Proper Support for authentication

[DidiDidi129]

Describe the problem

Currently support for "next gen" authentication isn't included in sable, it would be good if it was

Describe the solution you'd like

Implement support for the same type of authentication that the element team is trying to push, its the new standard. Idk how to explain it

Alternatives considered

No response

Additional context

No response

[dozro]

do you mean the Matrix Authentication Service (MAS)?

as described on the element doc website here

edit: noticed that the link is prob only of very limited help lol

[7w1]

MAS is supported, just use SSO. But it doesn’t work correctly with multiple accounts iirc.

[DidiDidi129]

matrix-org/matrix-spec-proposals#3861

This is what I'm asking bout

Just found it

[DidiDidi129]

MAS is supported, just use SSO. But it doesn’t work correctly with multiple accounts iirc.

Ye but iirc sable uses the outdated method which requires extra setup on the homeserver admin's end.

They're trying to make it the default

[DidiDidi129]

https://areweoidcyet.com

[DidiDidi129]

do you mean the Matrix Authentication Service (MAS)?

as described on the element doc website here

edit: noticed that the link is prob only of very limited help lol

And uhh yes thats what i mean. Thats one possible provider for this

[Just-Insane]

We do support servers that use MAS (the new OIDC-based authentication flow), however, users have to select "use SSO" currently. As a note, issues with multiple SSO accounts should be fixed in v1.9.0 (which should be out shortly).

I'm not sure if there is a "better" way to handle servers using MAS? Maybe by directly opening the MAS login page rather than prompting the user when they put in a server? The potential problem with that is that the default server (matrix.org) uses MAS, so we'd need to make sure we don't automatically redirect for that one?

[DidiDidi129]

While currently it technically works fine, it requires the homeserver/mas admin to use some trickery with reverse proxy's to forward the connections on the login endpoint to mas

Normally it's done automatically by clients such as element/element x

Matrix is moving towards a full OIDC setup, away from the legacy setup

[dozro]

https://areweoidcyet.com

Yeah I see that there is some stuff we still need to do :3