v26.2.0 Bug Fixes Always retry curl invocations to surmount transient third-party failures (c28a6c8): Broken older down migrations (8ed407d): Context passing and limit response size (f33d6a8): Context passing in jsonnetsecure (5884774): Correctly detect when to use self-signed certificates (6f9af27): Correctly scan SQL NULL into go JSON types (163c579): Data race in hydra-oss test (262f85b): deps:…
v25.4.0 brings first-class support for agentic authorization with the Device Authorization Grant (RFC 8628) and OAuth 2.1 discovery endpoint, making it easier for agents, IoT devices, and headless clients to obtain and manage access securely. Combined with new consent-chain revocation and migration fixes for CockroachDB v25+, Hydra v25.4 strengthens its role as the web and AI scale-ready OAuth 2.1…
We’re thrilled to announce the release of Ory Hydra 2.3.0! This version comes packed with graceful token refresh, performance improvements, and fixes that enhance stability, reduce database load, and streamline the developer experience. We strongly recommend upgrading to take advantage of these enhancements and ensure the best possible OAuth2 and OpenID Connect experience with Ory Hydra. Thank you…
Ory Hydra, the OAuth2 and OpenID Connect server designed for web-scale deployments introduces over 6x higher OAuth2 throughput on a single PostgreSQL instance! Want to check out Ory Hydra yourself? Try common OAuth2 flows in the Ory OAuth2 Get Started guide! This version significantly enhances performance, processing over 6x more authorization flows than version 2.1, thanks to architectural improv…
autogen: pin v2.2.0-pre.1 release commit
Introduces logout compatibility with Ory Kratos. Bug Fixes Add exceptions for internal IP addresses (#3608) (1f1121c) Add kid to verifiable credential header (#3606) (9f1c8d1) Deflake ttl test (6741a49) Docker build (#3609) (01ff9da) Enable CORS with hot-reloaded origins (#3601) (6f592fc) Only query access tokens by hashed signature (a21e945) Racy random string generation (#3555) (1b26c4c) Reject…
Test release
This release optimizes the performance of authorization code grant flows by minimizing the number of database queries. We acheive this by storing the flow in an AEAD-encoded cookie and AEAD-encoded request parameters for the authentication and consent screens. BREAKING CHANGE: The client that is used as part of the authorization grant flow is stored in the AEAD-encoding. Therefore, running flows w…
This release optimizes the performance of authorization code grant fl…
We are excited to announce the next Ory Hydra release! This release includes the following important changes: Fixed a memory leak in the OpenTelemetry implementation, improving overall memory usage and stability. Added a missing index for faster janitor cleanup, resulting in quicker and more efficient cleanup operations. Fixed a bug related to SameSite in dev mode, ensuring proper functionality an…