ory
Allow partial updates for credentials
Preflight checklist
- [x] I could not find a solution in the existing issues, docs, nor discussions.
- [x] I agree to follow this project's Code of Conduct.
- [x] I have read and am following this repository's Contribution Guidelines.
- [x] I have joined the Ory Community Slack.
- [ ] I am signed up to the Ory Security Patch Newsletter.
Ory Network Project
No response
Describe your problem
My team is building an integration on top of Ory's identity API, and we're exposing the management of credentials to our tenants. The issue is that we're treating credential changes as partial updates, but the only way to add or update them is through replacing the identity itself.
Describe your ideal solution
Ideally PATCH identity would allow updates of credentials. A separate endpoint for adding/replacing credentials specifically (similar to DELETE), would also be great. I'm open to putting work into the latter myself.
Workarounds or alternatives
Working around this requires either telling our (probably confused) customers that just this one partial update is not thread safe, or locking the identity ourselves (which is what we're currently shooting for). Both aren't ideal though.
Version
Ory Network
Additional Context
No response
