Live data from Hacker News

Show HN: Open-source OAuth2 & OpenID server Ory Hydra v2

github.com

11–16 of 16 posts

Re: Show HN: Open-source OAuth2 & OpenID server Ory Hydra v2

#11

Awesome set of release notes, thanks for all the hard work! Excited to find time to dig into v2 changes, feels like Hydra has corrected a lot of long standing issues and made it much easier to use (I haven't run Kratos yet but having the integration be tighter makes so much sense). Is there a good description of oathkeeper vs keto? It seems like oathkeeper would use keto but I'm not sure if they're similarly tightly…

Thank you for the kind words :)

Ory Keto and Ory Oathkeeper can play together! Ory Keto implements Google Zanzibar, it's basically a service where you can check if "x is allowed to do y". Ory Oathkeeper on the other hand is something which can check for any given HTTP request: who is the user making the request? is the user allowed to make the request? and finally convert all this information into a common format. However, Ory Oathkeeper does itself not make the decision, it uses e.g. Ory Keto to check the permission itself. Hope this makes sense

Re: Show HN: Open-source OAuth2 & OpenID server Ory Hydra v2

#13
post #12

How does it compare to keycloak?

Hydra is a plain oidc and south implementation.

It doesn't provide a login screen, you need to implement your own flow user interface and use their their api to interface with the auth server.

This is great for the flexibility you have.

Keyckoak covers the basics outh of the box and have a login page implementation ready.

Re: Show HN: Open-source OAuth2 & OpenID server Ory Hydra v2

#14
post #13
post #12

How does it compare to keycloak?

Hydra is a plain oidc and south implementation. It doesn't provide a login screen, you need to implement your own flow user interface and use their their api to interface with the auth server. This is great for the flexibility you have. Keyckoak covers the basics outh of the box and have a login page implementation ready.

[deleted]

Re: Show HN: Open-source OAuth2 & OpenID server Ory Hydra v2

#16
post #3

Hey there :) Co-maintainer here and available to answer all your questions. Bringing this to v2 was a big one year effort with lots of community contributions and we are excited to finally be able to show it to the world!

Is this library the way to go when I have the following needs? 1. Login to SaaS via website and later use an access token to authorize against a graphql api? 2. Login programmatically so an access token can be retrieved and used for REST queries. 3. Does (2) work if the client is a pure oauth2 client (not an oidc client)? 4. Is the library recommended in a tenant based SaaS (like MS Azure)?
Post reply on HN