Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Show HN: Ory Kratos – Open-source identity server written in Go

github.com

Post reply on HN
Print view View original

11–20 of 67 posts

Re: Show HN: Ory Kratos – Open-source identity server written in Go

#11

Post by donatzsky »

PinguTS wrote: post #10
baconfly wrote: post #2

One of the co-maintainers here. Ory Kratos has been in development since 2018 and is finally out of beta! If you have any questions about the project, tech, flows, or Ory as a whole I’m here to help :)

Is there an UI for the identity management like defining roles and assigning identities to roles? I see the API part. But is there an UI part, besides the self-service account management? Because that general management interface is the missing piece in many of the identity services.

It's API only. The UI is for you to create.

Re: Show HN: Ory Kratos – Open-source identity server written in Go

#13

Post by nerdponx »

donatzsky wrote: post #11
PinguTS wrote: post #10

Earlier quoted context omitted.

Is there an UI for the identity management like defining roles and assigning identities to roles? I see the API part. But is there an UI part, besides the self-service account management? Because that general management interface is the missing piece in many of the identity services.

It's API only. The UI is for you to create.

I wonder if "hosted Ory with a nice UI" is a viable SaaS business.

Re: Show HN: Ory Kratos – Open-source identity server written in Go

#14

Post by tinco »

I love the way Ory is set up and documented to be understandable and deployable as components. I played with Kratos a couple weeks ago and made a single vm deployment using sqlite on fly.io. The configuration documentation for Kratos was a bit dense, there's so much functionality in there already despite it being just out of beta so I pushed my config to github so you can get going on fly.io with it immediately:

https://github.com/tinco/kratos-service

(you can paypal me later tptacek ;))

Re: Show HN: Ory Kratos – Open-source identity server written in Go

#16

Post by baconfly »

PinguTS wrote: post #10
baconfly wrote: post #2

One of the co-maintainers here. Ory Kratos has been in development since 2018 and is finally out of beta! If you have any questions about the project, tech, flows, or Ory as a whole I’m here to help :)

Is there an UI for the identity management like defining roles and assigning identities to roles? I see the API part. But is there an UI part, besides the self-service account management? Because that general management interface is the missing piece in many of the identity services.

The system is API only (headless) but we have reference implementations available. For a management UI you can use Ory Cloud :)

For permissions, that’s a different service: https://github.com/ory/keto

Re: Show HN: Ory Kratos – Open-source identity server written in Go

#18

Post by baconfly »

lapser wrote: post #17

Ory suite looks amazing. I think the biggest things I'm missing are token authentication and with that, services tokens. I saw a thread saying it'll be implemented at some point and I'm looking forward!

Thank you! :) We have an RFC for adding this type of short lived tokens to Ory Kratos. If you want to go deeper in the security space, there is also Ory Hydra which supports things like Service Accounts using OAuth2 Client Credentials (with PKI!) as well as OAuth2 Token Exchange :)

Re: Show HN: Ory Kratos – Open-source identity server written in Go

#20

Post by PinguTS »

baconfly wrote: post #16
PinguTS wrote: post #10

Earlier quoted context omitted.

Is there an UI for the identity management like defining roles and assigning identities to roles? I see the API part. But is there an UI part, besides the self-service account management? Because that general management interface is the missing piece in many of the identity services.

The system is API only (headless) but we have reference implementations available. For a management UI you can use Ory Cloud :) For permissions, that’s a different service: https://github.com/ory/keto

Thank you for your answer.
Post reply on HN