element-hq/matrix-authentication-service

View on GitHub

Matrix Authentication Service is the user management and authentication layer in the Matrix stack part of the Element Server Suite

Stars: 280
Forks: 111
Open beginner issues: 0
Indexed issues: 195
Avg merge: 3d 1h
Merged PRs (30d): 25

Dominant language: Rust
License: AGPL-3.0
Last GitHub push: Sep 10, 2026
Latest indexed: Sep 15, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Open All

195 open issues indexed

Audit logs (password changes, consent changes, logins) Open

A-Account-Management T-Enhancement

element-hq/matrix-authentication-service#14 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support alternative credentials (2FA, passwordless, webauthn) Open

A-Login-Flow T-Enhancement

element-hq/matrix-authentication-service#18 · 2 comments · 18 reactions · 0 assignees · Indexed Sep 15, 2026
Alternative file-based storage backend Open

A-Configuration S-Tolerable T-Enhancement

element-hq/matrix-authentication-service#23 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support DPoP Open

T-Enhancement

element-hq/matrix-authentication-service#24 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Client management Open

A-Account-Management A-Device-Management A-Frontend T-Enhancement

element-hq/matrix-authentication-service#29 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Extensible metadata on users Open

element-hq/matrix-authentication-service#216 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Send SMS to users Open

A-Account-Management T-Enhancement

element-hq/matrix-authentication-service#264 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Support indieauth as a backend auth provider Open

A-Login-Flow A-Upstream-OAuth O-Uncommon T-Enhancement

element-hq/matrix-authentication-service#531 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Verify the claims from JWT submitted by clients in auth Open

T-Defect

element-hq/matrix-authentication-service#907 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Implement IP and DNS-based filtering in the HTTP client Open

O-Uncommon S-Tolerable T-Enhancement

element-hq/matrix-authentication-service#1018 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Equivalent for "attribute_requirements" in Synapse OIDC Open

A-Policy A-Upstream-OAuth T-Enhancement

element-hq/matrix-authentication-service#1444 · 4 comments · 11 reactions · 0 assignees · Indexed Sep 15, 2026
Support for guest access mode Open

T-Enhancement

element-hq/matrix-authentication-service#1445 · 7 comments · 18 reactions · 0 assignees · Indexed Sep 15, 2026
Friendly server error/500 page Open

T-Enhancement

element-hq/matrix-authentication-service#1488 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Friendly error page for invalid client authorization Open

A-Device-Management A-GraphQL T-Enhancement

element-hq/matrix-authentication-service#1489 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Redirect default authenticated route to home view Open

A-Device-Management A-GraphQL T-Enhancement

element-hq/matrix-authentication-service#1496 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Change avatar Open

A-Device-Management A-Frontend T-Enhancement

element-hq/matrix-authentication-service#1542 · 2 comments · 3 reactions · 0 assignees · Indexed Sep 15, 2026
API to change avatar Open

A-Device-Management A-GraphQL T-Enhancement

element-hq/matrix-authentication-service#1543 · 3 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
"Name does not resolve" error doesn't say which name failed to resolve Open

O-Occasional S-Tolerable T-Enhancement

element-hq/matrix-authentication-service#1556 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Allow scoped access to another users account Open

A-Login-Flow A-Policy O-Occasional S-Major T-Enhancement

element-hq/matrix-authentication-service#1563 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Run Complement and Sytest against a MAS-enabled Synapse deployment Open

element-hq/matrix-authentication-service#1686 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
API to sign out multiple sessions Open

A-GraphQL

element-hq/matrix-authentication-service#1706 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Improve consent screen on iPad Open

A-Frontend T-Enhancement

element-hq/matrix-authentication-service#1765 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
When completing a compatibility SSO login, if the login was already consumed the error page is confusing Open

A-Compatibility-Layer A-Login-Flow O-Occasional S-Major T-Enhancement

element-hq/matrix-authentication-service#1865 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Enhance experience when multiple authentication methods are available Open

A-Account-Management A-Configuration A-Local-Password A-Login-Flow A-Upstream-OAuth S-Major

element-hq/matrix-authentication-service#1874 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Make path of My Account UI configurable Open

A-Configuration O-Occasional S-Minor T-Enhancement

element-hq/matrix-authentication-service#1907 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Documentation on reverse-proxy setup for the compatibility layer is not clear enough Open

A-Configuration A-Documentation O-Frequent S-Tolerable T-Task

element-hq/matrix-authentication-service#1941 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Validate signed software_statements in client registration Open

A-Client-Registration S-Major T-Enhancement

element-hq/matrix-authentication-service#1943 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
CLI utility to generate ULIDs in batch Open

A-Configuration S-Tolerable T-Enhancement

element-hq/matrix-authentication-service#2030 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
`http.public_base` is not behaving as expected without a trailing slash, leading to confusing errors Open

A-Configuration O-Occasional S-Minor T-Task

element-hq/matrix-authentication-service#2256 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Improve the sessions list view Open

A-Device-Management A-Frontend

element-hq/matrix-authentication-service#2265 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Errors when loading the configuration file should be easier to read Open

A-Configuration

element-hq/matrix-authentication-service#2491 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Application Services login Open

element-hq/matrix-authentication-service#2580 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Bad error message: "The authorization request was denied the policy enforced by this service" Open

O-Occasional T-Defect

element-hq/matrix-authentication-service#2643 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
base64 secrets don't seem to work as the client secret between MAS and homeserver Open

element-hq/matrix-authentication-service#2780 · 2 comments · 1 reaction · 0 assignees · Indexed Sep 15, 2026
mas-cli doctor should check issuer in /_matrix/client/unstable/org.matrix.msc2965/auth_issuer Open

O-Occasional T-Enhancement

element-hq/matrix-authentication-service#2800 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Self-service Password Change: UI defects around form validation Open

A-Account-Management A-Frontend T-Defect

element-hq/matrix-authentication-service#2855 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
User ID length limit is not correct (should be 255 for the whole User ID, not just the local part) Open

T-Defect

element-hq/matrix-authentication-service#2861 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 15, 2026
Self-service Password Change: should use a toast to indicate Password success Open

A-Account-Management T-Enhancement

element-hq/matrix-authentication-service#2865 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Templates fail to render when authorization request doesn't contain a state parameter Open

A-Login-Flow T-Defect

element-hq/matrix-authentication-service#2869 · 1 comment · 2 reactions · 0 assignees · Indexed Sep 15, 2026
CSRF token cookie could be improved Open

element-hq/matrix-authentication-service#2877 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Show a nice 404 page when database objects are not found Open

T-Enhancement

element-hq/matrix-authentication-service#2880 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Send an email when password get changed Open

A-Local-Password T-Enhancement

element-hq/matrix-authentication-service#2883 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Docs: include syn2mas docker option Open

element-hq/matrix-authentication-service#2912 · 1 comment · 4 reactions · 0 assignees · Indexed Sep 15, 2026
invalid_redirect_uri error raised by POST /oauth2/registration doesn't explain which policy was violated Open

element-hq/matrix-authentication-service#3036 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Allow to update user info on Upstream Login Open

element-hq/matrix-authentication-service#3117 · 2 comments · 4 reactions · 0 assignees · Indexed Sep 15, 2026
Allow upgrading existing synapse users to upstream oidc providers on import Open

element-hq/matrix-authentication-service#3135 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Document the config merge strategy Open

A-Configuration

element-hq/matrix-authentication-service#3136 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Match the order of auth code and client creds between admin api docs and swagger UI Open

element-hq/matrix-authentication-service#3142 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 15, 2026
Compat login : ability to use a REST provider as a password provider Open

element-hq/matrix-authentication-service#3168 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 15, 2026
make "Import your data" screen optional with upstream IdP Open

A-Upstream-OAuth

element-hq/matrix-authentication-service#3170 · 1 comment · 3 reactions · 0 assignees · Indexed Sep 15, 2026

element-hq/matrix-authentication-service

Get new issues in your inbox