You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Both the OIDC-native login and the OIDC-aware implementation in Element Web rely on the first iteration of MSC2965, which uses the .well-known/matrix/client document to discover the OIDC provider and account management URL.
The MSC got updated to add a new C-S API endpoint used to discover the issuer. That endpoint got implemented in Synapse 1.99.0.
Note that the MSC also moves the account management URL to the OpenID Connect discovery document, which means that, even in OIDC-aware mode, if EW wants to discover this endpoint, it has to:
GET [hs]/_matrix/client/unstable/org.matrix.msc2965/auth_issuer
get the issuer property from that endpoint
GET [issuer]/.well-known/openid-configuration
get the account_management_uri and maybe account_management_actions_supported properties from that document
Your use case
Both the OIDC-native login and the OIDC-aware implementation in Element Web rely on the first iteration of MSC2965, which uses the
.well-known/matrix/client
document to discover the OIDC provider and account management URL.The MSC got updated to add a new C-S API endpoint used to discover the issuer. That endpoint got implemented in Synapse 1.99.0.
Note that the MSC also moves the account management URL to the OpenID Connect discovery document, which means that, even in OIDC-aware mode, if EW wants to discover this endpoint, it has to:
GET [hs]/_matrix/client/unstable/org.matrix.msc2965/auth_issuer
issuer
property from that endpointGET [issuer]/.well-known/openid-configuration
account_management_uri
and maybeaccount_management_actions_supported
properties from that documentHave you considered any alternatives?
No response
Additional context
https://synapse-oidc.lab.element.dev/ is an up-to-date, OIDC-enabled server to help with testing
The text was updated successfully, but these errors were encountered: