hydra

hydra copied to clipboard

feat: add a flag and a routine for flushing inactive login sessions

9

## Related issue(s) https://github.com/ory/hydra/issues/2561 ## Checklist - [x] I have read the [contributing guidelines](../blob/master/CONTRIBUTING.md). - [x] I have referenced an issue containing the design document if my change introduces a...

norand94

Not able to perform simultaneous auth flows with different clients

3

### Preflight checklist - [X] I could not find a solution in the existing issues, docs, nor discussions. - [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/master/CODE_OF_CONDUCT.md). -...

sidharthramesh

`revocation_endpoint` and `end_session_endpoint`

1

### Preflight checklist - [X] I could not find a solution in the existing issues, docs, nor discussions. - [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/master/CODE_OF_CONDUCT.md). -...

carloschida

Added client metadata flag, fixes #3091

2

Adds a `--metadata` flag to both `hydra clients create` and `hydra clients update`. Also ensures that valid JSON is being passed. ## Related issue(s) Fixes #3091 ## Checklist - [x]...

rikkuness

Do not return `email` in `id_token` but instead in `userinfo` for specific response types

3

**Describe the bug** The OIDC Conformity suite says: > Unexpectedly found email in id_token. The conformance suite did not request the 'email' claim is returned in the id_token and hence...

aeneasr

Janitor optimization use requested at index

3

Hi, on large tables, janitor queries could take minutes. Table like refresh_token can grow before there is some expired tokens. By adding missing indexes on requested_at columns, and by ordering...

arnolf

Autovacuum takes hours on PostgreSQL

1

### Preflight checklist - [X] I could not find a solution in the existing issues, docs, nor discussions. - [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/master/CODE_OF_CONDUCT.md). -...

arnolf

### Preflight checklist - [X] I could not find a solution in the existing issues, docs, nor discussions. - [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/master/CODE_OF_CONDUCT.md). -...

mig5

Cannot force front/back-channel logout with id_token_hint when "Remember Me" is off

5

### Preflight checklist - [X] I could not find a solution in the existing issues, docs, nor discussions. - [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/master/CODE_OF_CONDUCT.md). -...

mig5

feat: enable simultaneous auth flows by creating client related csrf co…

16

This pull request enables simultaneous auth flows by creating client related csrf cookie names. oauth2_authentication_csrf -> oauth2_authentication_csrf_%murmur3(client_id)% oauth2_authentication_csrf_insecure -> oauth2_authentication_csrf_%murmur3(client_id)%_insecure oauth2_consent_csrf -> oauth2_consent_csrf_%murmur3(client_id)% oauth2_consent_csrf_insecure -> oauth2_consent_csrf_%murmur3(client_id)%_insecure Additionally max age is...

aarmam