3 ms·
Matrix doesn't actually define how one should do authentication though... every homeserver software is free to implement it however they want.
by ranger_danger 8mo ago
Matrix doesn't actually define how one should do authentication though... every homeserver software is free to implement it however they want.
- Arathorn 8mo agothe main bit of auth which was left unimplemented on matrix-workers was the critical logic which authorizes traffic over federation: https://spec.matrix.org/latest/server-server-api/#authorization-rules https://spec.matrix.org/latest/server-server-api/#authorizat... Auth for clients is also specified in the spec - there is some scope for homeservers to freestyle, but nowadays they have to implement OIDC: https://spec.matrix.org/latest/client-server-api/#client-authentication https://spec.matrix.org/latest/client-server-api/#client-aut...