element-hq / element-hq/synapse

Reintroduce token cache for MSC3861 OIDC auth

Open
#16,275 0 comments 0 reactions 0 assignees View on GitHub
O-Occasional S-Minor T-Enhancement
Dominant language
Python
Stars
4.6k
Forks
600
Avg merge
5d 22h
Merged PRs (30d)
51

Description

This issue has been migrated from [#16275](https://github.com/matrix-org/synapse/issues/16275).

---

This was added in https://github.com/matrix-org/synapse/pull/16117 and https://github.com/matrix-org/synapse/pull/16125 (note this needed the fix in https://github.com/matrix-org/synapse/pull/16216).

Reverted in https://github.com/matrix-org/synapse/pull/16258 due it being broken.

We should reintroduce these PRs (with fixes) once we have some CI for OIDC.

cc @hughns @sandhose

Contributor guide

Open the contributing guide

Research direction

Start by reviewing PRs #16117, #16125, #16216, and the reverting PR #16258 to understand the broken token-cache implementation and required fixes. Then identify the OIDC CI coverage needed; done means the cache is safely reintroduced and exercised by CI.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
authentication, backend, testing-qa
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.