dendrite
dendrite copied to clipboard
matrix-org
Document configuration of OpenID Connect
Description: The documentation for configuring OpenID Connect is missing. Dendrite already has support, but it is undocumented, it is only mentioned in the default config and issues and PRs exist.
Also see: #599
OpenID support is limited to authentication, and is for 3rd parties to know if a person has a matrix account on dendrite. It does not:
- give access to that users account.
- give any useful information about that user's account beyond the user ID.
So it is limited in usefulness. Good for bridges and bots if they want to check that a random out-of-bound user has a matrix account but beyond that, nothing helpful. This is why you probably haven't heard much about OpenID support.
Does this mean it is not possible to log in on Dentride using an OpenID Connect provider?
This might be relevant for the folks watching this issue:
It sounds like the Matrix server Rust implementation "Conduit" will get OIDC. Which does not seem to be true for Dendrite.
Hence you might want to watch the other issue too.
This might be relevant for the folks watching this issue:
It sounds like the Matrix server Rust implementation "Conduit" will get OIDC. Which does not seem to be true for Dendrite.
Hence you might want to watch the other issue too.
Dendrite wants to support OIDC natively in the future.
Dendrite wants to support OIDC natively in the future.
Can you clarify which timeframe of future you're referring to? I assume that we're speaking of years here, since the comment from one of the Dendrite members wrote in 2022
This PR is being closed because it isn't a feature we want to maintain going forwards.
And they wrote that only
[w]hen we have more bandwidth as a team, we would be very interested in supporting this natively.
And unfortunately the contribution activity rather went down since 2022. Therefore I saw these things as indicators that this feature is rather not in the foreseeable timeline yet.
Conduit, the Matrix server implementation in Rust, however has an open Merge Request for OpenID Connect where apparently only tidying up and rebasing is needed.
And the reference implementation Synapse has OIDC support anyway. Therefore it looks to me like Dendride is rather the worst bet to go for if OpenID Connect is a feature that is important to you.
But maybe I'm missing something and you have some insights that I don't have? 🤔