github.com/ory/kratos

Re-release the SDK.

Bug Fixes

• Bump ory cli (12ceae0)

Code Generation

• Pin v0.10.1 release commit (ab16580)

We achieved a major milestone - Ory Kratos is out of alpha! Ory Kratos had no major changes in the APIs for the last months and feel confident that no large breaking changes will need to be introduced in the near future.

This release focuses on quality-of-live improvements, resolves several bugs, irons out developer experience issues, and introduces session renew capabilities!

Breaking Changes

Please be aware that the SDK method signatures for submitSelfServiceRecoveryFlow, submitSelfServiceRegistrationFlow, submitSelfServiceLoginFlow, submitSelfServiceSettingsFlow, submitSelfServiceVerificationFlow might have changed in your SDK.

This patch moves several CLI command to comply with the Ory CLI command structure:

- ory identities get ...
+ ory get identity ...

- ory identities delete ...
+ ory delete identity ...

- ory identities import ...
+ ory import identity ...

- ory identities list ...
+ ory list identities ...

- ory identities validate ...
+ ory validate identity ...

- ory jsonnet format ...
+ ory format jsonnet ...

- ory jsonnet lint ...
+ ory lint jsonnet ...

This patch moves several CLI command to comply with the Ory CLI command structure:

- ory identities get ...
+ ory get identity ...

- ory identities delete ...
+ ory delete identity ...

- ory identities import ...
+ ory import identity ...

- ory identities list ...
+ ory list identities ...

- ory identities validate ...
+ ory validate identity ...

- ory jsonnet format ...
+ ory format jsonnet ...

- ory jsonnet lint ...
+ ory lint jsonnet ...

Bug Fixes

• Add flow id when return_to is passed to the verification (#2482) (c2b1c23)

• Add indices for slow queries (e0cdbc9)

• Add legacy session value (ecfd052), closes #2398

• auth0: Created_at workaround (#2492) (52a965d), closes #2485

• Avoid excessive memory allocations in HIBP cache (#2389) (ee2d410), closes #2354

• Change SQLite database mode to 0600 (#2344) (0e5d3b7):

  The default mode is 0644, which is allows broader access than necessary.

• Compile issues from merge conflict (#2419) (85a90c8)

• Correct location (b249aaa)

• courier: Add ability to specify backoff (#2349) (bf970f3)

• Do not expose debug in a response when a schema is not found (#2348) (aee2b1e)

• Do not fail release if no changes needed (114c93e)

• Dockerfile: Use existing builder base image (#2390) (37de25a)

• Embed schema (b797bba)

• Get user first name and last name from Apple (#2331) (4779909)

• Improve error reporting from OpenAPI (8a1009b)

• Improve performance of identity schema call (af28de2)

• Internal Server Error on Empty PUT /identities/id body (#2417) (5a50231)

• Load return_to and append to errors (#2333) (5efe4a3), closes #2275 #2279 #2285

• Make delete formattable (0005f35)

• Mark body as required (#2479) (c9ae117)

• New issue templates (b9ad684)

• Openapi regression (#2465) (37a3369)

• Quickstart docker-compose (#2490) (9717762), closes #2488

• Refresh is always false when session exists (d3436d7), closes #2341

• Remove required legacy field (#2410) (638d45c)

• Remove wrong templates (4fe2d25)

• Reorder transactions (78ca4c6)

• Resolve index naming issues (d5550b5)

• Resolve MySQL index issues (50bdba9)

• Resolve otelx panics (6613a02)

• sdk: Improved OpenAPI specifications for UI nodes (#2375) (a42a0f7), closes #2357

• Serve.admin.request_log.disable_for_health behaviour (#2399) (0a381fa)

• sql: Add additional join argument to resolve MySQL query issue (854e5cb), closes #2262

• Unreliable HIBP caching strategy (#2468) (93bf1e2)

• Use path instead of filepath to join http route paths (16b1244), closes #2292

• Use JOIN instead of iterative queries (0998cfb), closes #2402

• Use pointer of string for PasswordIdentifier in example code (#2421) (61f12e7)

• Use predictable SQLite in memory DSNs (#2415) (51a13f7), closes #2059

Code Generation

• Pin v0.10.0 release commit (87e0de7)

Code Refactoring

• Deprecate fizz renderer (5277668)
• Move CLI commands to match Ory CLI structure (d11a9a9)
• Move CLI commands to match Ory CLI structure (73910a3)

Documentation

• Add docs about change in default schema (#2447) (5093cd4)
• Remove notice importing credentials not possible (#2418) (b80ed69)

Features

• Add certificate based authentication for smtp client (#2351) (7200037)

• Add ID to the recovery error when already logged in (#2483) (29e4a51)

• Add localName to smtp config (#2445) (27336b6), closes #2425

• Add render-schema script (a0c006e)

• Add session renew capabilities (#2146) (4348b86), closes #615

• Add support for netID provider (#2394) (ee7fc79)

• Add tracing to persister (391c54e)

• identity: Add admin and public metadata fields (562e340), closes #2388 #47:

  This patch adds two new keys to identities, metadata_public and metadata_admin that can be used to store additional metadata about identities in Ory.

• Read subject id from https://graph.microsoft.com/v1.0/me for microsoft (#2347) (852f24f):

  Adds the ability to read the OIDC subject ID from the https://graph.microsoft.com/v1.0/me endpoint. This introduces a new field subject_source to the OIDC configuration.

  Closes https://github.com/ory/kratos/pull/2153

• sdk: Add cookie headers to all form submissions (#2467) (9a969fd), closes #2003 #2454

• sdk: Add csrf cookie for login flow submission (#2454) (2bffee8)

• Support argon2i password (#2395) (8fdadf9)

• Switch to opentelemetry tracing (#2318) (121a4d3)

• tracing: Improved tracing for requests (#2475) (b90a558)

• Upgrade to Go 1.18 (725d202)

Tests

• Fix incorrect assertion (b5b1361)
• Resolve regressions (dd44593)

Unclassified

• BREAKING CHANGES: This patch group updates the tracing provider from OpenTracing to OpenTelemetry. Due to these changes, tracing providers Zipkin, DataDog, Elastic APM have been deactivated temporarily. The best way to re-add support for them is to make a pull request at https://github.com/ory/x/tree/master/otelx and check the status of https://github.com/ory/x/issues/499 (7165fa0):

  The configuration has not changed, and thus no changes to your system are required if you use Jaeger.