v0.9.0

[sandhose]

matrix-authentication-service will soon be forked by Element under an AGPLv3.0 licence (with CLA, for proprietary dual licensing). You can read more about this here:

• https://matrix.org/blog/2023/11/06/future-of-synapse-dendrite/
• https://element.io/blog/element-to-adopt-agplv3/

Any changes needed by server administrators will be communicated via our usual announcements channels, but we are striving to make this as seamless as possible.

Breaking changes

Configuration options

The following options are now invalid:

• the jaeger and zipkin values in telemetry.tracing.exporter (see below)
• the b3 and b3-multi values in telemetry.tracing.propagator (see below)
• the spa resource type in http.listeners[*].resources. This was deprecated before the 0.1.0 release, but only showed a warning. It is now removed.

The mas-cli config dump and mas-cli config generate commands now strip less common options if they are kept to their default value.
This means that those commands will skip the telemetry, policy, templates, upstream_oauth2, branding and experimental sections if no custom value is set.
Users should remove those sections from their configuration file if they haven't set any custom value and want to simplify it.

Tracing exporters

The Zipkin and Jaeger traces exporters have been removed.
Users should migrate to using the OTLP exporter instead.

The OTLP exporter now uses OTLP over HTTP instead of OTLP over gRPC.

The b3 and b3-multi propagators have been removed.
Users should migrate to using the tracecontext or the jaeger propagator instead.

Pre-built binaries now use glibc instead of musl

Pre-built Linux binaries attached to the releases are now built with glibc instead of musl.
This means that the binaries are not fully static anymore, as it requires glibc 2.17 or later, which is available on most systems.

Notable features

Easier upgrades (#2432)

MAS now runs database migrations and configuration synchronisation automatically on startup.
This means upgrading MAS, most of time, should be as simple as replacing the image or binary and restarting the service.

New translations

MAS is now available in Chinise (Simplified) and Dutch, in addition to the already existing English, French and German translations.

This is thanks to community contributions, and we are always looking for more translations!
Head to the Localazy project to help translate MAS in your language.

Account UI improvements

The account management UI has been generally improved.
The general layout is more streamlined (#2371, #2364, #2362), with a better focus on the main actions.

A particular focus was put on the sessions management, with a new card-based list of sessions (#2393).
This list now shows more relevant information, like the kind of device, browser and operating system used (#2386, #2388)

The indidividual session view has also been improved (#2439, #2460), with more relevant information being displayed.

Thanks to many internal changes (#2351, #2359, #2369) , the UI should feel more responsive and faster, especially on slow connections.

Homeserver integration (#2421)

MAS integrates a bit more tightly with Synapse, to make sure only valid accounts are created.
This should help prevent de-synchronization between the homeserver and MAS.

Upstream OAuth 2.0 provider improvements (#2430)

Arbitrary parameters can now be passed to the upstream OAuth 2.0 provider during the authorization request.

---

Docker image

Regular image:

• Digest:

  ghcr.io/matrix-org/matrix-authentication-service@sha256:254134dba1887d792f727ddb88c8a8bf4b9f905f4306a32c12cb205de2ac681a
  

• Tags:

  ghcr.io/matrix-org/matrix-authentication-service:0.9.0
  ghcr.io/matrix-org/matrix-authentication-service:0.9
  ghcr.io/matrix-org/matrix-authentication-service:0
  ghcr.io/matrix-org/matrix-authentication-service:sha-e3944d1
  ghcr.io/matrix-org/matrix-authentication-service:latest
  

Debug variant:

• Digest:

  ghcr.io/matrix-org/matrix-authentication-service@sha256:85911dab839aec9b179e2605c0dce39f76b2383c6204d6fb3cf939653a826618
  

• Tags:

  ghcr.io/matrix-org/matrix-authentication-service:0.9.0-debug
  ghcr.io/matrix-org/matrix-authentication-service:0.9-debug
  ghcr.io/matrix-org/matrix-authentication-service:0-debug
  ghcr.io/matrix-org/matrix-authentication-service:sha-e3944d1-debug
  ghcr.io/matrix-org/matrix-authentication-service:latest-debug
  

syn2mas migration tool:

• Digest:

  ghcr.io/matrix-org/matrix-authentication-service/syn2mas@sha256:e8be5e40cada3355e1405442d29919195033124b05ec664cc6b689c2a18231b1
  

• Tags:

  ghcr.io/matrix-org/matrix-authentication-service/syn2mas:0.9.0
  ghcr.io/matrix-org/matrix-authentication-service/syn2mas:0.9
  ghcr.io/matrix-org/matrix-authentication-service/syn2mas:0
  ghcr.io/matrix-org/matrix-authentication-service/syn2mas:sha-e3944d1
  ghcr.io/matrix-org/matrix-authentication-service/syn2mas:latest
  

Full list of pull requests, excluding dependencies updates

• Replace jotai-urql with just urql by @sandhose in Replace jotai-urql with just urql #2351
• Replace Jotai with @tanstack/router by @sandhose in Replace Jotai with @tanstack/router #2359
• Update the email list to match the new design by @sandhose in Update the email list to match the new design #2362
• Move the cross-signing reset to its own page by @sandhose in Move the cross-signing reset to its own page #2364
• Fix the zh-Hans translation by @sandhose in Fix the zh-Hans translation #2367
• Make sure the locale fallback works as expected by @sandhose in Make sure the locale fallback works as expected #2368
• Remove unnecessary debugging printf in i18n crate by @sandhose in Remove unnecessary debugging printf in i18n crate #2370
• Make the layout wider on "account" pages by @sandhose in Make the layout wider on "account" pages #2371
• Use query parameters for sessions pagination by @sandhose in Use query parameters for sessions pagination #2369
• Ignore Synapse appservice users in syn2mas by @jaywink in Ignore Synapse appservice users in syn2mas #2283
• Remove the unique constraint on device IDs on compatibility sessions by @sandhose in Remove the unique constraint on device IDs on compatibility sessions #2378
• Save which user session created a compat session by @sandhose in Save which user session created a compat session #2383
• Bump all frontend dependencies by @sandhose in Bump all frontend dependencies #2384
• Make all compound themes and all locales available in Storybook by @sandhose in Make all compound themes and all locales available in Storybook #2385
• Record user agents on OAuth 2.0 and compat sessions by @sandhose in Record user agents on OAuth 2.0 and compat sessions #2386
• Parse User Agents on the backend side by @sandhose in Parse User Agents on the backend side #2388
• Make sure the dummy router finished loading in the test environment by @sandhose in Make sure the dummy router finished loading in the test environment #2403
• Make the end session button more flexible by @sandhose in Make the end session button more flexible #2404
• Fix dialogs being blurry and not scrollable by @sandhose in Fix dialogs being blurry and not scrollable #2405
• Fix the dark high-constrast theme in Storybook by @sandhose in Fix the dark high-constrast theme in Storybook #2406
• Make sure the upstream OAuth callback pages are proxied to the backend by @sandhose in Make sure the upstream OAuth callback pages are proxied to the backend #2407
• Implement the user profile edit modal & new account header by @sandhose in Implement the user profile edit modal & new account header #2408
• Bump Clippy to 1.75 and Rust to 1.76 by @sandhose in Bump Clippy to 1.75 and Rust to 1.76 #2417
• Better session list by @sandhose in Better session list #2393
• Ask Homeserver for username availability upon registration by @sandhose in Ask Homeserver for username availability upon registration #2421
• Add Podman support to policies Makefile by @AndrewFerr in Add Podman support to policies Makefile #2425
• Add arbitrary OAuth 2.0 parameters on the authorization endpoint by @sandhose in Add arbitrary OAuth 2.0 parameters on the authorization endpoint #2430
• Automatically sync the configuration on server startup by @sandhose in Automatically sync the configuration on server startup #2432
• Docs tweaks by @AndrewFerr in Docs tweaks #2426
• Bump whoami, mio and iana-time-zone in the Cargo.lock file by @sandhose in Bump whoami, mio and iana-time-zone in the Cargo.lock file #2450
• Use rustls-platform-verifier for cert validation by @sandhose in Use rustls-platform-verifier for cert validation #2449
• Update session details styles to closer match latest Figma by @t3chguy in Update session details styles to closer match latest Figma #2439
• Make the mas-cli manage verify-email mark the email as primary by @sandhose in Make the mas-cli manage verify-email mark the email as primary #2455
• fix(register.rego): increase allowed username length to 64 by @AlexanderBabel in fix(register.rego): increase allowed username length to 64 #2471
• Do not expose error type from mas-keystore in mas-oidc-client by @zecakeh in Do not expose error type from mas-keystore in mas-oidc-client #2469
• Add scopes to compat session detail view by @t3chguy in Add scopes to compat session detail view #2460
• Upgrade OTEL and remove support for Jaeger and Zipkin exporters by @sandhose in Upgrade OTEL and remove support for Jaeger and Zipkin exporters #2456
• Render browser icon for compat & browser sessions by @t3chguy in Render browser icon for compat & browser sessions #2478
• Add Electron user-agent parsing for Element Desktop/Nightly by @t3chguy in Add Electron user-agent parsing for Element Desktop/Nightly #2461
• frontend: upgrade @tanstack/react-router by @sandhose in frontend: upgrade @tanstack/react-router #2492
• dependabot: Include storybook-react-i18next in the storybook group by @sandhose in dependabot: Include storybook-react-i18next in the storybook group #2506
• Put Keystore match variant behind feature flag by @zecakeh in Put Keystore match variant behind feature flag #2516
• Moved some dependencies in the workspace and upgrade some dependencies by @sandhose in Moved some dependencies in the workspace and upgrade some dependencies #2517
• Add account management URL for clients by @zecakeh in Add account management URL for clients #2470
• Replace parse-display with manual Display/FromStr impls by @sandhose in Replace parse-display with manual Display/FromStr impls #2518
• Use OTEL semantic conventions constants for most attributes by @sandhose in Use OTEL semantic conventions constants for most attributes #2519
• Cleanup configuration handling by @sandhose in Cleanup configuration handling #2535
• ci: build binaries using glibc instead of musl by @sandhose in ci: build binaries using glibc instead of musl #2540
• Ignore RUSTSEC-2024-0320 as we don't use the unmaintained crate in production by @sandhose in Ignore RUSTSEC-2024-0320 as we don't use the unmaintained crate in production #2547
• Fix release workflow by @sandhose in Fix release workflow #2546
• Bump frontend deps, replace i18next modules and other frontend fixes by @sandhose in Bump frontend deps, replace i18next modules and other frontend fixes #2563
• Create the AccountManagementError enum by @zecakeh in Create the AccountManagementError enum #2574

New Contributors

• @AndrewFerr made their first contribution in Add Podman support to policies Makefile #2425
• @AlexanderBabel made their first contribution in fix(register.rego): increase allowed username length to 64 #2471

Full Changelog: v0.8.0...v0.9.0

---

This discussion was created from the release v0.9.0.