Tags give the ability to mark specific points in history as being important
-
v0.5.5-alpha.1
83aedcb8 · ·The ORY Community is proud to present you the next iteration of ORY Kratos. In this release, we focused on improving production stability!
-
v0.5.4-alpha.1
b02926c4 · ·This release introduces the new CLI command `kratos hashers argon2 calibrate 500ms`. This command will choose the best parameterization for Argon2. Check out the [Choose Argon2 Parameters for Secure Password Hashing and Login](https://www.ory.sh/choose-recommended-argon2-parameters-password-hashing/) blog article for more insights!
-
v0.5.3-alpha.1
64dc91af · ·This release improves the developer and user experience around CSRF counter-measures. It should now be possible to use the self-service API flows without having to explicitly disable cookie features in your SDKs and integrations. Additionally, another issue in the CGO pipeline was resolved which finally allows running ORY Kratos without CGO if the target database is not SQLite. Further improvements to default config values have been made and a full end-to-end test suite for the exemplary [kratos-selfservice-ui-react-native](kratos-selfservice-ui-react-native) app. The app is now available in the iTunes store as well - just search for "ORY Profile App"!
-
-
v0.5.1-alpha.1
b85b36b9 · ·This release resolves an issue where ORY Kratos Docker Images without CGO and SQLite support would fail to boot even when SQLite was not used as a data source.
-
v0.5.0-alpha.1
557d37d1 · ·The ORY team and community is very proud to present the next ORY Kratos iteration! ORY Kratos is now capable of handling native (iOS, Android, Windows, macOS, ...) login, registration, settings, recovery, and verification flows. As a goodie on top, we released a reference React Native application which you can find on [GitHub](http://github.com/ory/kratos-selfservice-ui-react-native). We co-released our reference React Native application which acts as a reference on implementing these flows:    In total, almost 1200 files were changed in about 480 commits. While you can find a list of all changes in the changelist below, these are the changes we are most proud of: - We renamed login, registration, ... requests to "flows" consistently across the code base, APIs, and data storage. We now: - Initiate a login, registration, ... flow; - Fetch a login, registration, ... flow; and - Complete a login, registration, ... flow using a login flow method such as "Log in with username and password". - All self-service flows are now capable of handling API-based requests that do not originate from Browser such as Chrome. This is set groundwork for handling native flows (see above)! - The self service documentation has been refactored and simplified. We added code samples, screenshots, payloads, and curl commands to make things easier and clearer to understand. Video guides have also been added to help you and the community get things done faster! - Documentation for rotating important secrets such as the cookie and session secrets was added. - The need for reverse proxies was removed by adding the ability to change the ORY Kratos Session Cookie domain and path! The [kratos-selfservice-ui-node](https://github.com/ory/kratos-selfservice-ui-node) reference implementation no longer requires HTTP Request piping which greatly simplifies the network layout and codebase! - The ORY Kratos CLI is now capable of managing identities with an interface that works almost like the Docker CLI we all love! - Admins are now able to initiate account recovery for identities. - Email verification and account recovery were refactored. It is now possible to add additional strategies (e.g. recovery codes) in the future, greatly increasing the feature set and security capabilities of future ORY Kratos versions! - Lookup to Have I Been Pwnd is no longer a hard requirement, allowing registration processes to complete when the service is unavailable or the network is slow. - We contributed several issues and features in upstream projects such as justinas/nosurf, gobuffalo/pop, and many more! - The build pipeline has been upgraded to support cross-compilation of CGO with Go 1.15+. - Fetching flows no longer requires CSRF cookies to be set, improving developer experience while not compromising on security! - ORY Kratos now has ORY Kratos Session Cookies (set in the HTTP Cookie header) and ORY Kratos Session Tokens (set as a HTTP Bearer Authorization token or the `X-Session-Token` HTTP Header). Additionally tons of bugs were fixed, tests added, documentation improved, and much more. Please note that several things have changed in a breaking fashion. You can find details for the individual breaking changes in the changelog below. We would like to thank all community members who contributed towards this release (in no particular order): - https://github.com/kevgo - https://github.com/NickUfer - https://github.com/drwatsno - https://github.com/alsuren - https://github.com/wezzle - https://github.com/sherbang - https://github.com/perryao - https://github.com/jikunchong - https://github.com/err0r500 - https://github.com/debrutal - https://github.com/c0depwn - https://github.com/aschepis - https://github.com/jakhog Have fun exploring the new release, we hope you like it! If you haven't already, join the [ORY Community Slack](http://slack.ory.sh) where we hold weekly community hangouts via video chat and answer your questions, exchange ideas, and present new developments!
-
-
-
v0.4.4-alpha.1
154d543e · ·The purpose of this release is to resolve issues with install scripts, homebrew, and scoop.
-
v0.4.3-alpha.1
a3a34b1e · ·We are very happy to announce the 0.4 release of ORY Kratos with 163 commits and 817 changed files with 52,681 additions and 9,876 deletions. There have been many improvements and bugfixes merged. The biggest changes are: 1. Account recovery ("reset password") has been implemented. 2. Documentation has been improved with easier to understand examples - currently only for account recovery so let us know what you think! 3. The configuration has been simplified a lot. It is now much easier to enable account recovery and email verification. This is a breaking change - please read the breaking changes section with care! 4. The Identity Traits JSON Schema has been renamed to the Identity JSON Schema. This is a breaking change - please read the breaking changes section with care! 5. `prompt=login` has been renamed to `refresh=true`. This is a breaking change - please read the breaking changes section with care! 6. We have reworked how (error) messages are returned. They now include an ID and all the parameters required for translating and customizing UI messages. This is a breaking change - please read the breaking changes section with care! 7. Instead of keeping track of `update_successful` with booleans, flows (e.g. the settings flow) that have more than one state now include a state machine. This is a breaking change - please read the breaking changes section with care! 8. Tons of tests have been added. 9. We have reworked and fully tested the migration pipeline to prevent breaking schema changes in future versions. 10. ORY Kratos now supports login with Azure AD and the Microsoft Identity Platform. Before upgrading, please make a backup of your database and read the section "Breaking Changes" with care! -
v0.4.2-alpha.1
20024cbb · ·We are very happy to announce the 0.4 release of ORY Kratos with 153 commits and 760 changed files with 36,223 additions and 9,754 deletions. There have been many improvements and bugfixes merged. The biggest changes are: 1. Account recovery ("reset password") has been implemented. 2. Documentation has been improved with easier to understand examples - currently only for account recovery so let us know what you think! 3. The configuration has been simplified a lot. It is now much easier to enable account recovery and email verification. This is a breaking change - please read the breaking changes section with care! 4. The Identity Traits JSON Schema has been renamed to the Identity JSON Schema. This is a breaking change - please read the breaking changes section with care! 5. `prompt=login` has been renamed to `refresh=true`. This is a breaking change - please read the breaking changes section with care! 6. We have reworked how (error) messages are returned. They now include an ID and all the parameters required for translating and customizing UI messages. This is a breaking change - please read the breaking changes section with care! 7. Instead of keeping track of `update_successful` with booleans, flows (e.g. the settings flow) that have more than one state now include a state machine. This is a breaking change - please read the breaking changes section with care! 8. Tons of tests have been added. 9. We have reworked and fully tested the migration pipeline to prevent breaking schema changes in future versions. 10. ORY Kratos now supports login with Azure AD and the Microsoft Identity Platform. Before upgrading, please make a backup of your database and read the section "Breaking Changes" with care! -
v0.4.0-alpha.1
e8690c40 · ·We are very happy to announce the 0.4 release of ORY Kratos with 153 commits and 760 changed files with 36,223 additions and 9,754 deletions. There have been many improvements and bugfixes merged. The biggest changes are: 1. Account recovery ("reset password") has been implemented. 2. Documentation has been improved with easier to understand examples - currently only for account recovery so let us know what you think! 3. The configuration has been simplified a lot. It is now much easier to enable account recovery and email verification. This is a breaking change - please read the breaking changes section with care! 4. The Identity Traits JSON Schema has been renamed to the Identity JSON Schema. This is a breaking change - please read the breaking changes section with care! 5. `prompt=login` has been renamed to `refresh=true`. This is a breaking change - please read the breaking changes section with care! 6. We have reworked how (error) messages are returned. They now include an ID and all the parameters required for translating and customizing UI messages. This is a breaking change - please read the breaking changes section with care! 7. Instead of keeping track of `update_successful` with booleans, flows (e.g. the settings flow) that have more than one state now include a state machine. This is a breaking change - please read the breaking changes section with care! 8. Tons of tests have been added. 9. We have reworked and fully tested the migration pipeline to prevent breaking schema changes in future versions. 10. ORY Kratos now supports login with Azure AD and the Microsoft Identity Platform. Before upgrading, please make a backup of your database and read the section "Breaking Changes" with care! This release requires running SQL migrations when upgrading! -
v0.3.0-alpha.1
43b693a4 · ·This release finalizes the OpenID Connect and OAuth2 login, registration, and settings strategy with JsonNet data transformation! From now on, "Sign in with Google, Github, ..." is officially supported! It's also possible to link and unlink these connections using the Self-Service Settings Flow! The documentation has been updated to reflect those changes and includes guides to setting up "Sign in with GitHub" in under 5 Minutes! Please be aware that existing OpenID Connect connections will stop working. Check out the "Breaking Changes" section for more info! Want to learn more? Check [out the docs](https://www.ory.sh/kratos/docs/concepts/credentials/openid-connect-oidc-oauth2)! We also changed the config validation output, making it easier than ever to find bugs in your config: ``` % kratos --config invalid-config.yml serve INFO[0001] Config file loaded successfully. path=invalid-config.yml ERRO[0001] The provided configuration is invalid and could not be loaded. Check the output below to understand why. config_file=invalid-config.yml dsn: <nil> ^-- one or more required properties are missing urls.whitelisted_return_to_urls: https://selfservice.office.example.com ^-- expected array, but got string FATA[0001] The services failed to start because the configuration is invalid. Check the output above for more details. ``` This release concludes over 50 commits and 16.000 lines of code changed. -
-
v0.2.0-alpha.2
ab916894 · ·This is a heavy release with over hundreds of commits and files changed! Let's take a look at some of the highlights! **ORY Oathkeeper now optional** Using ORY Oathkeeper to protect your API is now optional. The basic quickstart now uses a much simpler set up. Go [check it out](https://www.ory.sh/kratos/docs/quickstart) now! **PostgreSQL, MySQL, CockroachDB support now tested and official!** All three databases now pass acceptance tests and are thus officially supported! **Self-Service Profile Flow** The self-service profile flow has been refactored into a more generic flow allowing users to make modifications to their traits and credentials. Check out the [docs to learn more](https://www.ory.sh/kratos/docs/self-service/flows/user-settings-profile-management) about the flow and it's features. Please keep in mind that the flow's APIs have changed. We recommend re-reading the docs! **Managing Privileged Profile Fields** Flows such as changing ones profile or primary email address should not be possible unless the login session is fresh. This prevents your colleague or evil friend to take over your account while you make yourself a coffee. ORY Kratos now supports this by redirecting the user to the login screen if changes to sensitive fields are made. The changes will only be applied after successful reauthentication. **Changes to Hooks** This patch focuses on refactoring how self-service flows terminate and changes how hooks behave and when they are executed. Before this patch, it was not clear whether hooks run before or after an identity is persisted. This caused problems with multiple writes on the HTTP ResponseWriter and other bugs. This patch removes certain hooks from after login, registration, and profile flows. Per default, these flows now respond with an appropriate payload ( redirect for browsers, JSON for API clients) and deprecate the `redirect` hook. This patch includes documentation which explains how these hooks work now. Additionally, the documentation was updated. Especially the sections about hooks have been refactored. The login and user registration docs have been updated to reflect the latest changes as well. BREAKING CHANGE: Please remove the `redirect` hook from both login, registration, and settings after configuration. Please remove the `session` hook from your login after configuration. Hooks have moved down a level and are now configured at `selfservice.<login|registration|settings>.<after|before>.hooks` instead of `selfservice.<login|registration|settings>.<after|before>.hooks`. Hooks are now identified by `hook:` instead of `job:`. Please rename those sections accordingly. We recommend re-reading the [Hooks Documentation](https://www.ory.sh/kratos/docs/self-service/hooks/index). **Changing Passwords** It's now possible to change your password using the Self-Service Settings Flow! Lean more about this flow [here](https://www.ory.sh/kratos/docs/self-service/flows/user-settings-profile-management) **End-To-End Tests** We added tons of end-to-end and integration tests to find and fix pesky bugs.
-
-
-
-
-