Skip to content

MSC3861: Next-generation auth for Matrix, based on OAuth 2.0/OIDC #3861

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 55 commits into from
Apr 5, 2025
Merged

MSC3861: Next-generation auth for Matrix, based on OAuth 2.0/OIDC #3861

Changes from 42 commits
Commits
Show all changes
55 commits
Select commit Hold shift + click to select a range
4521510
Matrix architecture change to delegate authentication via OIDC
hughns Aug 4, 2022
4550bbc
MSC3861
hughns Aug 4, 2022
00cd76d
typoe
ara4n Aug 9, 2022
b684b84
typoes
ara4n Aug 9, 2022
dd60163
typoes
ara4n Aug 9, 2022
9e58990
Add proposal for Matrix.org Foundation to become member of OpenID Fou…
hughns Aug 9, 2022
fb0dfe7
Update proposals/3861-delegated-oidc-architecture.md
hughns Jan 4, 2023
45c0b1c
Move images inline
hughns Feb 8, 2023
ba0c3dc
Use term OpenID Provider
hughns Feb 8, 2023
ef76bfa
Add note about extending UIA as alternative
hughns Feb 9, 2023
4bffdc9
Add reference to related MSCs
hughns Feb 28, 2023
46adfad
Rework the MSC to better explain the rationale for the change
sandhose Sep 11, 2024
ab746d5
Start writing the actual proposal
sandhose Sep 13, 2024
1f1ef22
Remove unused images
sandhose Sep 16, 2024
dc9d84b
Expand on 'why not just OIDC' and fix some typos
sandhose Sep 16, 2024
7c002e4
Add note on the history of the proposal
sandhose Jan 16, 2025
3a18b78
renamed 3861-delegated-oidc-architecture.md -> 3861-next-generation-a…
sandhose Jan 17, 2025
4928ca8
Define token revocation through MSC4254 & add sample flow
sandhose Jan 17, 2025
f67c1fc
Use the new version of MSC2965
sandhose Jan 17, 2025
185e0a5
List a few potential issues
sandhose Jan 17, 2025
90667ed
Mention areweoidcyet.com
sandhose Jan 17, 2025
5ca8111
Apply suggestions from code review
sandhose Jan 22, 2025
dbede1e
§ about how we keep the ecosystem open
sandhose Jan 22, 2025
56a6278
Update the alternatives table to stop mentioning 'OP'
sandhose Jan 22, 2025
152cd98
Reword how we mention MSC dependencies that are already in the spec
sandhose Jan 22, 2025
f5f02c2
Reformat with prettier
sandhose Jan 22, 2025
d76b9a2
Make it clearer what proposals are adjacente, write about ASes
sandhose Jan 22, 2025
9ff541c
Add links about the current C-S API
sandhose Jan 22, 2025
0a86b69
Add links to the spec
sandhose Jan 22, 2025
2acf438
Add links about OIDC and OAuth 2.0
sandhose Jan 22, 2025
246ee1e
Clarify what the 'system browser' means
sandhose Mar 4, 2025
60e1d74
Give an example of a better email verification flow
sandhose Mar 4, 2025
1b17e45
Typo
sandhose Mar 4, 2025
1724490
Reword what the benefits of using the homeserver's domain name are
sandhose Mar 4, 2025
f16ec4e
Apply suggestions from code review
sandhose Mar 5, 2025
b44f110
Talk more about the implications of scoped access tokens.
sandhose Mar 5, 2025
333a091
Linkify /capabilities
sandhose Mar 5, 2025
85c878a
Clarify that the sample flow is non-normative
sandhose Mar 5, 2025
559762d
Explain why we can't 'just use' OpenID Connect better
sandhose Mar 5, 2025
6f74515
Explain how currently HS can restrict client used
sandhose Mar 5, 2025
e797837
Clarify what 'UIA APIs' mean in this proposal
sandhose Mar 5, 2025
f48fb92
Mention that in theory UIA fallbacks also means implementation comple…
sandhose Mar 5, 2025
a5386b5
Clarify that it doesn't have to be the *default* browser
sandhose Mar 17, 2025
9df174c
Clarify that I meant /login
sandhose Mar 18, 2025
8e11401
Reword around dynamic registration
sandhose Mar 18, 2025
a838912
Reword: /login is not UIA!
sandhose Mar 18, 2025
3fcc854
Add link for "web-based fallback"
sandhose Mar 18, 2025
4a8817d
Typo
sandhose Mar 18, 2025
0960a79
Reword the browser redirect explanation
sandhose Mar 18, 2025
1706907
Remove easter egg
sandhose Mar 18, 2025
5bb8c57
Better outline the rationale for this MSC
sandhose Mar 25, 2025
4899c2f
Remove the redundant point about 'protecting the user's creds'
sandhose Mar 25, 2025
a379a33
Simplify the argument for client registration
sandhose Mar 25, 2025
f398886
Clarify what we aim to deprecate
sandhose Mar 25, 2025
0023db9
Typo
sandhose Mar 28, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading