* Adapt OAuth2 implementation to Matrix Spec v1.18 * Handle more cases of oidc->oauth * Fix test * Fix read back of oauth2 context * Iterate * Fix tests * Discard changes to apps/web/playwright/e2e/settings/account-user-settings-tab.spec.ts * Fix test * Fix test * Fix test * Potential fix for pull request finding 'Unused variable, import, function or class' Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com> * Iterate * Iterate * Fix test --------- Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com>
1.0 KiB
1.0 KiB
OAuth2 and delegated authentication
See https://areweoidcyet.com/client-implementation-guide/ for implementation details.
Element Web uses /auth_metadata to discover the configured provider. Where a valid configuration is discovered, OAuth2 native login flow will be the only login option offered. Element Web will attempt to dynamically register with the configured OP. Then, authentication will be completed as described here.
Statically configured OAuth2 clients
Clients that are already registered with the OP can configure their client_id in config.json.
Where static configuration exists for the OP dynamic client registration will not be attempted.
{
"oidc_static_clients": {
"https://dummyoidcprovider.com/": {
"client_id": "abc123"
}
}
}