github.com/ory/hydra

This release adds more telemetry data to the prometheus exporter.

Code Generation

• Pin v1.9.2 release commit (f0580e2)

Features

• Enable emittance of response time metrics (#2323) (c1f1ba5)

This release makes Dart and Rust SDKs available for Ory Hydra!

Code Generation

• Pin v1.9.1 release commit (5cedc9e)

Documentation

• Add faq items (8d31cb3):

  Added two items to the FAQ that were sitting in meta/tmp.

• Add link endings. (#2313) (1316cc0), closes #38

• Add Rust and Dart SDKs (c4b4f73):

  We now support for Rust and Dart SDKs!

• Fix npm links (#2303) (341f3ed)

• Quickstart cleanup (#2324) (a8ad705)

• Reorg faq sidebar (#2318) (4fdb7f1)

• Update before oauth2.mdx (#2299) (d2ee4f6), closes #2295

• Update javascript documentation (a2b3a49):

  Closes https://github.com/ory/sdk/issues/22

• Update npm package name (#2302) (d05d82e):

  Changed npm client package from @oryd/hydra-client to @ory/hydra-client

Today, we are very excited to announce the stable release of ORY Hydra 1.9! This release contains significant internal code refactoring, making ORY Hydra more reliable, lightweight, and even more scalable! Also, for the first time ever, ORY Hydra handled over 13.3 billion API requests in December 2020 in over 23.000 production environments around the globe.

Let's talk features - in a TL;DR overview:

• Completely replacing the existing DBAL and switching to gobuffalo/pop.
• Support for SQLite, an embedded database, which can be used for testing and tiny deployments.
• Deprecating the existing configuration system spf13/viper and moving to knadh/koanf.
• Adding OpenID Connect Conformity Test Suite to the CI, guaranteeing that every code change is fully OpenID Connect compliant.
• Support for the OpenID Connect response_mode=form_post Response Mode.
• Compatibility with MITREid, allowing easy migration from MITREid to ORY Hydra.
• The TypeScript SDK moved from @oryd/hydra-client to @ory/hydra-client. Please update your dependencies!

If you wish to get into ORY Hydra, check out the new YouTube tutorial:

See you on slack, signed HACKERMAN.

ORY Kratos

We would like to take a bit of your time and introduce you to ORY Kratos. ORY Kratos implements all the hard things related to users: login, registration, customizable profile fields, multi-factor authentication scheduled for v0.6, secure account recovery, email and SMS verification, profile management, session and device management, user administration, social sign in and sign up, and much, much more! Everything works with proven and ORY-hardened protocols in the same lightweight fashion you are used to from our other products. And it natively targets mobile, desktop, web, and robots! ORY Kratos is essentially an open-source alternative to Auth0, Okta, and Google Firebase with the added benefit of avoiding the complexity of implementing OAuth2 and OpenID Connect for your first-party apps just to get login to work. So if you are wondering whether you really need OAuth2, this is worth your time!

To get a feeling for ORY Kratos, check out our exemplary React Native app (available on GitHub, Android and iOS) demonstrating user registration, login, and profile management. It uses APIs from ORY Cloud, which will be publicly announced this year. If you are interested in becoming an early adopter, get in touch now! We have more super exciting stuff planned!

Changes in-depth

Let's break down the most significant changes in more detail:

The configuration system has been reworked

1. Configuration sourcing works from all sources (file, env, cli flags) with validation against the configuration schema. This makes changing or updating configuration much easier.
2. Configuration reloading is improved and works on Kubernetes.
3. Performance gains remove the need for a cache layer between the configuration system and ORY Hydra.
4. Loading of several config files is now possible using the --config flag.
5. Configuration values are now sent to the tracer (e.g. Jaeger) if tracing is enabled.

Please be aware that deprecated configuration flags have been removed with this change. It is also possible that ORY Hydra might complain about an invalid configuration due to a significantly improved validation process.

The OpenID Connect Conformity Test Suite is now part of the ORY Hydra CI pipeline.

This means every PR and change will be checked for OpenID Connect Compliance. As part of these tests, we uncovered some regression issues which have since been resolved. Please be aware that fields error_hint and error_debug will no longer be sent. You can re-enable those legacy fields by setting oauth2.include_legacy_error_fields to true.

Supporting response_mode=form_post

Support OpenID Connect flows response_mode=form_post was added and has been tested with the OpenID Connect Conformity Test Suite, making it ready for production.

Compatibility with MITREid

Adds an option that allows granting the OAuth2 Client's authorized scope when performing a client_credentials flow without specifying a scope. This enables compatibility with MITREid and allows migrating from MITREid to ORY Hydra.

Refactoring the internal DBAL

We completely refactored the internal database abstraction layer (DBAL). We have been using gobuffalo/pop successfully in ORY Kratos and decided to move the ORY Hydra DBAL to gobuffalo/pop as well. As part of this refactoring, ORY Hydra now supports SQLite for both in-memory as well as on-disk databases, de-duplicating the codebase and allowing for quick and easy persistence in test environments.

Code Generation

• Pin v1.9.0 release commit (7120b4f):

  Bumps from v1.9.0-alpha.1

This is a pre-release for ORY Hydra 1.9.0

Code Generation

• Pin v1.9.0-rc.0 release commit (e8fc76b):

  Bumps from v1.9.0-alpha.1

autogen: pin v1.9.0-alpha.4.pre.0 release commit

Bug Fixes

• Add 400 as possible reply to /oauth2/token (24daede), closes #2260
• Bump ory/x and update config usage (#2248) (4937a00)
• Do not require unset pairwise (4136aaf)
• Improve version regex (17d9599), closes #2255
• Update schema reference for subject_identifiers.supported_types (0e14a08), closes #2270

Code Generation

• Pin v1.9.0-alpha.4.pre.0 release commit (9766b27)

Documentation

• Add note about mounting the config file when using docker (#2235) (766e8f1), closes #2231

• Change deprecated fallback url (#2275) (0bf61aa), closes #2254

• Client api upper bound on limit parameter (#2277) (bc2bbd2), closes #2267

• Corrected a link within the docs (#2257) (0dd4e64)

• Fix incorrect version replacements (70a6b8f)

• Fix typo (#2264) (82ba2df)

• OAUTH2_ERROR_URL -> URLS_ERROR (#2263) (f9b8205)

• Oidc.subject_identifiers config key change (#2232) (2172f25):

  oidc.subject_identifiers.enabled is now oidc.subject_identifiers.supported_types. Docs should get updated.

• Update install from source instructions (bcfd9b7)