matrix-org / matrix-org/matrix-spec

We have no way to inform clients about new logins on their account.

Open
#2,185 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

improvement security
Dominant language
HTML
Stars
330
Forks
150
Avg merge
2h 21m
Merged PRs (30d)
3

Description

While we inform clients about new E2EE devices on their account, I don't believe we have a way for servers to push clients when new OIDC logins happen. This means users won't be told if someone adds a non-E2EE device on their account.

See also https://github.com/element-hq/element-meta/issues/2930

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the issue text and the related element-meta issue 2930. Identify how Matrix currently informs clients about new E2EE devices and determine the protocol-level change needed for OIDC logins. Done should include an agreed mechanism for servers to notify clients about new non-E2EE logins, but the issue does not name files or tests.

Written by the indexing model from the issue text.

Assessment

Domain
authentication
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.