element-hq / element-hq/element-android

Unable to verify users who were previously trusted but are no longer cross-signed

Open
#3,361 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Kotlin
Stars
3.7k
Forks
917
Avg merge
8d 20h
Merged PRs (30d)
1

Description

#### Describe the bug
Once a trusted user has signed out of all sessions, they can never be verified again. It works fine on Web.

#### To Reproduce
Steps to reproduce the behavior:
1. Create account via Element in incognito
2. Message main account from new account
3. Verify the conversation from Element Web/Desktop
4. Log out the new account (either by closing the incognito window, or simply by logging out)
5. Log in again
6. The main account now sees it correctly as unverified
7. Verify it from Element Android
8. The account is still unverified on both devices. On EA, all sessions are shown as trusted but the profile as a whole is untrusted. On EW, the session is not trusted and nor is the profile.
9. Verify the account from Element Web
10. The account is now marked as trusted in Web, but unchanged on Android.

#### Expected behavior
Verifying the session on web or android should both result in the whole user being verified (provided all sessions are verified)

#### Screenshots
![image](https://user-images.githubusercontent.com/5600962/118658505-5ae02e80-b7e4-11eb-9c7d-9c88b39ab3d5.png)

#### Smartphone (please complete the following information):
- Device: Xiaomi Mi 9
- OS: Android 9 (unofficial)

#### Additional context
- Play Store 1.1.7
- Homeserver: matrix.org

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.