github.com/ory/hydra

Releases

1. ▸▾v1.10.3-0.20210504144757-155817473c634 May 2021pre-release

   Nothing published for this version

2. ▸▾v1.10.24 May 20212 sources agree

   This maintenance release resolves regressions introduce in Ory Hydra v1.10.1. A big change is that Ory Hydra now support PATCH operations for OAuth2 C

   This maintenance release resolves regressions introduce in Ory Hydra v1.10.1. A big change is that Ory Hydra now support PATCH operations for OAuth2 Clients and is able to handle TLS for admin and public endpoints individually.

   Breaking Changes

   This patch makes it so that already handled consent/login/logout requests respond with 410 Gone instead of 409 Conflict. Additionally, a URL is included that the user should be redirected to!

   Co-authored-by: hackerman 3372410+aeneasr@users.noreply.github.com

   This patch changes how issuer and public URLs are used. Please be aware that going forward, the public URL is used for redirects. Previously, the issuer URL was used. If no public URL is set, the issuer URL will be used as before.

   Bug Fixes

   • CookieStore MaxAge value (#2485) (#2488) (aafc901):

     CookieStore MaxAge is set to 86400 * 30 by default. This prevents secure cookies retrieval with expiration > 30 days. MaxAge: 0 disables MaxAge check by SecureCookie, thus allowing sessions lasting > 30 days.

   • Do not use error_hint anymore (#2450) (ff90c47)

   • Handled requests respond with 410 Gone and include redirect URL (#2473) (e3d9158), closes #1569

   • Link in documentation (#2478) (5fdd913)

   • Login and consent redirect behavior change since 1.9.x (#2457) (2f3a1af), closes #fragment #2363

   • Make token user command work with public clients (#2479) (a033d6a)

   • Resolve clidoc issues (f6e5958)

   • Resolve specignore issues (1431167)

   • Use PublicURL where given (#2441) (eefefd5), closes #2422

   • Valid JSON response for already handled requests (#2517) (ac61616), closes #2515

   • Version schema (#2427) (7781215)

   Code Generation

   • Pin v1.10.2 release commit (e8c3a06)

   Code Refactoring

   • Move unix socket support helpers into ory/x (#2486) (44fd4e4)

   Documentation

   • Add dotnet sdk (#2431) (014c773)

   • Add php link sdk page & fix links (#2469) (47cf3c7)

   • Change forum to discussions readme (#2451) (aa2919d):

     same as https://github.com/ory/kratos/pull/1220

   • Fix uppercase id (8ac186c)

   • Guide for merging system.secrets (#2448) (5466d4e)

   Features

   • Add the MaxTagValueLength config for jaeger of tracing (#2482) (03c96ee), closes #2447

   • Enable "nbf" (not before) claim to be optional for Access Token (#2437) (666cd25), closes #1542

   • Global docs sidebar and added cloud pages (#2495) (7f7362b)

   • Implement partial client updates (PATCH) with JSON Patch syntax (#2411) (540c89d):

     Implements a new endpoint PATCH /clients/{id} which uses JSON Patch syntax to update an OAuth2 client partially. This removes the need to do PUT /clients/{id} with the full OAuth2 Client in the payload.

   • Split TLS config into admin and public interfaces (#2476) (60704d4), closes #1231 #1962:

     Adds the possibility to specify TLS certificates for admin and public endpoints individually. Also improves compatibility for internal networks (e.g. Kubernetes) by removing the need for having TLS termination on admin endpoints. This can be enabled by setting serve.admin.tls.enabled to false.