Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi!

I need a feature thats in the master branch but i can't find an image for it (refresh_token_hook), do you guys know when next release would be (1.10.7)?
I would be satisified the image:latest is avaiable so i can continue developing.

You can as well just build the image yourself, but would be cool to have a release from <@U010F2N7G2X> :slightly_smiling_face:

yeah i guess, just lazy and thought maybe if its soon

Let me know if you have any issues with refresh token hook, I actually built that feature and my team runs it in production for some time already. We build Hydra ourselves.

oh thats great to hear, i actually do have a question about triggering the refresh

when you refresh you get new access, refresh and id tokens, previous refresh token (opaque) is invalidated, access token (jwt) is not

hook just populates claims of new access and id tokens on refresh, it can also optionally deny the refresh if you return `401`

i see so if i use the refresh token i can trigger the hook? was looking to triggering the refresh manually so the new claims are added