diff --git a/content/client-server-api/_index.md b/content/client-server-api/_index.md index dcbaf776..0453a9c2 100644 --- a/content/client-server-api/_index.md +++ b/content/client-server-api/_index.md @@ -1440,8 +1440,8 @@ Server administrators may apply locks to prevent users from usefully using their accounts, for instance, due to safety or security concerns. In contrast to account deactivation, locking is a non-destructive action that can be reversed. This specification describes the behaviour of clients -and servers when an account is locked but deliberately leaves the creation -and removal of locks as a server implementation detail. +and servers when an account is locked. It deliberately leaves the methods +for locking and unlocking accounts as a server implementation detail. When an account is locked, servers MUST return a `401 Unauthorized` error response with an `M_USER_LOCKED` error code and [`soft_logout`](#soft-logout)