This message was deleted.

what exactly do you mean by consent? oauth 2.0 consent is part of hydra

Is it? What I'm talking about is the app that's configured under the "consent" URL in the hydra conf.

if self-hosting, neither kratos nor hydra provide the UI built-in, that must be built separately. but ory does have example apps you can use like that one

So we tried that one but it didn't work.

storing extra data during consent must also be built separately - https://www.ory.sh/docs/oauth2-oidc/userinfo-oidc

Ok so, we don't have the resources to build that. Does that mean the setup we've made is for all intents and purposes useless?

if you want everything pre-built you'd want to look into the ory network

The paid solution? So that has consent handling built in?

that has pre-built UIs for the entire flow so you get everything out of the box, you mostly just configure things

Can it be hosted on-premise? We'd need to do that due to data security regs.

AFAIK it cannot

Ok, thanks for the info.

hey @wide-daybreak-39428 to add to Andrew’s answer, also add the email to the scope of the consent request. The scope is also used in the skipConsent scenario.

const { consent_challenge } = req.query // the HTTP request

const challenge = await oauth2
  .getOAuth2ConsentRequest({ consentChallenge: String(consent_challenge) })
  .then(({ data: body }) => body)

const skipConsent =
  challenge.skip || // skip because the user accepted the consent previously
  challenge.client.skip_consent // skip because the client is trusted

if (skipConsent) {
  // If the consent is skipped, we accept the consent request immediately.
  await oauth2.acceptOAuth2ConsentRequest({
    consentChallenge: String(consent_challenge),
    acceptOAuth2ConsentRequest: {
      grant_scope: challenge.requested_scope,
      grant_access_token_audience: challenge.requested_access_token_audience,
      session,
    },
  })
}

as per the docs:

scope

(optional): The scope of the access request, which specifies what resources the requesting application can access. eg

scope=email+name

On-Premise: We have some hybrid scenarios (self-hosted & network) for which we can provide a support/service offering. If you’re interested, we can schedule a quick call to discuss your regulatory and security requirements? It’s likely that Ory network already fulfills most of those needs.

Hi @wide-daybreak-39428, for your information there is a example on how integrate Kratos and Hydra together here : https://github.com/ory/examples/tree/master/kratos-hydra/