Hello #hydra, seems like the hydra HTTP API is showing blank page here. Is there any issues or is it moved to somewhere else?

Hey I was trying to execute the test

strategy_logout_test.go

with my Goland IDE, but tests seem to fail. It seems it requires additional setup for logout UI, can you point me in right direction regarding setups, if any. https://github.com/ory/hydra/blob/master/consent/strategy_logout_test.go

@User Is it possible to update SDK only to specific languages such as Update dependencies for PHP allow SDK to support a new version of guzzle.

Hi, Am trying to implement hydra logout , when i send a request to oauth2/sessions/logout?id_token_hint=$token_Id i get 302 , isn't it suppose to redirect me to oauth2/auth/requests/logout ?? What am I missing ?!! 🤯

Hello, I need to implement sso between instances of my application, as I understand it, hydra is suitable for this?

this was a helpful resource: http://jsonpatch.com/

@User

curl <http://localhost:4445/clients/my-client-id> -XPATCH -d '[{ "op": "add", "path": "/redirect_uris/-", "value": "<my-custom-scheme://login>" }]' -H 'content-type: application/json'

Any ideas on what to try? Can't really redeploy hydra from scratch since we have lots of active clients. (SQL works for creating clients etc)

Hi. We’re using Hydra for oidc flows and use private_key_jwt as an authentication method. In the signed object, an iat claim is included. If any clients are at all ahead of the server time, the token request fails with “Token used before issued”. I see that the code in Fosite is commented as not supporting any clock skew. I’d be willing to try and help get this fixed. Are there deeper issues as to why this wasn’t handled?

Hello #hydra, I'm looking to integrate Kratos and Hydra. Is there any reference where I can gain insights to proceed in right direction?

hi, has anyone successfully run hydra in amazonlinux2 docker container? I got following message:

/usr/bin/hydra: /lib/ld-musl-x86_64.so.1: bad ELF interpreter: No such file or directory

I found foo@bar.com user, is hardcoded in login-consent app, thats why I can't found it, arghhhh......now I understand we must implement a rest or graphql api for our custom login-consent app. Awesome, we are free to do what we like, perfect. Seems odd that we can't find it in docs.....

Hello, I remember reading that a native integration between Hydra and Kratos was in the works, I’m wondering if there’s any sense of when that might be released?

if I'm using kratos & hydra, and I have kratos redirecting to URL

/test

after login, what have people been using to persist the

challenge

value so that on

/test

I can accept the login request on hydra after? cookie? something else?

Hi, looking into Hydra, and I see that consent, login and logout urls have to be provided in configuration. Working on an application with whitelabeling, is there a way to support multiple hostnames? This is actually also the case for

urls.self.issuer

hey guys 👋 I would like to use hydra for auth users of my react application which will do api requests to my own api via a JWT. Is it possible to integrate MFA from kratos into the hydra login and consent node? Looks like the kratos ui example only supports sessions but no JWTs like the hydra login/consent node

Hi. I'm trying to connect hydra to external idp provider (like AD, okta, etc). Having my own UI and writing a bridge (login/consent app) works very well. However, I would like to know if there's a way to use to use the IDP’s UI ? (Like the implicit flow in SPA)

Hello 👋 Does hydra support service tokens eg generate a token for a microservice -> microservice http call ? We have some scenarios in which some actions are triggered automatically and will require a form of authentication. Thanks 🙂

does anyone know if hydra version are backward compatible? I am migrating a very old install (running oryd/hydra:v1.0.0) and was running if i can run the newer image?

@User you can randomise that process for a statistically relevant check but it wont be a 100% tested. if you want to develop such an algorithm The Theory of the Design of Experiments D.R. COX Honorary Fellow Nuffield College Oxford, UK AND N. REID Professor of Statistics University of Toronto, Canada

I have a question, I'm trying to use Ory/Hydra as an IdP Broker (federating mutiple IdP [Custom OAuth2, Google Workspace OIDC, ...]). I've built a web page with all the "Login with XXXX" links. I get the Access token & Refresh Tokens but i'm still struggling to understand how to properly refresh the token. Does Ory calls the /login page on login-concent-app while refreshing ?

Hello community, Ory Hydra v.1.11.0 is in the release pipeline 🥳 Featuring a number of improvements & new features, you will get a detailed overview in the change log shortly. Some highlights include: - RFC 7523 - Hardware Security Modules - Apple M1 support Release will be live on GitHub shortly! We also learned that we need to improve our release workflow in the near future: In the excitement we did an oopsie and deleted the v.1.10.7 release from GitHub - Sorry 😓 ! More info: https://github.com/ory/hydra/issues/2949

Hi. We are using hydra to act as an IDP. Sometimes we need to reject login requests (OIDC), but the relying party (a whitelabel solution we are using) does not seem to handle the rejection properly. – Instead of showing a message to the user they retry the request which results in an endless loop. 💥 So my idea to work around this is to reject the request in our login endpoint, but not redirect to the redirect_url of the reject response, but to show our own 403 page with some useful information instead. Do you think that makes sense or does this break the OAuth flow and would make it unusable for other relying parties?

Hi all, I looked for some keywords in the history but I didn't find my answer. I need some customisation on top of hydra docker image. The base image that I am using is

oryd/hydra:v1.10.7

On top of it I add some config files and install netcat on top of it for a custom startup script. Whenever I am executing any command by

RUN

in my dockerfile, I am getting an error when building the docker image -

executor failed running [/bin/sh -c apk add netcat-openbsd]: unable to find user 1000: invalid argument

Any help is appreciated, thank you!

Hi all, I am looking for How to reset the auth&consent flag to do not skip the step. Because we need to reproduce some scenarios but it always got skipped and make us cannot test flow when skipping equal false.

I have a couple of projects: main.com, proj1.com, proj2.com, proj3.com. I wanted to make it so that main.com hosts all the authentication accounts, and then the projects can oauth with it to sign in/sign up. This was I can continue to add more projects without touching auth at all and instead just have to quickly implement oauth (which there are premade libraries for). Do you think this is a good idea? If not, why not? If so, then should main.com use kratos + hydra or do I need more than those two?

It does!

Hi everyone, just a quick one I hope you can help me out with: Does Hydra work with SQLite? The docs seem to suggest otherwise but I found some conflicting info online 😕

Hey @User that documentation you can find here: https://www.ory.sh/hydra/docs/next/advanced#updating-claims-at-token-refresh You were looking at the

1.10

docs but the section in github is for the

/next

version docs. So basically everything under e.g. hydra/docs/docs is in /next versioned docs and everything in /versioned_docs is broken up in the versions. I hope that removes some of the confusion.

Me to. I cant put auth pkce flow working on react/ionic app, all flow is done but after consent redirect always have a 401 unauthorized......and I cant see docs or any help, for today I give up is to late here If this works sure I will create a repo with readme instructions for others. There is so many dead traps to implement it, and lack of docs in pkce, spa and mobile flow doesnt help for hydra newbies......but I hope hydra masters comes to the rescue :)