Client device management (list/rename/delete under UIA) and account deactivation (§10.2.3) #143

New issue

Closed

opened 2026-08-27 19:21:12 +02:00 by thecrealm · 0 comments

thecrealm commented

2026-08-27 19:21:12 +02:00

Owner

Review finding 2026-08-27 (B2). Only the MSC4190 appservice PUT /devices/{deviceId} exists (Endpoints.kt:330-333); no GET /devices, GET/PUT/DELETE /devices/{id}, POST /delete_devices, no /account/deactivate, and no session API for any of them. §10.2.3-5 names deactivation; §1.3 lists device management as a 1.0 MUST deliverable.

Acceptance: endpoint definitions + session methods; UIA via UiaResult; deactivation follows the hard-logout path (stop sync, wipe key material, complete streams — add the stream-completion test); triage lines; tests.

Review finding 2026-08-27 (B2). Only the MSC4190 appservice `PUT /devices/{deviceId}` exists (`Endpoints.kt:330-333`); no `GET /devices`, `GET/PUT/DELETE /devices/{id}`, `POST /delete_devices`, no `/account/deactivate`, and no session API for any of them. §10.2.3-5 names deactivation; §1.3 lists device management as a 1.0 MUST deliverable. Acceptance: endpoint definitions + session methods; UIA via `UiaResult`; deactivation follows the hard-logout path (stop sync, wipe key material, complete streams — add the stream-completion test); triage lines; tests.

thecrealm added the

labels

2026-08-27 19:21:57 +02:00

thecrealm added

now

and removed

labels

2026-09-01 13:17:19 +02:00

thecrealm referenced this issue

2026-09-01 13:21:44 +02:00

Complete the SharedFlow-typed session lanes on close: outboundSends, aggregationUpdates, verificationRequests, metrics (§8) #172

thecrealm referenced this issue from a commit