github.com/ory/hydra

This release addresses an issue in the update routine of OAuth2 Clients (see kratos#2148) and adds an option which makes ORY Hydra compatible with MITREid.

Bug Fixes

• Add docs format to make format (cfa50fe)
• Client update breaks primary key (#2150) (7662917), closes #2148
• Explicitly use no-CGO images for non-SQLite (1ec2d1d)
• Force brew install statement (0252b5a)
• Update install script (c614c0b)

Code Generation

• Pin v1.9.0-alpha.2 release commit (1a7fe91)

Documentation

• Add missing trailing slash (97bc47d)
• Replace dex with keycloak (fa877d7), closes #2128
• Version bash-curl script (71b0592), closes #2145

Features

• Add configuration option to grant default client_credential scope when no scope is requested (#2144) (0b1de34), closes #2141:

  Adds an option which allows granting the OAuth2 Client's authorized scope when performing a client_credentials flow without specifying a scope. This enables compatibility with MITREid.

Tests

• Fix misused id field (#2152) (511e8d2)

This release focuses on a complete refactor of the internal database abstraction layer (DBAL). We have been using gobuffalo/pop successfully in ORY Kratos and decided to move the ORY Hydra DBAL to gobuffalo/pop as well. As part of this refactoring, ORY Hydra now supports SQLite for both in-memory as well as on-disk databases, de-duplicating the codebase and allowing for quick and easy persistence in test environments.

This is an alpha release as we want to gather feedback from the community regarding performance and other potential issues before tagging the v1.9.0 version branch as stable.

Bug Fixes

• Add support for tracing to SQL (b3dda7c)
• Address pop inconsistencies and update tests (8f3462f)
• CGO build issues on Windows and Go 1.15+ (1c1fe19)
• Do not require sqlite and CGO for other databases (8069205)
• Do not run migrations in background (308edb9)
• Explicitly set pwd in makefile (aeb1090)
• Goreleaser add docker images (7a81908)
• Improve cli flags and add -c config flag (bf3be84)
• Improve schema typing for tracing (4cc25c3)
• Improve tests and pop adapter (1354611)
• Remove explicit cve allowlist (90caeda), closes #2117
• Remove obsolete makefile targets (dc5d37f)
• Remove unnecessary transactions (1df50ec)
• Remove websocket direct dep (d525983), closes #2111
• Run tests only once (4e1d0f6)
• Set context in connection getter (644967a)
• Update docker and quickstart examples (b01c246)
• Update format to goimports (c4438b0)
• Use context in transaction creator (db0ac86)
• Use sqlite for standalone (e5b7147)

Code Generation

• Pin v1.9.0-alpha.1 release commit (a270e4c)

Code Refactoring

• Move Dockerfiles to .docker directory (5508f2a)

• Use gobuffalo/pop for SQL abstraction (#2059) (56bce67), closes #1730:

  This patch replaces the existing SQL and memory managers with a pop based persister. Existing SQL migrations are compatible as they have been migrated to the new SQL abstraction in version 1.7.x. As a goodie, ORY Hydra now supports SQLite for both in-memory as well as on-disk (useful for development and very small deployments) databases!

Documentation

• Add hypnoglow terraform provider (7ed8870), closes #1304
• Correct port (#2101) (487e733), closes #2100
• Correct port (#2102) (7aca301), closes #2100
• Fix typo (71a4495)
• Remove obsolete doc section (443a225)
• Swagger route headline capitalization (4540ece), closes #2015
• Update code listings and image tags (3cd22c4)
• Update sql instructions (bfed7f2)
• Updates kubernetes helm chart url (6d63a73)

Features

• Implement docker for quickstart (8e64202)
• Re-enable freebsd (2f19837), closes #2116 #2115
• Support sqlite in goreleaser (e946487)

Tests

• Fix confusing expected/got (#2135) (14b6db2):

  And fixed assert.EqualError params in right order in TestStrategyLoginConsent

• Move tests to persistence (46d0571)

• Remove unused expectSession variable (#2134) (eda8532)

• Write migrate logs to file (9a1fbd8)