Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hey there, I just noticed on the <#C010F2N7XR9|> that some changes that drastically reduce the `/oauth2/token` latency have been shipped. My guess is this is in ory-hydra. Can someone point me to the commits/PRs that introduce these changes? :eyes:

Yes <@U074LAU7QA1>
that was the changes included in this release:
<https://github.com/ory/hydra/releases/tag/v2.2.0>
I think there are a couple of commits in this release for performance, I am not sure which ones exactly.

IIUC it's <https://github.com/ory/hydra/commit/f29fe3af97fb72061f2d6d7a2fc454cea5e870e9|this commit> that speeds up the authz code grant flow (described <https://www.ory.sh/oauth2-oidc-server-performance-tuning-scale/|in this blog>). But I don't believe that impacts the `oauth2/token` endpoint

Since the announcement was so new i figured it was a recent PR. These 3 come to mind:
• <https://github.com/ory/hydra/pull/3561|PR #3561> parallelizes the JWKs
• <https://github.com/ory/hydra/pull/3756/|PR #3756> adds an `expiresAt` column which can be used to do more obvious garbage collection i suppose?
• <https://github.com/ory/hydra/pull/3764|PR #3764> seems to mostly undo the effect of <https://github.com/ory/hydra/pull/3763/files|PR #3763>
