Hi there, can anyone please give some feedback on this PR: https://github.com/ory/kratos/pull/3643? Currently, Kratos is exempting CSRF middleware on /self-service/methods/oidc/callback/apple and I’m proposing to change it to ignore the CSRF middleware instead. This is so that a CSRF cookie isn’t set (overriding the cookie that’s already there) on the form POST redirect.

How can we implement multitenancy using multiple Kratos instances and a self-service Node.js UI?

Hey folks, we are wondering if the explanation here makes sense and if we should proceed with the PR. Can someone give it a look, please?

Hi, I'd like to ask for re-review of https://github.com/ory/kratos/pull/3608, I added e2e test that @high-optician-2097 asked for.

hello 👋 this is a general q, kinda — anyone have any thoughts on config validation? the messages you get when starting oathkeeper/kratos/etc. are very detailed and helpful in regards to the configuration being invalid, etc.. I feel like it would be nice to have a e.g.

kratos config validate -f /path/kratos.yml

beforehand. or is that just me?

Hey folks, we have two PRs that somewhat block our (internal) deployment of Kratos. One fixes a rather exotic bug (that nevertheless can happen much more frequently after external ID token support was added), and the other simplifies OIDC sign-in/registration to just a single redirect. Can we get external opinion on these two, please? :) 1. The fix - https://github.com/ory/kratos/pull/3525 2. OIDC simplification - https://github.com/ory/kratos/pull/3416

Hi, I'm currently making PR for kratos and for some reason despite the fact that I can build and run it, tests fail with the following error:

# github.com/ory/x/sqlcon
../go/pkg/mod/github.com/ory/x@v0.0.595/sqlcon/error_sqlite.go:18:22: undefined: sqlite3.Error
../go/pkg/mod/github.com/ory/x@v0.0.595/sqlcon/error_sqlite.go:20:16: undefined: sqlite3.ErrConstraintUnique
../go/pkg/mod/github.com/ory/x@v0.0.595/sqlcon/error_sqlite.go:22:16: undefined: sqlite3.ErrConstraintPrimaryKey
../go/pkg/mod/github.com/ory/x@v0.0.595/sqlcon/error_sqlite.go:28:16: undefined: sqlite3.ErrError
../go/pkg/mod/github.com/ory/x@v0.0.595/sqlcon/error_sqlite.go:32:16: undefined: sqlite3.ErrLocked
FAIL    github.com/ory/kratos/cipher [build failed]
FAIL    github.com/ory/kratos/cmd [build failed]
FAIL    github.com/ory/kratos/cmd/cleanup [build failed]
?       github.com/ory/kratos/cmd/jsonnet       [no test files]
FAIL    github.com/ory/kratos/cmd/clidoc [build failed]
FAIL    github.com/ory/kratos/cmd/courier [build failed]
FAIL    github.com/ory/kratos/cmd/identities [build failed]
FAIL    github.com/ory/kratos/cmd/serve [build failed]
FAIL    github.com/ory/kratos/continuity [build failed]
FAIL    github.com/ory/kratos/courier [build failed]
FAIL    github.com/ory/kratos/courier/template [build failed]
FAIL    github.com/ory/kratos/courier/template/email [build failed]
FAIL    github.com/ory/kratos/courier/template/sms [build failed]
FAIL    github.com/ory/kratos/driver [build failed]
FAIL    github.com/ory/kratos/driver/config [build failed]
ok      github.com/ory/kratos/embedx    (cached)
FAIL    github.com/ory/kratos/examples/go/identity/create [build failed]
FAIL    github.com/ory/kratos/examples/go/identity/delete [build failed]
FAIL    github.com/ory/kratos/examples/go/identity/get [build failed]
FAIL    github.com/ory/kratos/examples/go/identity/update [build failed]
FAIL    github.com/ory/kratos/examples/go/selfservice/error [build failed]
FAIL    github.com/ory/kratos/examples/go/selfservice/login [build failed]
FAIL    github.com/ory/kratos/examples/go/selfservice/logout [build failed]
FAIL    github.com/ory/kratos/examples/go/selfservice/recovery [build failed]
FAIL    github.com/ory/kratos/examples/go/selfservice/registration [build failed]
FAIL    github.com/ory/kratos/examples/go/selfservice/settings [build failed]
?       github.com/ory/kratos/internal/clihelpers       [no test files]
?       github.com/ory/kratos/internal/httpclient       [no test files]
?       github.com/ory/kratos/otp       [no test files]
FAIL    github.com/ory/kratos/examples/go/selfservice/verification [build failed]
FAIL    github.com/ory/kratos/examples/go/session/tosession [build failed]
FAIL    github.com/ory/kratos/hash [build failed]
FAIL    github.com/ory/kratos/hydra [build failed]
FAIL    github.com/ory/kratos/identity [build failed]
FAIL    github.com/ory/kratos/persistence/sql [build failed]
FAIL    github.com/ory/kratos/persistence/sql/batch [build failed]
FAIL    github.com/ory/kratos/persistence/sql/migratest [build failed]
FAIL    github.com/ory/kratos/request [build failed]
FAIL    github.com/ory/kratos/schema [build failed]
FAIL    github.com/ory/kratos/selfservice/errorx [build failed]
FAIL    github.com/ory/kratos/selfservice/flow [build failed]
FAIL    github.com/ory/kratos/selfservice/flow/login [build failed]
FAIL    github.com/ory/kratos/selfservice/flow/logout [build failed]
FAIL    github.com/ory/kratos/selfservice/flow/recovery [build failed]
FAIL    github.com/ory/kratos/selfservice/flow/registration [build failed]
FAIL    github.com/ory/kratos/selfservice/flow/settings [build failed]
?       github.com/ory/kratos/selfservice/sessiontokenexchange  [no test files]
FAIL    github.com/ory/kratos/selfservice/flow/verification [build failed]
FAIL    github.com/ory/kratos/selfservice/flowhelpers [build failed]
FAIL    github.com/ory/kratos/selfservice/hook [build failed]
FAIL    github.com/ory/kratos/selfservice/strategy/code [build failed]
FAIL    github.com/ory/kratos/selfservice/strategy/link [build failed]
FAIL    github.com/ory/kratos/selfservice/strategy/lookup [build failed]
?       github.com/ory/kratos/spec      [no test files]
FAIL    github.com/ory/kratos/selfservice/strategy/oidc [build failed]
FAIL    github.com/ory/kratos/selfservice/strategy/password [build failed]
FAIL    github.com/ory/kratos/selfservice/strategy/profile [build failed]
FAIL    github.com/ory/kratos/selfservice/strategy/totp [build failed]
FAIL    github.com/ory/kratos/selfservice/strategy/webauthn [build failed]
FAIL    github.com/ory/kratos/session [build failed]
ok      github.com/ory/kratos/test/schema       (cached)
?       github.com/ory/kratos/x/events  [no test files]
?       github.com/ory/kratos/x/swagger [no test files]
ok      github.com/ory/kratos/text      (cached)
FAIL    github.com/ory/kratos/ui/container [build failed]
FAIL    github.com/ory/kratos/ui/node [build failed]
FAIL    github.com/ory/kratos/x [build failed]
FAIL

'go get' and 'go mod download' do nothing here. I don't really understand what might be a reason for it. Is it good place to ask or should I create issue? I feel like it's prob some little dumb mistake on my part 😜

Hello! Is there any kind of documentation/overview of the code base?

Hi! We are looking for feedback on this one: https://github.com/ory/kratos/issues/3485 PR is basically ready to open but because of the contribution guidelines we are waiting since weeks for a feedback on the issue if this feature is actually interesting for the product. Any feedback is appreciated:)

Hi #talk-contributors , We have purchased the ORY plan and we need to configure our app domain name in ORY console as we are using custom UI for Login & registration .. default endpoints i see this one --> https://jolly-diffie-7xvaix6ezn.projects.oryapis.com Could you please guide us how can we modify this in console ?

Hi, i found an issue in the current client open api spec (v1.2.10). Line 5740 - ref: "#/components/schemas/sessionAuthenticationMethod". There is the method "code" missing. For the new one-time code passwordless feature.

Hi, I'd like to request a re-review for https://github.com/ory/kratos/pull/3416, we provided e2e tests and summary of potential security impact as requested by @high-optician-2097, it would be great if you let us know whether we can continue with current approach.

Can you help me set up the Kratos.yml file for my React app? I am having an issue with redirecting users to the Ory Kratos login page. The code I am using is redirectTo("/.ory/ui/login"); but it is not working. https://www.ory.sh/docs/getting-started/integrate-auth/react The error is comming in the following lines if im using my kratos.yml file .catch((err) => { console.error(err) // Redirect to login page window.location.replace(

${basePath}/ui/login

) }) }, [])

CONTRIBUTING.md has a dead link to https://github.com/ory/kratos/blob/master/.github/semantic.yml

```Add a descriptive prefix to commits. This ensures a uniform commit history

and helps structure the changelog. Please refer to this

[list of prefixes for Kratos](https://github.com/ory/kratos/blob/master/.github/semantic.yml)

for an overview.```

Hi, I created a PR project to add the Epic Games provider in Kratos but it seems that the TokenExchange is not using the authorization header as it should be with Endpoint.AuthStyle.AuthStyleInHeader in my custom provider configuration. Any idea why? https://github.com/ory/kratos/pull/3449

Hi! I created this draft PR after struggling with the "status" command in Keto 🙂 I am not sure if I've followed all the rules and guidelines, so very happy to get some feedback on that, and also some input on how to run tests locally https://github.com/ory/keto/pull/1393

Hello everyone! Why SMS passwordless authentication still in review https://github.com/ory/kratos/pull/2033 ?

Another little fix for the Elixir clients; picked up the newest 1.1.42 client spec so would be nice to be merged with the regeneration(s) 😄 https://github.com/ory/sdk/pull/283

Hi everybody, I added PR https://github.com/ory/hydra/pull/3563 which allows to disable claim mirroring. Previous discussion about this was in issue https://github.com/ory/hydra/issues/3348.

Just a small PR for kratos-selfservice-ui-node to fix #259. https://github.com/ory/kratos-selfservice-ui-node/pull/267

Small PR for Oathkeeper to update

ory/x

to ensure trace headers are propagated properly. https://github.com/ory/oathkeeper/pull/1113

Hi @high-optician-2097, Just made a issue on ory-sdk. Is it a mistake or is it normal that this error has not the same type as the others ? Thanks in advance,

Small PR for

ory/x

that ensures all tracing headers are propagated irrespective of the tracing provider that is configured. Without this, if the

otel

tracer is used in Oathkeeper but Jaeger is used in a downstream application the trace is lost. https://github.com/ory/x/pull/698

Hi everyone! I’m creating a PR for NextAuth to support Ory Hydra out of the box. The code is ready, but I need to provide an Ory default SVG logo and the colors for a “Sign in with Hydra” button. Is there any place I could find these things? 🙂

ory Making PATCH operations more resilient: We’ve run into an issue with PATCH operations where when

metadata_public

does not exist and you wanted to add a

fieldA

to it, the whole operation would fail, instead of creating an object with the new

fieldA

. I’ve dug a bit into how the PATCH operations work and found the following dependencies: • API request calls

jsonx.ApplyJSONPatch

https://github.com/ory/kratos/blob/master/identity/handler.go#L779 • jsonx uses

json-patch

https://github.com/ory/x/blob/master/jsonx/patch.go#L50 One idea how to fix this would be to use

ApplyWithOptions

https://github.com/evanphx/json-patch/blob/master/v5/patch.go#L1058 with the option

EnsurePathExistsOnAdd

https://github.com/evanphx/json-patch/blob/master/v5/patch.go#L87 instead of just

patch.Apply()

// EnsurePathExistsOnAdd instructs json-patch to recursively create the missing parts of path on “add” operation.

// Default to false.

Would such that work for you, is there a (security) reason why that hasn’t been done before? For the use-case we ran into and this bug report mentions the current behavior encourages worse coding practices and may lead to bugs (more latency, two points of failure, prone to race conditions, etc.) — I wanted to ask here before to making the change to see if anything immediately speaks against the change in the

jsonx

dependency?

📣 Anyone who wants to run Ory CLI in Github Actions and having troubles - I just published Github Action. Feel free to use it. Current implementation uses expect method, since Ory CLI does not support non-interactive auth (e.g.

ory auth --email <mailto:example@mail.com|example@mail.com> --password MyPassword

). I'll address this in the next PR of Ory CLI.

Hi all, I created the following PR and the step format fails but Prettier locally does not find a format problem. Does anyone have any idea why?

Hi there, unfortunately really busy this week. Will try next week!

Hi @high-optician-2097 I have made a PR for the Oathkeeper Rules schema, which addresses this issue. I'd like to hear your thoughts.