matrix-docker-ansible-deploy icon indicating copy to clipboard operation
matrix-docker-ansible-deploy copied to clipboard

Shared Secret auth doesn't register the login type correctly

Open yspreen opened this issue 1 year ago • 3 comments

I have

matrix_synapse_ext_password_provider_shared_secret_auth_enabled: true
matrix_synapse_ext_password_provider_shared_secret_auth_shared_secret: 'xxx'

and yet, when I use the example script from their repo:

{'errcode': 'M_UNKNOWN', 'error': 'Unknown login type com.devture.shared_secret_auth'}

if I GET the login endpoint, there is

{
  "flows": [
    {
      "type": "m.login.password"
    },
    {
      "type": "m.login.application_service"
    }
  ]
}

yspreen avatar Aug 25 '22 06:08 yspreen

After some digging, I found this commit that seems to disable it.

I think it should me mentioned in the doc.

am I breaking my element installation with this?

yspreen avatar Aug 25 '22 06:08 yspreen

after setting matrix_synapse_ext_password_provider_shared_secret_auth_com_devture_shared_secret_auth_support_enabled, everything is now working. including element login. hard to say what caused the mentioned commit to disable it, and if that bug is still here

yspreen avatar Aug 25 '22 06:08 yspreen

matrix-synapse-shared-secret-auth supports 2 different login types:

  • com.devture.shared_secret_auth
  • m.login.password

More details here: https://github.com/devture/matrix-synapse-shared-secret-auth#configuring

The playbook intentionally disables com.devture.shared_secret_auth because of https://github.com/vector-im/element-web/issues/19605

You can use m.login.password, however. See the m.login.password example here: https://github.com/devture/matrix-synapse-shared-secret-auth#usage

Alternatively, enable com.devture.shared_secret_auth using matrix_synapse_ext_password_provider_shared_secret_auth_com_devture_shared_secret_auth_support_enabled.

spantaleev avatar Aug 25 '22 06:08 spantaleev