Quentin

On Monday 7th of April 2025 at 7am UTC, we will migrate the Matrix.org homeserver's authentication system over to MAS (Matrix Authentication Service) in order to benefit from Next-generation authentication.

The migration will involve up to one hour of downtime.

MSC3861 (Next-generation auth for Matrix, based on OAuth 2.0/OpenID Connect (OIDC)) and its dependent MSCs have progressed sufficiently that the Foundation is confident in MAS and the new next-generation auth APIs. Specifically, all the MSCs are now in or have passed Final Comment Period (FCP) with disposition to merge! 🎉

We expect the MSCs to finish FCP and get merged into the next spec release. The full list of core Next-gen Auth MSCs is:

• MSC3861: Next-generation auth for Matrix, based on OAuth 2.0/OIDC
• MSC2964: Usage of OAuth 2.0 authorization code grant and refresh token grant
• MSC2965: OAuth 2.0 Authorization Server Metadata
• MSC2966: Usage of OAuth 2.0 Dynamic Client Registration in Matrix
• MSC2967: API scopes
• MSC4254: Usage of RFC7009 Token Revocation for Matrix client logout

This is incredibly exciting, reflecting 4 years of work on next-generation auth, and brings with it a new account management interface, additional security, and a better registration experience.

Continue reading…