Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi, In our SPA we need to show dialogue for users to enter the password when they try to get some API keys without entering their email/username. If the password is correct we show them the API key, if the password is incorrect we decline without expiring the current session. Is this possible using Ory?

Yes, initialize the login flow using the `refresh`  parameter and check the authenticated_at time in the session