tree a3283950ccdbb6b88dba0297e04f6cf8c2cd367f
parent 8bd24f4a968e7aa2d44a216cb63f82c478359e4d
author Piotr Dobrowolski <informatic@hackerspace.pl> 1651023576 +0200
committer informatic <informatic@hackerspace.pl> 1651393077 +0000

app/matrix: force non-id_token flow to fix SSO

Presence of id_token in IDP token response causes synapse to demand
jwks_uri to be present in config/metadata. (login flow failing with
<<Missing "jwks_uri" in metadata>> message)
This behaviour was introduced somewhere between 1.42.0 and 1.56.0.

This is currently not set up correctly on sso.hackerspace.pl (we hand
out hs256 tokens instead of proper rsa ones) so this change will make it
fall back to non-oidc/plain oauth2 flow.

Change-Id: I4ff8aa175b4f0bbdcb3ee993b7cbd4545eac561a
Reviewed-on: https://gerrit.hackerspace.pl/c/hscloud/+/1302
Reviewed-by: informatic <informatic@hackerspace.pl>
Reviewed-by: q3k <q3k@hackerspace.pl>