Login to Matrix/Element using your Polkadot Wallet! This uses a custom Oauth2 provider to log you in. We can leverage this to piggy back into ANY tool that has an Oauth2 integration and add Log-in using Polkadot for free (token gating, anyone?). DOTAuth2 :)

Of course, this isn't 100% decentralized as Auth providers will always be able to impersonate any user by issuing valid JWTs, but it can build a bridge between Web2 & Web3, the pitch: "No Password" (but Matrix has session keys that don't depend on that so it's okay-ish...)

The Auth provider runs locally in the video above, but I've deployed it on Cloudflare workers and it works the same way. This doesn't make much sense for Dapps, it's more for backends that need to interact with Web3 users without an email.

Also, this works with WalletConnect too, all what's needed is a way to sign a randomly generated string that the Auth provider sends back. Easy peasy.

Perhaps running the Auth provider as some sort of light-client and tying it with a decentralized identity provider (Kilt? Polkadot People Chain?) could be fun too.

If you have ideas let me know. We can open-source this (with the right caveats and disclaimers, of course), it's just 2 files & a docker container :)

Are you searching for a simple way to deploy device certificates with #Intune? Check out SCEPman at

@gavofyork FINALLY someone built an oath provider ❤️❤️❤️

nice! been thinking of wroking on this for ages tbh.

Our security team has a few ideas for how we can make it better, will ping you when we have something people can try out so we can make it better.

This is very interesting and I would argue it's a solution for the scattered communication in our community (Telegram, Discord, WhatsApp, etc.). We have 31 flavors of communication but no settled-upon one. My understanding is that Matrix/Element are decentralized messengers, which would align with our decentralization standards.🐺

Thanks! I think it's as close as it gets for our needs, although some pieces still need to be fixed. Like this: Ideally any such platform should only be a transport layer for messages. Email providers can delete your account, but not your wallet.