Jonas Hungershausen

icon indicating a website link jonas-jonas.dev icon indicating an email [email protected]

icon company @ory icon location New York icon location Software Engineer @ory, passionate about anything web and open source.

Results 120 comments of Jonas Hungershausen

tooltips and popovers run off the edge of the screen

Indeed, very annoying. Would be nice to have a solution for this.

Cannot update array traits in settings flow

@aeneasr yes, I already thought so. Will take a look.

Cannot update array traits in settings flow

I played around with the relevant code here a bit and would like a bit of feedback before I start to implement anything. This is a bit of weird situation,...

Cannot update array traits in settings flow

Thanks for the write-up. You are right, I focused on the JSON endpoint for submitting the flow and didn't actually think about actual HTML form submission as another use-case. I...

Review and add more commonly used password hashing algorithms for importing users

@aeneasr is this issue still up-for-grabs and relevant? Would love to take a look at it. I skimmed the existing parts of the credential import code and read through #605...

Review and add more commonly used password hashing algorithms for importing users

Alright, I had a look at this. Firebase is not using `scrypt` directly, [but a fork](https://github.com/firebase/scrypt), meaning Firebase passwords can not be verified using the [standard scrypt library](https://github.com/Tarsnap/scrypt) AFAICT. To...

Review and add more commonly used password hashing algorithms for importing users

> Phew, that sounds complicated. I would suggest to park Firebase import for now. Do you have some links for reading into the topic? Yup, thought so as well. The...

Admin Session Extension Route Blocked by CSRF

@eli-wand GitHub only allows to close as `completed` or `not-planned`. This is obviously a bug. So it's definitely on the roadmap.

Admin Session Extension Route Blocked by CSRF

Should be quite trivial to solve, contributions are welcome :)

Add API Endpoint to fetch emails

> The email body will contain sensitive information such as the recovery code or token. Do we really want to include it in the payload? I think it would be...