut();
|
button: "Continue",
|
||||||
}
|
onFinished: (confirmed) => {
|
||||||
);
|
if (confirmed) {
|
||||||
|
MatrixClientPeg.get().logout().then(onLoggedOut,
|
||||||
|
(err) => {
|
||||||
|
// Just throwing an error here is going to be very unhelpful
|
||||||
|
// if you're trying to log out because your server's down and
|
||||||
|
// you want to log into a different server, so just forget the
|
||||||
|
// access token. It's annoying that this will leave the access
|
||||||
|
// token still valid, but we should fix this by having access
|
||||||
|
// tokens expire (and if you really think you've been compromised,
|
||||||
|
// change your password).
|
||||||
|
console.log("Failed to call logout API: token will not be invalidated");
|
||||||
|
onLoggedOut();
|
||||||
|
}
|
||||||
|
);
|
||||||
|
}
|
||||||
|
},
|
||||||
|
});
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
Loading…
Reference in New Issue
Block a user