Viewing profile — vinckr

Has that law ever been enforced ? (e.g. taking away a FOSS or other project that someone wrote in their own time)

in most cases you dont need explicit permission but you need to sign a CLA (Individual Contributor License Agreement) - which kind of includes permission

Coming from Germany I found it funny how tiny the subway lines are in major cities in the US compared to medium-sized cities here. I always thought Germany was a country centered a…

Personally I hate magic links via email with a passion and will actively avoid products that have this as the only authentication method

I don't think we can let that one go so easily, since they might not be scanning for ad targeting (pinky promise?) - but they most certainly will slurp everything up for their AI s…

How is it obvious that this project bought starts on GitHub?

Very cool, thanks for sharing. Feel free to add it to https://github.com/ory/awesome-ory !

> Tickets cannot be moved between trackers You can convert an issue to a discussion and vice versa, so no duplication is needed and your notification should be preserved. Or do you…

after clicking on your link I browsed twitter for a minute and damn that place has become weird (or maybe it always was?)

I think most commit messages use conventional commits ( https://www.conventionalcommits.org/en/v1.0.0/ ) - I found them to be quite useful for creating structures commit messages. …

These are fair concerns, and I want to clarify what's included versus what's paid. The confusion here is about two different types of SSO: _Admin SSO (for managing Ory itself)_ - O…

if you leave the admin APIs unsecured in production it is an attack vector, not sure what you would prefer being told here? It says "When deploying Ory open-source Servers, protect…

sorry to hear that, hope you have a better experience going forward. if you feel like it send me some details on what was most painful and we'll fix it.

Another problem is also that "standards" like OAuth2/OIDC are used for a thousand use cases that weren't intended by the authors, so people get really creative with them. Plus the …

if you are a masochist that is a great retirement project!

Check out Ory Polis if you want SAML/SCIM support: https://github.com/ory/polis CAPTCHA is not in scope for Kratos, there are already great solutions out there that you can use

You can use other parts of the Ory ecosystem to add these features, such as Ory Polis for SAML/SCIM support: https://github.com/ory/polis CAPTCHAs aren’t a big help anymore in my p…

you should check out Ory Polis if you are looking for SAML support in the OSS version: https://github.com/ory/polis

Ory Kratos itself doesn't support SAML that is correct. However the newest addition to the Ory ecosystem, called Ory Polis (formerly known as BoxyHQ) does close that gap. It is als…

i feel you; working with a heavily patched fork of anything can be rough check out the new version, i'm sure it has improved quite a bit since then. Of course simpler solutions tha…

sure, I would say its mostly correct. You can solve Permissions and API Gateway also differently - for example many use OAuth2 claims and scopes for permissions. I personally think…

that's fair! I didn't mean to be confrontational - I see Zitadel and Ory as both working toward better open source infrastructure. At Ory, features like high-availability setups, z…

Hey, if you want to share a bit more feedback would love to hear it! feel free to also message me directly if you don't want to share it here. tbh i don't know too much about it ot…

It depends what your requirements are. If you are "just" doing first-party login, session, and user mgmt then Ory Kratos is all you need. I would say in the majority of cases you w…