impl MSC2965: self-advertise as OIDC authentication provider

MSC2965 proposes to let the homeserver advertise its current OIDC authentication
issuer. These changes let conduwuit advertise itself as the issuer when
[global.auth.enable_oidc_login] is set. It also advertises its account management
endpoint if [global.auth.enable_oidc_account_management] is set.

None of these endpoints are implemented. This commit only implements the bare
advertisement, as requested by the MSC.
This commit is contained in:
lafleur 2025-04-01 09:29:25 +02:00 committed by nexy7574
commit db3a2dc468
No known key found for this signature in database
GPG key ID: 0FA334385D0B689F
9 changed files with 157 additions and 3 deletions

View file

@ -1624,6 +1624,20 @@
#
#dual_protocol = false
[global.auth]
# Use this homeserver as the OIDC authentication reference.
# Note that the legacy Matrix authentication still will work.
# Unset by default.
#
#enable_oidc_login =
# The URL where the user is able to access the account management
# capabilities of the homeserver. Only used if `enable_oidc_login` is set.
# Unset by default.
#
#enable_oidc_account_management =
[global.well_known]
# The server URL that the client well-known file will serve. This should