[HN Gopher] Show HN: Open-source OAuth2 & OpenID server Ory Hydr...
       ___________________________________________________________________
        
       Show HN: Open-source OAuth2 & OpenID server Ory Hydra v2
        
       Author : baconfly
       Score  : 94 points
       Date   : 2022-11-03 14:06 UTC (8 hours ago)
        
 (HTM) web link (github.com)
 (TXT) w3m dump (github.com)
        
       | zcmack wrote:
       | excited to try this again!
        
       | balomueller wrote:
       | I use Hydra v1 and it is great! Looking forward to test v2!
        
       | Lacerda69 wrote:
       | This has been a long time in the making, many kudos for all the
       | hard work by the maintainers and contributors! Really excited
       | about the integration with the ory kratos idp, should make
       | building SSO much easier.
        
       | dt3ft wrote:
       | Kudos on the release!
       | 
       | I get a 404 when clicking on the SDKs link in the github readme:
       | https://www.ory.sh/docs/hydra/sdk
       | 
       | The correct link is probably
       | https://www.ory.sh/docs/kratos/sdk/index
        
         | tentagni wrote:
         | Thank you, fixed! :)
        
       | hardwaresofton wrote:
       | Awesome set of release notes, thanks for all the hard work!
       | 
       | Excited to find time to dig into v2 changes, feels like Hydra has
       | corrected a lot of long standing issues and made it much easier
       | to use (I haven't run Kratos yet but having the integration be
       | tighter makes so much sense).
       | 
       | Is there a good description of oathkeeper vs keto? It seems like
       | oathkeeper would _use_ keto but I 'm not sure if they're
       | similarly tightly integrated.
        
         | baconfly wrote:
         | Thank you for the kind words :)
         | 
         | Ory Keto and Ory Oathkeeper can play together! Ory Keto
         | implements Google Zanzibar, it's basically a service where you
         | can check if "x is allowed to do y". Ory Oathkeeper on the
         | other hand is something which can check for any given HTTP
         | request: who is the user making the request? is the user
         | allowed to make the request? and finally convert all this
         | information into a common format. However, Ory Oathkeeper does
         | itself not make the decision, it uses e.g. Ory Keto to check
         | the permission itself. Hope this makes sense
        
       | tentagni wrote:
       | Hey there :) Co-maintainer here and available to answer all your
       | questions.
       | 
       | Bringing this to v2 was a big one year effort with lots of
       | community contributions and we are excited to finally be able to
       | show it to the world!
        
         | 0xEFF wrote:
         | Does Hydra integrate with nginx or envoy external
         | authorization? If so, is there a good example you could share?
         | 
         | I've relied on oauth2proxy with Dex as an oidc issuer for this
         | purpose for years. This works but I'm trying to understand if
         | Ory is an advancement in functionality.
        
           | tentagni wrote:
           | Absolutely, Ory Hydra supports basic OAuth2 standards like
           | OAuth2 Introspection - if the technology supports these
           | standards then it is compatible!
        
       | seymon wrote:
       | How does it compare to keycloak?
        
         | motoboi wrote:
         | Hydra is a plain oidc and south implementation.
         | 
         | It doesn't provide a login screen, you need to implement your
         | own flow user interface and use their their api to interface
         | with the auth server.
         | 
         | This is great for the flexibility you have.
         | 
         | Keyckoak covers the basics outh of the box and have a login
         | page implementation ready.
        
       ___________________________________________________________________
       (page generated 2022-11-03 23:02 UTC)