Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Am I correct in understanding that Kratos only supports ID token verification in the latest master and not in v1.0.0. We are using the published Docker images in a self-hosted environment. And even then, only for Google and Apple?

I have a custom case. So I would have to add support for ID token verification to the generic provider as a pull request. Is that correct? Thanks

Yes, ID token verification is only available for apple &amp; google, because they’re most commonly used on mobile/native applications. For generic providers, you’d need to add it manually.

By adding it manually, do you mean configuration or do you mean a code change?

Got it. Thanks. I will submit a PR when I have made my changes.

Nice! I think it would be helpful if you create a small Issue describing the problem broadly and what changes you have in mind. Here: <https://github.com/ory/kratos/issues/new/choose>.