v0.9.0

matrix-authentication-service will soon be forked by Element under an AGPLv3.0 licence (with CLA, for proprietary dual licensing). You can read more about this here:

• https://matrix.org/blog/2023/11/06/future-of-synapse-dendrite/
• https://element.io/blog/element-to-adopt-agplv3/

Any changes needed by server administrators will be communicated via our usual announcements channels, but we are striving to make this as seamless as possible.

Breaking changes

Configuration options

The following options are now invalid:

• the jaeger and zipkin values in telemetry.tracing.exporter (see below)
• the b3 and b3multi values in telemetry.tracing.propagator (see below)
• the spa resource type in http.listeners[*].resources. This was deprecated before the 0.1.0 release, but only showed a warning. It is now removed.

The mas-cli config dump and mas-cli config generate commands now strip less common options if they are kept to their default value.
This means that those commands will skip the telemetry, policy, templates, upstream_oauth2, branding and experimental sections if no custom value is set.
Users should remove those sections from their configuration file if they haven't set any custom value and want to simplify it.

Tracing exporters

The Zipkin and Jaeger traces exporters have been removed.
Users should migrate to using the OTLP exporter instead.

The OTLP exporter now uses OTLP over HTTP instead of OTLP over gRPC.

The b3 and b3multi propagators have been removed.
Users should migrate to using the tracecontext or the jaeger propagator instead.

Pre-built binaries now use glibc instead of musl

Pre-built Linux binaries attached to the releases are now built with glibc instead of musl.
This means that the binaries are not fully static anymore, as it requires glibc 2.17 or later, which is available on most systems.

Notable features

Easier upgrades (#2432)

MAS now apply database schema upgrades and configuration synchronisation automatically on startup.
This means upgrading MAS, most of time, should be as simple as replacing the image or binary and restarting the service.

New translations

MAS is now available in Chinise (Simplified) and Dutch, in addition to the already existing English, French and German translations.

This is thanks to community contributions, and we are always looking for more translations!
Head to the Localazy project to help translate MAS in your language.

Account UI improvements

The account management UI has been generally improved.
The general layout is more streamlined (#2371, #2364, #2362), with a better focus on the main actions.

A particular focus was put on the sessions management, with a new card-based list of sessions (#2393).
This list now shows more relevant information, like the kind of device, browser and operating system used (#2386, #2388)

The indidividual session view has also been improved (#2439, #2460), with more relevant information being displayed.

Thanks to many internal changes (#2351, #2359, #2369) , the UI should feel more responsive and faster, especially on slow connections.

Homeserver integration (#2421)

MAS integrates a bit more tightly with Synapse, to make sure only valid accounts are created.
This should help prevent de-synchronization between the homeserver and MAS.

Upstream OAuth 2.0 provider improvements (#2430)

Arbitrary parameters can now be passed to the upstream OAuth 2.0 provider during the authorization request.

---

Docker image

Regular image:

• Digest:

  ghcr.io/matrix-org/matrix-authentication-service@sha256:254134dba1887d792f727ddb88c8a8bf4b9f905f4306a32c12cb205de2ac681a
  

• Tags:

  ghcr.io/matrix-org/matrix-authentication-service:0.9.0
  ghcr.io/matrix-org/matrix-authentication-service:0.9
  ghcr.io/matrix-org/matrix-authentication-service:0
  ghcr.io/matrix-org/matrix-authentication-service:sha-e3944d1
  ghcr.io/matrix-org/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/matrix-org/matrix-authentication-service@sha256:85911dab839aec9b179e2605c0dce39f76b2383c6204d6fb3cf939653a826618
  

• Tags:

  ghcr.io/matrix-org/matrix-authentication-service:0.9.0-debug
  ghcr.io/matrix-org/matrix-authentication-service:0.9-debug
  ghcr.io/matrix-org/matrix-authentication-service:0-debug
  ghcr.io/matrix-org/matrix-authentication-service:sha-e3944d1-debug
  ghcr.io/matrix-org/matrix-authentication-service:latest-debug
  

syn2mas migration tool:

• Digest:

  ghcr.io/matrix-org/matrix-authentication-service/syn2mas@sha256:e8be5e40cada3355e1405442d29919195033124b05ec664cc6b689c2a18231b1
  

• Tags:

  ghcr.io/matrix-org/matrix-authentication-service/syn2mas:0.9.0
  ghcr.io/matrix-org/matrix-authentication-service/syn2mas:0.9
  ghcr.io/matrix-org/matrix-authentication-service/syn2mas:0
  ghcr.io/matrix-org/matrix-authentication-service/syn2mas:sha-e3944d1
  ghcr.io/matrix-org/matrix-authentication-service/syn2mas:latest
  

Full list of pull requests, excluding dependencies updates

• Replace jotai-urql with just urql by @sandhose in #2351
• Replace Jotai with @tanstack/router by @sandhose in #2359
• Update the email list to match the new design by @sandhose in #2362
• Move the cross-signing reset to its own page by @sandhose in #2364
• Fix the zh-Hans translation by @sandhose in #2367
• Make sure the locale fallback works as expected by @sandhose in #2368
• Remove unnecessary debugging printf in i18n crate by @sandhose in #2370
• Make the layout wider on "account" pages by @sandhose in #2371
• Use query parameters for sessions pagination by @sandhose in #2369
• Ignore Synapse appservice users in syn2mas by @jaywink in #2283
• Remove the unique constraint on device IDs on compatibility sessions by @sandhose in #2378
• Save which user session created a compat session by @sandhose in #2383
• Bump all frontend dependencies by @sandhose in #2384
• Make all compound themes and all locales available in Storybook by @sandhose in #2385
• Record user agents on OAuth 2.0 and compat sessions by @sandhose in #2386
• Parse User Agents on the backend side by @sandhose in #2388
• Make sure the dummy router finished loading in the test environment by @sandhose in #2403
• Make the end session button more flexible by @sandhose in #2404
• Fix dialogs being blurry and not scrollable by @sandhose in #2405
• Fix the dark high-constrast theme in Storybook by @sandhose in #2406
• Make sure the upstream OAuth callback pages are proxied to the backend by @sandhose in #2407
• Implement the user profile edit modal & new account header by @sandhose in #2408
• Bump Clippy to 1.75 and Rust to 1.76 by @sandhose in #2417
• Better session list by @sandhose in #2393
• Ask Homeserver for username availability upon registration by @sandhose in #2421
• Add Podman support to policies Makefile by @AndrewFerr in #2425
• Add arbitrary OAuth 2.0 parameters on the authorization endpoint by @sandhose in #2430
• Automatically sync the configuration on server startup by @sandhose in #2432
• Docs tweaks by @AndrewFerr in #2426
• Bump whoami, mio and iana-time-zone in the Cargo.lock file by @sandhose in #2450
• Use rustls-platform-verifier for cert validation by @sandhose in #2449
• Update session details styles to closer match latest Figma by @t3chguy in #2439
• Make the mas-cli manage verify-email mark the email as primary by @sandhose in #2455
• fix(register.rego): increase allowed username length to 64 by @AlexanderBabel in #2471
• Do not expose error type from mas-keystore in mas-oidc-client by @zecakeh in #2469
• Add scopes to compat session detail view by @t3chguy in #2460
• Upgrade OTEL and remove support for Jaeger and Zipkin exporters by @sandhose in #2456
• Render browser icon for compat & browser sessions by @t3chguy in #2478
• Add Electron user-agent parsing for Element Desktop/Nightly by @t3chguy in #2461
• frontend: upgrade @tanstack/react-router by @sandhose in #2492
• dependabot: Include storybook-react-i18next in the storybook group by @sandhose in #2506
• Put Keystore match variant behind feature flag by @zecakeh in #2516
• Moved some dependencies in the workspace and upgrade some dependencies by @sandhose in #2517
• Add account management URL for clients by @zecakeh in #2470
• Replace parse-display with manual Display/FromStr impls by @sandhose in #2518
• Use OTEL semantic conventions constants for most attributes by @sandhose in #2519
• Cleanup configuration handling by @sandhose in #2535
• ci: build binaries using glibc instead of musl by @sandhose in #2540
• Ignore RUSTSEC-2024-0320 as we don't use the unmaintained crate in production by @sandhose in #2547
• Fix release workflow by @sandhose in #2546
• Bump frontend deps, replace i18next modules and other frontend fixes by @sandhose in #2563
• Create the AccountManagementError enum by @zecakeh in #2574

New Contributors

• @AndrewFerr made their first contribution in #2425
• @AlexanderBabel made their first contribution in #2471

Full Changelog: v0.8.0...v0.9.0