Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi! I've made an attempt at a fix for a bug that has been reported (at least) twice - which affects key rotation quite negatively. PR: <https://github.com/ory/hydra/pull/3942> Would love any comments or feedback!

Hi. I have seen that PR and it does seem to address an important issue. We will get to reviewing it.

Great, thanks! I see that <@U010F2N7G2X> approved it and is asking for a second review from someone else :rocket:

Regarding the code scanning alerts: Do I need to do anything about those? They seem irrelevant - complaining about "unsafe" practices in the test code that's just mirroring how the rest of the test code does it