Hacker News Reader

baconflyon Show HN: Open-source OAuth2 & OpenID server Ory Hydra v2

Thank you for the kind words :)

Ory Keto and Ory Oathkeeper can play together! Ory Keto implements Google Zanzibar, it's basically a service where you can check if "x is allowed to do y". Ory Oathkeeper on the other hand is something which can check for any given HTTP request: who is the user making the request? is the user allowed to make the request? and finally convert all this information into a common format. However, Ory Oathkeeper does itself not make the decision, it uses e.g. Ory Keto to check the permission itself. Hope this makes sense

baconflyon Show HN: Ory Kratos – Open-source identity server written in Go

Thank you! :) We have an RFC for adding this type of short lived tokens to Ory Kratos. If you want to go deeper in the security space, there is also Ory Hydra which supports things like Service Accounts using OAuth2 Client Credentials (with PKI!) as well as OAuth2 Token Exchange :)

baconflyon Show HN: Ory Kratos – Open-source identity server written in Go

The system is API only (headless) but we have reference implementations available. For a management UI you can use Ory Cloud :)

For permissions, that’s a different service: https://github.com/ory/keto

baconflyon Show HN: Ory Kratos – Open-source identity server written in Go

Yes! OVH (the cloud provider) is working on a large PR: https://github.com/ory/kratos/pull/2148

baconflyon Show HN: Ory Kratos – Open-source identity server written in Go

That is so great to hear! We are in the midst of refactoring the documentation structure for different audiences: people who want to try it out quickly, those who want in depth understanding (like you), code contributors, non-dev

It’s a long journey! If you ever see some of our docs again and feel that it has lost it’s way please reach out; It’s very important to us to not only show how the product works but also why :)

baconflyon Show HN: Ory Kratos – Open-source identity server written in Go

I also heard that there’s a blog post for migration coming, but it has to be translated from Japanese first. If you sign up to the newsletter you should receive a notice when it’s released :)

baconflyon Show HN: Ory Kratos – Open-source identity server written in Go

Pretty sure! We have documentation on importing users and already support several hashing algorithms. Support for more algorithms will follow soon!

baconflyon Show HN: Ory Kratos – Open-source identity server written in Go

One of the co-maintainers here. Ory Kratos has been in development since 2018 and is finally out of beta! If you have any questions about the project, tech, flows, or Ory as a whole I’m here to help :)