hydra icon indicating copy to clipboard operation
hydra copied to clipboard

OpenID Certified™ OpenID Connect and OAuth Provider written in Go - cloud native, security-first, open source API security for your infrastructure. SDKs for any language. Works with Hardware Security...

Results 233 hydra issues
Sort by recently updated
recently updated
newest added

Required for example in case where hydra admin endpoint is protected behind a reverse proxy that enforces basic auth. If `--access-token` arg is set, it takes precedence over basic auth...

This pull request introduces feature to extend consent validity time for both session related consent and subject related consent. Currently consent validity cannot be updated (when skip=true) or to be...

### Preflight checklist - [X] I could not find a solution in the existing issues, docs, nor discussions. - [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/master/CODE_OF_CONDUCT.md). -...

feat

### Preflight checklist - [X] I could not find a solution in the existing issues, docs, nor discussions. - [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/master/CODE_OF_CONDUCT.md). -...

bug
taken

This pull request introduces feature to revoke consent by session id and option to trigger back channel logout. **Use case**: 1. User logs in from device/browser 1 to client application...

This pull request introduces admin endpoint to delete login session by session id. **Use case:** 1. User logs in from device/browser 1 to client application A. Hydra has created login...

This pull request introduces feature to list subject consent sessions by session id. **Use case**: When authentication is initiated without `prompt` parameter from **multiple** devices, we would like to distinguish...

This pull request introduces feature to update session cookie expiry time on session refresh request. **Use case**: We want to keep session duration quite short (15 minutes) and force client...

This pull request introduces feature to configure backchannel logout request client TLS min/max versions and supported cipher suites. **Feature update:** - Added insecure_skip_verify configuration option. - Added reading proxy configuration...

**Is your feature request related to a problem? Please describe.** I have a variety of internal applications which have various metadata they require when a token shows up. Specifically this...