github.com/ory/hydra

Ory Hydra v1.10.7 ships an exciting new feature that enables the updating of access and ID tokens during a refresh flow via an HTTP webhook. To set it up, use the oauth2.refresh_token_hook configuration to set up an HTTP(S) endpoint which receives a POST request when a refresh token is about to be issued!

And even more exciting, we would like to invite you to our first developer conference which is happening tomorrow and the day after (October 28th and 29th, 2021). The event is digital and tickets are free. After short keynotes from Ory's founders Aeneas (hackerman) and Thomas (tacurran), you will learn from fellow community members and contributors about building robust authorization and authentication, best practices for modern cloud infrastructure and many other developer topics! Grab your free tickets now!

Additionally, improvements to tracing, documentation, ID token claims have been merged. Also, Ory Hydra now no longer takes 3 seconds for the CLI to become responsive as we have found a transient dependency that caused slow initialization times:

$ time hydra
hydra  1.87s user 1.90s system 620% cpu 0.607 total

$ time ./hydra-v1.10.7
./hydra-patch  0.03s user 0.01s system 8% cpu 0.450 total

$ time ./hydra-v1.10.7
./hydra-patch  0.02s user 0.01s system 104% cpu 0.032 total

Please note that the location of our Homebrew tap has changed for Ory Hydra from ory/ory/hydra to ory/tap/hydra:

- brew install ory/ory/hydra
+ brew install ory/tap/hydra

All homebrew taps will move to this location, including Ory Kratos, Ory Oathkeeper, Ory Keto, and the Ory CLI!

Breaking Changes

Please note that the location of our Homebrew tap has changed for Ory Hydra from ory/ory/hydra to ory/tap/hydra:

- brew install ory/ory/hydra
+ brew install ory/tap/hydra

Bug Fixes

• Add content-type header to hook request (#2775) (8d0e5e6)

• Broken note (#2769) (c84427d)

• Documentation correction mentioned in the issue (#2732) (#2773) (ea7a20c)

• Ignore dockertest in sdk generator (f9506db)

• List oauth2 clients query parameter 'name' -> 'client_name' (#2747) (283c351):

  This commit renders the docs to be in parity with an earlier change [1]

  Reference(s): [1] https://github.com/ory/hydra/pull/2706

• Replace fatal error of jaeger initialization with print (#2777) (433ce74), closes #2642

• Resolve panic caused by new prometheus library (ff0a43e)

• Resolve prometheus panic (f38511f)

• Slow hydra start up time (ce1b378):

  Found a deeply nested dependency which was importing https://github.com/markbates/pkger, causing unreasonable CPU consumption and significant delay at start up time. With this patch, start up time was reduced from almost 2 seconds to 0.03s seconds for cold starts and ~0.02s for hot starts.

  $ time hydra
  hydra  1.87s user 1.90s system 620% cpu 0.607 total
  
  $ time ./hydra-patch
  ./hydra-patch  0.03s user 0.01s system 8% cpu 0.450 total
  
  $ time ./hydra-patch
  ./hydra-patch  0.02s user 0.01s system 104% cpu 0.032 total
  

• Sqlite regression (5881c13)

• Update client filter to client_name (#2706) (dee4fa2), closes #2691

• Upgrade regression (da58453)

Code Generation

• Pin v1.10.7 release commit (0a42535)

Code Refactoring

• Change location of homebrew tap (1eeeeae)

Documentation

• Clarify endpoint (#2757) (d772748), closes #2751
• Faq item (#2678) (856ccc0)
• K8s installation section (#2724) (aec73bb)
• Remove outdated information in doc configuration section (#2723) (3f16045)
• Typos (#2798) (0274fcc)
• Typos in docs (#2808) (a2bacc8)
• Update installation section helm command (#2725) (f6a4dc6)
• Update k8s examples section part of the page (#2719) (048156d)
• Update k8s examples section part of the page (#2720) (1d6eeba)
• Update oauth2 debug swction (#2717) (a2cdc08)

Features

• Add EdDSA support (#2782) (2ea49da)

• Add method to detect public keys without prefixing (#2758) (b12e70c), closes #2459

• Include amr claim in ID token (#2770) (f701310), closes #1756

• Introduce cve scanning (#2772) (e5295c6)

• Making use of the updated instrumentedsql version (#2713) (0a9df15)

• Refresh token hook to update claims (#2649) (1a7dcd1), closes #2570:

  This patch adds a new feature to Ory Hydra which allows the updating of access and ID tokens during the refresh flow. To set it up, use the oauth2.refresh_token_hook configuration to set up a HTTP(S) endpoint which receives a POST request when a refresh token is about to be issued.

• Support updating keys in CLI (#2460) (e874f4f), closes #2436