MSC3824: OAuth 2.0 API aware clients

[hughns]

Rendered

• Spec is feature complete
• Reviewed for consistency with MSC3861
• Implementations believed to be complete enough
• Update since MSC3861 was accepted
• Reconcile with MSC4191

Dependencies:

• MSC4191: Account management for OAuth 2.0 API #4191

Servers

• Synapse implementation: https://github.com/sandhose/synapse/tree/quenting/oauth-delegation
• Matrix Authentication Service support within it's compatibility layer: Implementation of MSC3824 actions for compat matrix-authentication-service#221

Clients

• Support in matrix-js-sdk: Implementation of MSC3824 to add action= param on SSO login matrix-js-sdk#2398
• Element Web implementation via matrix-react-sdk: Implementation of MSC3824 to make the client OIDC-aware matrix-react-sdk#8681
• Element Android implementation: Implementation of MSC3824 to make the client OIDC-aware element-hq/element-android#7920
• Element iOS implementation

---

SCT Stuff:

FCP tickyboxes

MSC checklist

[turt2live]

(implementation nor the MSC have been sufficiently reviewed to remove the label - when someone on the SCT is comfortable with where things are at, they'll remove the label. Personally, I haven't gotten as far as deciding if I'm comfortable with it 😅)

[sandhose]

I think an important part of this would also be to be able to advertise what actions are available with each login method, e.g.

{
  "flows": [{
    "type": "m.login.password",
    "actions": ["login"],
  }, {
    "type": "m.login.sso",
    "actions": ["login", "register"]
  }]
}

This would allow clients to properly display what's really available for each login method

[hughns]

I've had an initial go at Synapse support in matrix-org/synapse#12924.

Matrix Authentication Service support within it's compatibility layer is in matrix-org/matrix-authentication-service#221

[turt2live]

Though it's not my concern, we can run the FCP process for these concurrently. If something comes up which blocks MSC4191, it also blocks this one.

@mscbot resolve MSC4191 has not landed

[mscbot]

🔔 This is now entering its final comment period, as per the review above. 🔔

[mscbot]

The final comment period, with a disposition to merge, as per the review above, is now complete.

[zecakeh]

Spec PR: matrix-org/matrix-spec#2272