Matrix.org will migrate to MAS on Apr 7th 2025
02.04.2025 15:00 — matrix.org homeserver — QuentinOn Monday 7th of April 2025 at 7am UTC, we will migrate the Matrix.org homeserver's authentication system over to MAS (Matrix Authentication Service) in order to benefit from Next-generation authentication.
The migration will involve up to one hour of downtime.
MSC3861 (Next-generation auth for Matrix, based on OAuth 2.0/OpenID Connect (OIDC)) and its dependent MSCs have progressed sufficiently that the Foundation is confident in MAS and the new next-generation auth APIs. Specifically, all the MSCs are now in or have passed Final Comment Period (FCP) with disposition to merge! 🎉
We expect the MSCs to finish FCP and get merged into the next spec release. The full list of core Next-gen Auth MSCs is:
- MSC3861: Next-generation auth for Matrix, based on OAuth 2.0/OIDC
- MSC2964: Usage of OAuth 2.0 authorization code grant and refresh token grant
- MSC2965: OAuth 2.0 Authorization Server Metadata
- MSC2966: Usage of OAuth 2.0 Dynamic Client Registration in Matrix
- MSC2967: API scopes
- MSC4254: Usage of RFC7009 Token Revocation for Matrix client logout
This is incredibly exciting, reflecting 4 years of work on next-generation auth, and brings with it a new account management interface, additional security, and a better registration experience.