Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Getting 502 Bad Gateway on all of our Ory Network projects. FYI.

Happens when redirecting users to `<https://ORY_SERVER/oauth2/auth>` have not checked the admin APIs.

Thanks for the report! Problem confirmed, solution is underway.

we have found the root cause of the problem

we have resolved the issue on your production projects ~5 minutes ago

we have fixed the root problem, thank you for the report, all your projects work now

we did not catch the root issue because you seem to only use the oauth2 apis and not other apis, which caused a rare edge case where a network request was blocked internally

that’s why we also did not catch this in our alerting

Checked again, all projects seems to be working. Thank you for the very quick response and prioritizing the production environment fix :pray: