We need the Matrix Authentication Service (MAS)

[jdaviescoates]

In order to take advantage of the latest Matrix features (e.g. QR code login) and use the new better Element X app etc, we need the Matrix Authentication Service (MAS) adding to the Cloudron Synapse package

https://github.com/element-hq/matrix-authentication-service
https://element-hq.github.io/matrix-authentication-service/
https://github.com/element-hq/matrix-authentication-service/releases/tag/v0.12.0
https://github.com/element-hq/matrix-authentication-service/pkgs/container/matrix-authentication-service
https://github.com/element-hq/synapse/issues/18027#issuecomment-2571748011

But I guess the team will understandably probably want to wait until there are a least a few more versions. Oh well.

[girish]

I think the update at https://forum.cloudron.io/topic/12888/has-anyone-got-the-element-x-app-working-with-cloudron-matrix/8 applies here. Do you happen to know any official announcement/note from the matrix team? Not sure why this is so obscure.

[jdaviescoates]

@girish said in We need the Matrix Authentication Service (MAS):

Do you happen to know any official announcement/note from the matrix team? Not sure why this is so obscure.

The best I can offer is a friend who works for Element who told me in a matrix chat:

"They should implement MAS in cloudron. This is the way forward."

[scooke]

[girish]

@jdaviescoates @nebulon also attended the matrix talk in FOSDEM and they mentioned MAS is the way forward. It's in our internal task list, let's see when @vladimir.d can get to it.

[jdaviescoates]

@girish said in We need the Matrix Authentication Service (MAS):

It's in our internal task list, let's see when @vladimir.d can get to it.

Great! Looking forward to it!

[potemkin_ai]

@vladimir.d , @girish , is there any possible estimate on that? Would you be open to accept any help on that?

[joseph]

https://git.cloudron.io/packages/synapse-app is the package and MRs are welcome . (don't have an ETA myself)

[potemkin_ai]

@joseph thank you.

I'm quite limited in time to make the transition, guess I will eject the Synapse service to run it separately then: from what I've read, a separate service required to do the MAS and as the works hasn't been started yet, I guess it will take quite some time to make it to the production on Cloudron (understandable to keep things stable).

[joseph]

@potemkin_ai yeah, we will implement this soon enough. we use matrix for company chat ourselves. matrix.org also switched to mas per https://matrix.org/blog/2025/04/matrix-auth-service/ . matter of time @vladimir.d gets to it

[potemkin_ai]

I believe I assembled a first version, but got stuck with OpenID auth on Cloudron side: https://forum.cloudron.io/topic/13648/openid-uri-configuration-issue-for-synapse-s-mas

I would appreciate any help here - it would be beneficial for the work to be done by @vladimir.d or whoever would be solving the same task.

[andreasdueren]

@potemkin_ai Where is your code? Not an expert but I'm willing to take a look

[jdaviescoates]

@girish said in We need the Matrix Authentication Service (MAS):

@jdaviescoates @nebulon also attended the matrix talk in FOSDEM and they mentioned MAS is the way forward. It's in our internal task list, let's see when @vladimir.d can get to it.

Any update on this?

I just realised 1.0.0 was released two days ago!

https://github.com/element-hq/matrix-authentication-service/releases/tag/v1.0.0

BTW, I just noticed that in my Cloudron Dashboard is says "login with dedicated account":

But it's actually using OIDC:

What's going on there?

Either way, I'm hoping we can have MAS soon and that that will make Element X work with my instance

[potemkin_ai]

Yeah, MAS jumped from all of the sudden from 0.2.something to 1.0 - very well... And that is all with 136 issues opened, including the issue when the user won't be created as it should.

I've ejected Synapse from Cloudron and run it independently - it is kind of working (if you don't mind get your hands dirty in the database), but if you don't need Element Calls - I can't see no real benefits.

Not sure if the question was anyhow directed on me, but I hope that rant might be of some use anyway