hey everyone i am trying to get my head around the design of

Question

hey everyone i am trying to get my head around the design of everything so my frontend will ofc be a vue nuxtjs app which would ofc require a custom api to get it s data from But here my question how should I implement it around Kratos Hydra amp Keto Would I deploy build my app s user management around a subdomain e g called `auth domain tld` which has Kratos Then have another domain for Hydra e g `passport domain tld` or an internal domain which my own api only would know Then have Keto for the ACL for all my users end users staff etc

magnificent-energy-493 · Answer

Are you sure you need all three from the start It depends on your use case of course but most often it is best to start with Ory Kratos and go from there This is also a good document to figure it out <https www ory sh hydra docs next concepts before oauth2 >

magnificent-energy-493 · Answer

A community member recently did a full docker compose setup for all four core projects <https github com radekg ory reference compose>

hundreds-psychiatrist-38730 · Answer

I wouldn t need hydra from a pure UX pov

hundreds-psychiatrist-38730 · Answer

maybe i haven t looked deep enough into Kratos for the permissions part

hundreds-psychiatrist-38730 · Answer

maybe reading through the self service part would tell me exactly what to do also to auth my api etc

brash-insurance-92266 · Answer

< hundreds psychiatrist 38730> I imagine ory cloud could be an answer if you re looking for using ory as a service slightly smiling face

magnificent-energy-493 · Answer

Yes if you want to forgo running Ory Kratos and other yourself and leave securing endpoints UI database as well as upgrading and managing everything to us we are offering Ory Cloud It is in early access at the moment and we will upgrade to open beta soon rocket Right now you can sign up at <https console ory sh registration> and request early access

magnificent-energy-493 · Answer

Otherwise < hundreds psychiatrist 38730> I would definitely recommend doing the and also reading the When you have covered these basics you can try setting up a PoC with the For reference you can also find something useful in the

hundreds-psychiatrist-38730 · Answer

oh i know < brash insurance 92266> but i work as an SRE DevOps so i would rather tinker with it my self and host it my self stuck out tongue

bitter-coat-49094 · Answer

we use login company tld for the login page for now required in Web because of Form posts as Kratos performs redirects with secure cookie Due to Ory applicative architecture choice for now i think it is mendatory to host such an SSO page We tried doing it in pure Flutter with for web but most javascript SPA based ones wont work here as you can t access the redirected secure cookie for the self user modification Then we have kratos proxied for now for i18n and hydra for token management on backend we use oathkeeper and then Keto v2 called by gRPC interceptors for authorization I will be talking about Pvotal Keto utilisation at Ory Summit on the 28th <https events hubilo com ory summit home>