Tags

This release resolves several minor bugs and one slow query. Please be aware that applying this version requires running SQL migrations.

This release resolves several minor bugs and one slow query. Please be aware that applying this version requires running SQL migrations.

This release resolves several minor bugs and one slow query. Please be aware that applying this version requires running SQL migrations.

The new SameSite attribute is now enforced on Google Chrome and may cause issues with your current ORY Hydra deployment:

`SameSite=None` no longer works without `secure` flag cookies. If you are using the `--dangerous-force-http` flag and have not configured `SameSite=Lax` your users will no longer be able to perform OAuth2 flows.

The next FireFox release will follow this implementation as well. To prevent your users from experiencing issues:

- Remove `--dangerous-force-http` from your deployment. This flag should never be set outside of local development machines anyways!
- Set environment variable `SERVE_COOKIES_SAME_SITE_MODE=Lax` or configuration value `serve.cookies.same_site_mode = Lax`.

By applying this release, the above recommendations will be set per default, for example using `Lax` when `--dangerous-force-http` is set.

Many of you reached out in the past asking about managed / SaaS offerings from ORY, for more support, automated updates, and automated fixes for issues like the `SameSite` behavior above. We would like to invite those interested in that kind of an offering and service to engage in a dialogue to better help us understand how you are using ORY, what requirements your businesses have and how we can better help and service you. Together, we can shape some of this journey together. If you like to be part of this conversation please send an email to jared@ory.sh so we can get in touch directly and begin talking about what an ideal and fully supported offering from ORY would look like for you.

This patch additionally includes a breaking API change for the "Revoke Consent Sessions API endpoint" - please check the breaking changes below. Bugfixes are included in this release as well - such as pretty JSON format logging, fixes to Jaeger configuration, and more!

We focused on reworking the ORY Hydra documentation in this release.

Even though no breaking changes were introduced with this release, we decided
to bump to the next minor (1.6) version to signal the significance of the
documentation changes.

We also refactored the NodeJS example implementation to use lightweight
TypeScript and the official TypeScript SDK.

This release contains mostly minor bug fixes and allows more granular control
for listening on unix sockets.

The 1.5.1 release includes several big changes to the internal code base and introduces exciting new features! It combines several beta releases that have been battle-tested by the community. Please use the 1.5.1 release instead of the 1.5.0 release which had issues with the CI pipeline! This release

* changes how migrations work internally. It does not contain breaking changes but please run `hydra migrate sql` **once you have backed up the database**;
* improves CockroachDB ZigZag query performance;
* OAuth2 clients are now able to use other token_endpoint_auth_signing_algorithms than RS256
* introduces Zipkin tracing support;
* improves the documentation in several locations;
* greatly improves structured logging output;
* supports unix sockets in the ORY Hydra CLI;
* uses the new ORY CLI as part of the toolchain;
* and resolves several other bugs and issues!

We would like to thank our amazing community and all contributors that have helped in making this release possible (in no particular order):

* https://github.com/rickwang7712
* https://github.com/bayansar
* https://github.com/sawadashota
* https://github.com/ka3de
* https://github.com/dalcde
* https://github.com/timsazon
* https://github.com/robhinds
* https://github.com/arkady-bagdasarov
* https://github.com/arapaho
* https://github.com/lopezator
* https://github.com/pjediny

If you haven't yet, consider joining our [Slack family](https://slack.ory.sh)!

The 1.5 release includes several big changes to the internal code base and introduces exciting new features! It combines several beta releases that have been battle-tested by the community. This release

* changes how migrations work internally. It does not contain breaking changes but please run `hydra migrate sql` **once you have backed up the database**;
* improves CockroachDB ZigZag query performance;
* OAuth2 clients are now able to use other token_endpoint_auth_signing_algorithms than RS256
* introduces Zipkin tracing support;
* improves the documentation in several locations;
* greatly improves structured logging output;
* supports unix sockets in the ORY Hydra CLI;
* uses the new ORY CLI as part of the toolchain;
* and resolves several other bugs and issues!

We would like to thank our amazing community and all contributors that have helped in making this release possible (in no particular order):

* https://github.com/rickwang7712
* https://github.com/bayansar
* https://github.com/sawadashota
* https://github.com/ka3de
* https://github.com/dalcde
* https://github.com/timsazon
* https://github.com/robhinds
* https://github.com/arkady-bagdasarov
* https://github.com/arapaho
* https://github.com/lopezator
* https://github.com/pjediny

If you haven't yet, consider joining our [Slack family](https://slack.ory.sh)!

Adds `offline_access` to the scope list in OpenID Connect Discovery, makes it possible to enforce PKCE for public clients, improves structured logging, and bumps several dependencies.

Bumps a vulnerable dependency.

Resolves issues found in beta.1.

This release changes how migrations work internally. It does
not contain breaking changes. Please run `hydra migrate sql`
once you have backed up the database.

This release includes documentation changes and bug fixes.

This is the first release to use our new CI/CD pipeline
which includes auto-generated release announcements
via the newsletter.

If you have feedback on this new process feel free
to start a discussion on Slack!

This release fixes some bugs and improves the docs.

This is the first release to use our new CI/CD pipeline
which includes auto-generated release announcements
via the newsletter.

If you have feedback on this new process feel free
to start a discussion on Slack!

This release fixes some bugs and improves the docs.

This is the first release to use our new CI/CD pipeline
which includes auto-generated release announcements
via the newsletter.

If you have feedback on this new process feel free
to start a discussion on Slack!

This release fixes some bugs and improves the docs.