hydra

hydra copied to clipboard

Use http basic auth credentials when provided to the cli

1

### Preflight checklist - [X] I could not find a solution in the existing issues, docs, nor discussions. - [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/master/CODE_OF_CONDUCT.md). -...

yangm97

Persister.transaction does not rollback on panic

13

### Preflight checklist - [X] I could not find a solution in the existing issues, docs, nor discussions. - [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/master/CODE_OF_CONDUCT.md). -...

mitar

ed448 support for jwk keys?

3

Asking about this since the NSA recently published guidance advising the public and private sectors to transition to cryptographic algorithms that are no less than sha384 & ec384 (elliptic curves)....

Librechain

### Preflight checklist - [X] I could not find a solution in the existing issues, docs, nor discussions. - [X] I agree to follow this project's [Code of Conduct](https://github.com/ory/hydra/blob/master/CODE_OF_CONDUCT.md). -...

grantzvolsky

Implement the prompt=select_account OIDC parameter

11

Hello ! **Is your feature request related to a problem? Please describe.** I work on a multi-account system and I must let user select the account they want to log...

SlevinWasAlreadyTaken

oauth2: Support mTLS client authentication

16

**Do you want to request a *feature* or report a *bug*?** Feature **What is the current behavior?** Unable to use x.509 certificates for OAuth Client Authentication. **What is the expected...

dudedad

KPI related metrics

7

**Is your feature request related to a problem? Please describe.** First, thanks for hydra. In our evaluation, we've found it to be a great tool. One thing I'm having difficulties...

goshlanguage

oauth2: Custom claims param in /oauth2/auth is ignored

5

**Do you want to request a *feature* or report a *bug*?** Feature **What is the current behavior?** Hydra doesn't handle custom claims param in /oauth2/auth request. All additional custom claims...

wojciechce

Support RFC8693: Token Exchange

35

In a zero trust microservices architecture, it is extremely useful to have an ability to generate "on behalf of" access tokens with shorter lifespan and narrower scope when performing service...

adaniline

Jwks public keys with use=sig parameter to be treated same as key_ops=["verify"]

5

### Discussed in https://github.com/ory/hydra/discussions/2675 **Describe the bug** When using private_key_jwt using a client's public keys url, the approach for validating signature should be the same for following both options 1....

sagarshah1983