hey everyone. i am trying to get my head around th...
# general
h
hey everyone. i am trying to get my head around the design of everything. so my frontend will ofc be a vue/nuxtjs app which would ofc require a custom api to get it’s data from. But here my question, how should I implement it around Kratos, Hydra & Keto ? Would I deploy/build my app’s user management around a subdomain e.g. called
auth.domain.tld
which has Kratos. Then have another domain for Hydra, e.g.
passport.domain.tld
or an internal domain which my own api only would know. Then have Keto for the ACL for all my users (end users, staff etc) ?
👀 1
m
Are you sure you need all three from the start? It depends on your use case of course, but most often it is best to start with Ory Kratos and go from there. This is also a good document to figure it out: https://www.ory.sh/hydra/docs/next/concepts/before-oauth2/
A community member recently did a full docker-compose setup for all four core projects: https://github.com/radekg/ory-reference-compose
👍 2
h
I wouldn’t need hydra from a pure UX pov
maybe i haven’t looked deep enough into Kratos for the permissions part.
maybe reading through the “self-service” part would tell me exactly what to do. also to auth my api etc
b
@hundreds-psychiatrist-38730 I imagine ory cloud could be an answer if you're looking for using ory as a service 🙂
👍 1
m
Yes, if you want to forgo running Ory Kratos and other yourself and leave securing endpoints/UI/database as well as upgrading and managing everything to us, we are offering Ory Cloud. It is in early access at the moment, and we will upgrade to open beta soon 🚀 Right now you can sign up at https://console.ory.sh/registration and request early access.
Otherwise @hundreds-psychiatrist-38730 I would definitely recommend doing the Ory Kratos Quickstart, and also reading the Concepts documentation. When you have covered these basics you can try setting up a PoC with the Self-Service docs. For reference you can also find something useful in the community projects.
h
oh i know @brash-insurance-92266 but i work as an SRE/DevOps so i would rather tinker with it my self and host it my self 😛
b
we use login.company.tld for the login page (for now required in Web because of Form posts as Kratos performs redirects with secure cookie. Due to Ory applicative architecture choice for now, i think it is mendatory to host such an SSO page. We tried doing it in pure Flutter (with for web) but "most javascript SPA" based ones wont work here as you can't access the redirected secure cookie for the self user modification). Then we have kratos proxied for now for i18n and hydra for token management, on backend we use oathkeeper and then Keto v2 called by gRPC interceptors for authorization. I will be talking about Pvotal Keto utilisation at Ory Summit on the 28th https://events.hubilo.com/ory-summit/home
👀 1
🙌 2