Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/ory/kratos

The most scalable and customizable identity server on the market. Replace your Homegrown, Auth0, Okta, Firebase with better UX and DX. Has all the tablestakes: Passkeys, Social Sign In, Multi-Factor Auth, SMS, SAML, TOTP, and more. Written in Go, cloud native, headless, API-first. Available as a service on Ory Network and for self-hosters.
https://github.com/ory/kratos

feat: allow empty version string

419f94bc1065771e49982faf56f8ef90a30bc306 authored almost 3 years ago by aeneasr <[email protected]>
feat: abandon courier messages after configurable timeout (#2257)

bff92f73b3f12d2dffa2061eb0e51e746eba2185 authored almost 3 years ago by Jonas Hungershausen <[email protected]>
fix(login): put passwordless login before password

df9245fbc403e1b8f2dd1378678963cc0d71ef1a authored almost 3 years ago by aeneasr <[email protected]>
fix(registration): order for passwordless webauthn

8427322b31fb5206a55e9f62823745fcc6983a22 authored almost 3 years ago by aeneasr <[email protected]>
refactor: rename `password_identifier` field to `identifier`

BREAKING CHANGE: The `password_identifier` form field of the password login strategy has been re...

4dbe0ea41f49e198840292fc101258a4bdca826e authored almost 3 years ago by aeneasr <[email protected]>
feat: add `webauthn` to list of identifiers

This patch adds the key `webauthn` to the list of possible identifiers in the Identity JSON Sche...

1a8b256cca33aa9cbb143e7e8fc1efc8217e9b8a authored almost 3 years ago by aeneasr <[email protected]>
feat(session): add webauthn to extension validation

049fd8edc382f344018398027a4e0b3915116ff2 authored almost 3 years ago by aeneasr <[email protected]>
feat(config): add option to mark webauthn as passwordless-able

Adds option `passwordless` to `selfservice.methods.webauthn.config`, making it possible to use W...

0455e3fe901cff6ff314fd59a35864886672327c authored almost 3 years ago by aeneasr <[email protected]>
refcator: move login hinting to own package

1eb260423491af917edb1256d260ca3d3fb198dc authored almost 3 years ago by aeneasr <[email protected]>
test: add data for new migration

b0488efa600024f40b2c019fa0f492dd39c8bfa9 authored almost 3 years ago by aeneasr <[email protected]>
refactor: distinguish between first and multi factor credentials

8de9d01d9edae485f5a6ea7c68584ba4019a24d6 authored almost 3 years ago by aeneasr <[email protected]>
chore: codedoc

a732259354cc2b2fb199c7f0576b1ce7f26c8c31 authored almost 3 years ago by aeneasr <[email protected]>
feat: add versioning and improve compatibility for credential migrations

78ce668a38c914939028be42cd30eefa566ed09a authored almost 3 years ago by aeneasr <[email protected]>
refactor(identity): move credentials counter

c9875a7582accc740061e6a19d7b4b0998899f3f authored almost 3 years ago by aeneasr <[email protected]>
feat(identity): add versioning to credentials

aaf779ac1c29b24ece6d5f3d7892a3bf08277653 authored almost 3 years ago by aeneasr <[email protected]>
feat: add message for missing webauthn credentials

303dc6bc33c20cd619d2542180247bd7b7f02092 authored almost 3 years ago by aeneasr <[email protected]>
feat(webauthn): add passwordless credentials indicator

6e3057a96a34d22cac193e5c17b4a3c01d2ca045 authored almost 3 years ago by aeneasr <[email protected]>
feat(webauthn): add error preventing deleting last webauthn credential

1209edacaf1b7dea32bd1bd124c86910bc2553c6 authored almost 3 years ago by aeneasr <[email protected]>
feat(webauthn): add swagger type

14c2b745e951a185dee600f6f2e8f93788c67285 authored almost 3 years ago by aeneasr <[email protected]>
feat(webauthn): manage webauthn passwordless keys

5a62ced175248a85b1e843b4017757aa86d62d23 authored almost 3 years ago by aeneasr <[email protected]>
feat(webauthn): count passwordless credentials

145af23aef8f5c9ffdcec47bac5758da709d4646 authored almost 3 years ago by aeneasr <[email protected]>
feat: add credential migrator pattern

77afc6f8ea868eaba7853adfcb9ed159b44ecbc8 authored almost 3 years ago by aeneasr <[email protected]>
test(identity): ensure migrations run when fetching identities

322d467ac11dcdf4e3210f947b80029c77662065 authored almost 3 years ago by aeneasr <[email protected]>
test(webauthn): add passwordless profile

88199ea28e8b3460ccc585e5fd1713d398cae15c authored almost 3 years ago by aeneasr <[email protected]>
fix(session): correctly calculate aal for passwordless webauthn

c7eb970ed252577e06d3d769d2545d5e8e98175a authored almost 3 years ago by aeneasr <[email protected]>
refactor(session): aal computation

a136de99a0f8fe78ee344f2243359c781b166378 authored almost 3 years ago by aeneasr <[email protected]>
fix: resolve merge regression

d8ca4f327499f94c811c55237f210288fb6a9dd5 authored almost 3 years ago by aeneasr <[email protected]>
feat(identity): add identity credentials helpers

b7be327a370368932ff390968acffaa1ce6d55a0 authored almost 3 years ago by aeneasr <[email protected]>
feat: add new messages

09e6fd16bb6be0ff3ee209bbfe69e967546f70da authored almost 3 years ago by aeneasr <[email protected]>
feat(webauthn): update messages and nodes

22534d8253384f2002033a5b2bbdcf573779a49c authored almost 3 years ago by aeneasr <[email protected]>
feat(webauthn): use plain bytes for wrapped user

97c8c9e25234847622f1ab508cd5d50758d323c0 authored almost 3 years ago by aeneasr <[email protected]>
test: extract common registration helpers to library

5c1f11b2ae65dd73d572e456b522a7d83ac1f473 authored almost 3 years ago by aeneasr <[email protected]>
test(cmd): fix regressions

4b92be9325d02e605e12d96c7990774234ed1d1d authored almost 3 years ago by aeneasr <[email protected]>
feat(webauthn): improve schema

790dcf3a7079d57a088d399c03d040af1019a3aa authored almost 3 years ago by aeneasr <[email protected]>
test(schema): resolve regressions

c6d08105a270fafd21a14a19e412d7081dedc754 authored almost 3 years ago by aeneasr <[email protected]>
fix(oidc): incorrect error handling

c8d789c10e2be11dfc8c3eea01a339637f89ea63 authored almost 3 years ago by aeneasr <[email protected]>
test(identity): fix regressions

f492f0e1d112813d926eac48b5ad5d2e1857a382 authored almost 3 years ago by aeneasr <[email protected]>
test(driver): fix regressions

c6f51377f253275bf7321c67a5e949699ac12adb authored almost 3 years ago by aeneasr <[email protected]>
fix(webauthn): schema regressions

970e861714ec01c5cfe19545871798d9ad0ae70c authored almost 3 years ago by aeneasr <[email protected]>
fix(password): schema regressions

271d5fa93f96721d7bf8aa841c700dfec1de4104 authored almost 3 years ago by aeneasr <[email protected]>
refactor(password): DRY up registration helpers

8a51839ba85ddb5a345fef65f30b4325103ce38a authored almost 3 years ago by aeneasr <[email protected]>
feat(webauthn): add new decoder schemas

c3e1501bf5170416a034130eb68d1db456a47239 authored almost 3 years ago by aeneasr <[email protected]>
fix(lookup): resolve credentials counting regression

50782c68c77ce1c0d8c092678a6710e0be6fa18d authored almost 3 years ago by aeneasr <[email protected]>
fix(totp): resolve credentials counting regression

737bb3f71e91f7c735231d0131072aca4f5622ea authored almost 3 years ago by aeneasr <[email protected]>
test(webauthn): passwordless registration

c9b6280720c2fd08191994c86e85ceb1f52a27d2 authored almost 3 years ago by aeneasr <[email protected]>
fix: improve soundness of credential identifier normalization

e475163330d06ca02cd0419e4b7216f03218e8c5 authored almost 3 years ago by aeneasr <[email protected]>
feat(webauthn): passwordless login

b4c4fd2c25ae5d55350ce573df8295fe6d8c42a1 authored almost 3 years ago by aeneasr <[email protected]>
fix(text): incorrect IDs for different messages

Closes #2277

0833321e04e9865046294b051376bed415a41441 authored almost 3 years ago by aeneasr <[email protected]>
fix(identity): slow query performance on MySQL

Closes #2278

731b3c7ba48271e2fb6bbd53b0281d5269012332 authored almost 3 years ago by aeneasr <[email protected]>
feat(courier): expose setters again

598dc3a4d7c27838e9058382378972a1c0330bde authored almost 3 years ago by aeneasr <[email protected]>
feat(recovery): allow invalidation of existing sessions

You can now use the `revoke_active_sessions` hook in the recovery flow. It invalidates all of an...

502988474e2bce46752f7fc7885bc1b91423bbdd authored almost 3 years ago by aeneasr <[email protected]>
test(e2e): resolve privileged regression

f7dd5aba26b43aa9f60d8429a7d256f48f228578 authored almost 3 years ago by aeneasr <[email protected]>
feat(e2e): add passwordless flows and fix bugs

ef3871bd9b3e7e5f4360da8d1b7749cc005b4e19 authored almost 3 years ago by aeneasr <[email protected]>
test: fix regression

f96e48fa6d4d8b341bcd3f52228b7abff8b934fb authored almost 3 years ago by aeneasr <[email protected]>
test: remove only

87b3bce3433601dd918f76c0bc2d25ea4af6e482 authored almost 3 years ago by aeneasr <[email protected]>
chore: format

48d0367e2466a265caef23df6e97e59c022f4a97 authored almost 3 years ago by aeneasr <[email protected]>
fix(webauth): SPA regressions for login

be378ffa5ddbd56a00b471dce861ec074eed5192 authored almost 3 years ago by aeneasr <[email protected]>
refactor(oidc): credentials counting

b75a6390de85e10db8e9e17a74e95dd6dd716442 authored almost 3 years ago by aeneasr <[email protected]>
fix: snapshot regression

6481441fe7df1a2fc43ff153697e9bd2160c49b3 authored almost 3 years ago by aeneasr <[email protected]>
fix(sdk): add all available discriminators

Closes #2287
Closes #2288

5d70f9c70a39067c2d6c0b1f127ff28ca39e77a9 authored almost 3 years ago by aeneasr <[email protected]>
fix: mark struct as used

33f3dfeba5af3808f34b16241d74993ceed788be authored almost 3 years ago by aeneasr <[email protected]>
refactor(password): internals and deprecated fields

a7784bdb52aff0ac171e59b2301755b65c842813 authored almost 3 years ago by aeneasr <[email protected]>
test: update fixtures

21462b7eb8cbac719d8ae531969b0fd9d42b5e0c authored almost 3 years ago by aeneasr <[email protected]>
fix(oidc): improve empty credential handling

124d4ce9fe949dcea4fd5ff8e45530835d38cb3c authored almost 3 years ago by aeneasr <[email protected]>
fix(courier): improve composability

d47150e8440a03ce34d6085fb693bddf2c02620b authored almost 3 years ago by aeneasr <[email protected]>
feat(session): webauthn can now be a first factor as well

861bee0f029e3bb3f6b7218be19eaf6c26562b76 authored almost 3 years ago by aeneasr <[email protected]>
feat(oidc): customizable base redirect uri

Closes https://github.com/ory-corp/cloud/issues/2003

fa1f23469f2fecfa82fa38147f601d969bd9aaa4 authored almost 3 years ago by aeneasr <[email protected]>
fix: rebase regressions

d1c508570032c620a654b896111215a76a811517 authored almost 3 years ago by aeneasr <[email protected]>
test(e2e): resolve regressions

da154c5e549f79ca5703209852981ded07281f43 authored almost 3 years ago by aeneasr <[email protected]>
fix(session): properly declare session secrets

Previously, a misconfiguration of Gorilla's session store caused incorrect handling of the confi...

6312afd2eb0d1dc808d600a902eb1e16b07fd9cb authored almost 3 years ago by aeneasr <[email protected]>
feat(webauthn): implement refresh using webauth

This change introduces the ability to refresh a session (for example when entering "sudo" mode")...

bf108688ed146211da3cc2ec4bf0df015e535220 authored almost 3 years ago by aeneasr <[email protected]>
fix: resolve remaining passwordless regressions

151c8cfb53402aaf2518a471579c25c3785b13d2 authored almost 3 years ago by aeneasr <[email protected]>
fix(sdk): correct minimum page to 1

Closes #2286

a28362e054cf12441ed25d8927cd63e3264bfed6 authored almost 3 years ago by aeneasr <[email protected]>
fix: updated oathkeeper+kratos example (#2273)

567a3d765aa2115951f6af5b4ed4d2c791231de0 authored almost 3 years ago by Andrew Minkin <[email protected]>
fix(sdk): add webauth and lookup_secret to identityCredentialsType (#2276)

Signed-off-by: sawadashota <[email protected]>

61ce3c0c35366f587bfee5c89496fa15432bb241 authored almost 3 years ago by sawadashota <[email protected]>
fix: add DispatchMessage to interface

df2ca7a7c97a28d40c6a8af082f99ff7706ee9db authored almost 3 years ago by nipsufn <[email protected]>
autogen: regenerate SDK

a11841399956963bab319ce233a64ccb295d9b1d authored almost 3 years ago by Patrik <[email protected]>
docs: fix broken links

d88c56fc0ebf042d1270d04a2382784e5200654d authored almost 3 years ago by Patrik <[email protected]>
chore: remove issue reference

Closes https://github.com/ory/kratos/issues/2264

ab6640265055aa14c44029f64a8c3207138d7a21 authored almost 3 years ago by hackerman <[email protected]>
test: fix concurrent database access

46f6fb7d246b384e561bdf8952185855f25cce56 authored almost 3 years ago by aeneasr <[email protected]>
test: re-enable MySQL

cbe8f6ea4fe48fe84a5cbc8915754f83e7eff428 authored almost 3 years ago by aeneasr <[email protected]>
feat: ignore web hook response

Introduces the ability to ignore responses from web hooks in favor of faster and non-blocking ex...

ae87914512025c05d814a1200eda66d8f931ce44 authored almost 3 years ago by aeneasr <[email protected]>
chore: bump jsonnet

4918ec4c80a9f465e86e06fe4412204acde6161e authored almost 3 years ago by aeneasr <[email protected]>
feat: cancelable web hooks

Introduces the ability to cancel web hooks by calling `error "cancel"` in JsonNet.

44a5323f835860dccd11460d666f620026e8b58d authored almost 3 years ago by aeneasr <[email protected]>
chore: format

5a8a1fcb38cd62eb836e28aa4000d856434c4a15 authored almost 3 years ago by aeneasr <[email protected]>
refactor: move credential configs for oidc and password

50ac851cc4534aa474a76c208f15483548ec8631 authored almost 3 years ago by aeneasr <[email protected]>
fix: cloud config issue

135b29c647c87569cc85e8a72babb8d6777ebd24 authored almost 3 years ago by aeneasr <[email protected]>
fix: base64 encode identity schema URLs

Previously, identity schema IDs with special characters could lead to broken URLs. This patch in...

ad44e4d5f2cea86a95cc376c94fb5f5ac5bc1b82 authored almost 3 years ago by aeneasr <[email protected]>
test: significantly reduce persister run time

647d6ef73797462020c2f59ece15e645561182b0 authored almost 3 years ago by aeneasr <[email protected]>
test(e2e): resolve regressions

d46d435c40c383bbd844af8fead283ee46a137fb authored almost 3 years ago by aeneasr <[email protected]>
test: remove obsolete test

cd644aef9175fe21024c37a381722503fcd88555 authored almost 3 years ago by aeneasr <[email protected]>
refactor: mimic credentials config on import

c3eb7ce60597954a60b8903ac011a643d0facf12 authored almost 3 years ago by aeneasr <[email protected]>
fix: properly check for not found

77ac199f00f04eb7fd40db6fb546921271026e20 authored almost 3 years ago by aeneasr <[email protected]>
test: update fixtures

299c6e3be7c120bb769a4b2572ebe42c5ab3ddb1 authored almost 3 years ago by aeneasr <[email protected]>
fix: improve password error resilience on settings flow

e614f6e94e1d0f66f48bd058b015ab467d6b1b07 authored almost 3 years ago by aeneasr <[email protected]>
fix: resovle lint errors

afb7aaf7b019756a624e7f1b2e35fd575882570a authored almost 3 years ago by aeneasr <[email protected]>
test(e2e): add import tests

ed90f394d32ee0a3e42c3a9c1c066f94a05d02c1 authored almost 3 years ago by aeneasr <[email protected]>
fix: return 400 instead of 404 on admin recovery

Closes #1664

ae2509cf7a95f940d33945271ac1fe8fc255506b authored almost 3 years ago by aeneasr <[email protected]>
feat: password, social sign, verified email in import

This patch introduces the ability to import passwords (cleartext, PKBDF2, Argon2, BCrypt) and So...

41a27b1e15e090d3e99cdcfc3c1ba8eac76097a4 authored almost 3 years ago by aeneasr <[email protected]>
refactor: update apple and microsoft config key names (#2261)

BREAKING CHANGE: The following OpenID Connect configuration keys have been renamed to better exp...

6da2370b4e6833ef61ca03214261e45c4786cb44 authored almost 3 years ago by hackerman <[email protected]>