search

matrix-org / dendrite

Dendrite is a second-generation Matrix homeserver written in Go!
https://matrix-org.github.io/dendrite/
Apache License 2.0
5.75k stars 676 forks source link

Document configuration of OpenID Connect #2175

Open C0ffeeCode opened 2 years ago

C0ffeeCode commented 2 years ago

Description: The documentation for configuring OpenID Connect is missing. Dendrite already has support, but it is undocumented, it is only mentioned in the default config and issues and PRs exist.

Also see:

599

9p4 commented 2 years ago

I didn't even realize Dendrite had OIDC support until now.

kegsay commented 2 years ago

OpenID support is limited to authentication, and is for 3rd parties to know if a person has a matrix account on dendrite. It does not:

So it is limited in usefulness. Good for bridges and bots if they want to check that a random out-of-bound user has a matrix account but beyond that, nothing helpful. This is why you probably haven't heard much about OpenID support.

C0ffeeCode commented 2 years ago

Does this mean it is not possible to log in on Dentride using an OpenID Connect provider?

gregistech commented 2 years ago

@C0ffeeCode #1297

alexanderadam commented 1 year ago

This might be relevant for the folks watching this issue:

It sounds like the Matrix server Rust implementation "Conduit" will get OIDC. Which does not seem to be true for Dendrite.

Hence you might want to watch the other issue too.

rriemann commented 1 year ago

This might be relevant for the folks watching this issue:

It sounds like the Matrix server Rust implementation "Conduit" will get OIDC. Which does not seem to be true for Dendrite.

Hence you might want to watch the other issue too.

Dendrite wants to support OIDC natively in the future.

alexanderadam commented 1 year ago

Dendrite wants to support OIDC natively in the future.

Can you clarify which timeframe of future you're referring to? I assume that we're speaking of years here, since the comment from one of the Dendrite members wrote in 2022

This PR is being closed because it isn't a feature we want to maintain going forwards.

And they wrote that only

[w]hen we have more bandwidth as a team, we would be very interested in supporting this natively.

And unfortunately the contribution activity rather went down since 2022. Therefore I saw these things as indicators that this feature is rather not in the foreseeable timeline yet.

Conduit, the Matrix server implementation in Rust, however has an open Merge Request for OpenID Connect where apparently only tidying up and rebasing is needed.

And the reference implementation Synapse has OIDC support anyway. Therefore it looks to me like Dendride is rather the worst bet to go for if OpenID Connect is a feature that is important to you.

But maybe I'm missing something and you have some insights that I don't have? 🤔