vinckr

6 ms·

1.
by vinckr 20d ago
Just out of interest, what makes you choose Ory over Keycloak/WorkOs?
2.
by vinckr 20d ago
Ory Kratos has a password migration hook that lets you migrate password credentials out of anything (including Cognito) without password resets. I believe most other (modern) auth vendors have an equivalent. I really don't see any rea
3.
by vinckr 20d ago
Yup for the Ory managed service (Ory Network) you can export all data through the admin API including hashed passwords. Of course when self-hosting Ory you have full control over the database as well. Disclosure: working for Ory.
4.
by vinckr 4mo ago
Has that law ever been enforced ? (e.g. taking away a FOSS or other project that someone wrote in their own time)
5.
by vinckr 4mo ago
in most cases you dont need explicit permission but you need to sign a CLA (Individual Contributor License Agreement) - which kind of includes permission
6.
by vinckr 4mo ago
Coming from Germany I found it funny how tiny the subway lines are in major cities in the US compared to medium-sized cities here. I always thought Germany was a country centered a lot around cars but it was so much more extreme in the stat
7.
by vinckr 4mo ago
Personally I hate magic links via email with a passion and will actively avoid products that have this as the only authentication method
8.
by vinckr 4mo ago
I don't think we can let that one go so easily, since they might not be scanning for ad targeting (pinky promise?) - but they most certainly will slurp everything up for their AI stuff: https://blog.google/products-and-
9.
by vinckr 5mo ago
How is it obvious that this project bought starts on GitHub?
10.
by vinckr 7mo ago
Very cool, thanks for sharing. Feel free to add it to https://github.com/ory/awesome-ory !
11.
The Agentic Trust Framework: Zero Trust Governance for AI Agents(cloudsecurityalliance.org)
1 points by vinckr 8mo ago|0 comments
12.
by vinckr 9mo ago
> Tickets cannot be moved between trackers You can convert an issue to a discussion and vice versa, so no duplication is needed and your notification should be preserved. Or do you mean something else?
13.
by vinckr 9mo ago
after clicking on your link I browsed twitter for a minute and damn that place has become weird (or maybe it always was?)
14.
by vinckr 9mo ago
I think most commit messages use conventional commits ( https://www.conventionalcommits.org/en/v1.0.0/ ) - I found them to be quite useful for creating structures commit messages. I think gitmore could be improved i
15.
by vinckr 10mo ago
These are fair concerns, and I want to clarify what's included versus what's paid. The confusion here is about two different types of SSO: _Admin SSO (for managing Ory itself)_ - Ory is fundamentally an API. For self-hosted deploy
16.
by vinckr 10mo ago
if you leave the admin APIs unsecured in production it is an attack vector, not sure what you would prefer being told here? It says "When deploying Ory open-source Servers, protect access to their APIs using Ory Oathkeeper or a compara
17.
by vinckr 10mo ago
sorry to hear that, hope you have a better experience going forward. if you feel like it send me some details on what was most painful and we'll fix it.
18.
by vinckr 10mo ago
Another problem is also that "standards" like OAuth2/OIDC are used for a thousand use cases that weren't intended by the authors, so people get really creative with them. Plus the spec itself is vague on many essential
19.
by vinckr 10mo ago
if you are a masochist that is a great retirement project!
20.
by vinckr 10mo ago
Check out Ory Polis if you want SAML/SCIM support: https://github.com/ory/polis CAPTCHA is not in scope for Kratos, there are already great solutions out there that you can use
21.
by vinckr 10mo ago
You can use other parts of the Ory ecosystem to add these features, such as Ory Polis for SAML/SCIM support: https://github.com/ory/polis CAPTCHAs aren’t a big help anymore in my personal opinion, but you can easi
22.
by vinckr 10mo ago
you should check out Ory Polis if you are looking for SAML support in the OSS version: https://github.com/ory/polis
23.
by vinckr 10mo ago
Ory Kratos itself doesn't support SAML that is correct. However the newest addition to the Ory ecosystem, called Ory Polis (formerly known as BoxyHQ) does close that gap. It is also Apache2 licensed, do check it out here: https:&#x2F
24.
by vinckr 10mo ago
i feel you; working with a heavily patched fork of anything can be rough check out the new version, i'm sure it has improved quite a bit since then. Of course simpler solutions than Ory Kratos exist, but they often come with other trad
25.
by vinckr 10mo ago
sure, I would say its mostly correct. You can solve Permissions and API Gateway also differently - for example many use OAuth2 claims and scopes for permissions. I personally think that isn't good practice - like "first-party au
26.
by vinckr 10mo ago
that's fair! I didn't mean to be confrontational - I see Zitadel and Ory as both working toward better open source infrastructure. At Ory, features like high-availability setups, zero-downtime upgrades, large scale multi-tenancy,
27.
by vinckr 10mo ago
Hey, if you want to share a bit more feedback would love to hear it! feel free to also message me directly if you don't want to share it here. tbh i don't know too much about it other than that they moved away from the apache2 li
28.
by vinckr 10mo ago
It depends what your requirements are. If you are "just" doing first-party login, session, and user mgmt then Ory Kratos is all you need. I would say in the majority of cases you would be fine with just Ory Kratos. If you want 3r
29.
by vinckr 10mo ago
Yea part of the motivation to create Ory Kratos was that Keycloak was too clunky and cumbersome for us to use, also hard to scale and a bunch of other issues - so we wrote our own basically. (i work for Ory as DevRel)
30.
by vinckr 11mo ago
Hey Dan, appreciate the discussion! Ory’s setup is indeed true multi-region active-active; not just sharded or active-passive failover. Each region runs a full stack capable of handling both read and write operations, with global data co

More ›