Merge pull request #314 from tchapgouv/311-forgot-password-broken-by-…

…element-web-upgrade-to-v11112

add patch to remove authorization header

patches/patches.json

@@ -145,5 +145,11 @@
       "src/components/views/rooms/EventTile.tsx",
       "res/css/views/elements/_TooltipButton.pcss"
     ]
+  },
+  "remove-authorization-header-in-reset-password": {
+    "package": "matrix-react-sdk",
+    "files": [
+      "src/PasswordReset.ts"
+    ]
   }
 }

patches/remove-authorization-header-in-reset-password/matrix-react-sdk+3.59.0.patch

@@ -0,0 +1,17 @@
+diff --git a/node_modules/matrix-react-sdk/src/PasswordReset.ts b/node_modules/matrix-react-sdk/src/PasswordReset.ts
+index df812ba..1020aff 100644
+--- a/node_modules/matrix-react-sdk/src/PasswordReset.ts
++++ b/node_modules/matrix-react-sdk/src/PasswordReset.ts
+@@ -42,6 +42,12 @@ export default class PasswordReset {
+         this.client = createClient({
+             baseUrl: homeserverUrl,
+             idBaseUrl: identityUrl,
++            // :TCHAP: specify useAuthorization header to false to avoid this bug :
++            // https://github.com/tchapgouv/tchap-web-v4/issues/311
++            // if we do not set it to false, a Authorization Bearer token undefined is sent to the server, which refuses the invalid token.
++            // Regression introduced by element-web 1.11.12, solved by upgrading to 1.11.13.
++            useAuthorizationHeader: false
++            // end :TCHAP:
+         });
+         this.clientSecret = this.client.generateClientSecret();
+     }