hackerman

Maybe worth a look: https://www.reddit.com/r/golang/comments/9go99a/renewing_ssl_certificates_without_restarting_go/

You're probably looking for the `oauth2.allowed_top_level_claims` config which governs this!

You're right, I think this is not supported right now. Such a feature would need to be implemented in Ory Fosite ( https://github.com/ory/fosite ) with the explicit requirement of sending...

Yeah I agree, there will certainly be data loss.

Thank you for the report! I haven’t looked at the code in a while. > Meanwhile, the route to list remembered consent sessions will only return clients from the past...

> (A) A global Absolute Lifetime setting, like auth0. I think that is a very good idea! I believe this would be in line with https://github.com/ory/hydra/issues/2474 ?

I think it would be useful to support global TTL on refresh chains as well as inactivity on refresh chains. Whether or not those can also be configured per client...

Could you exclude autogenerated files in internal/httpclient please? :)

Sorry for the late reply, sounds like a good idea! Would you be open to contribute that?

Contributing guidelines can be found here: https://github.com/ory/hydra/blob/master/CONTRIBUTING.md But other than that just give it a go :)