ARarekkas·Dec 13, 2017
As the author of a pluggable OAuth2 & OIDC Provider ( https://github.com/ory/hydra ) I am looking for an OSS IDP that solves just ID management. Is there a URL where I can expect this to land?
In AWS Single Sign-Onory
hydra
Go2016–2025
ory / hydra
hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
29Distinct people
36Mentions
0Explicit recommenders
17.7KGitHub stars
What to know before exploring
What it is
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. Solve OIDC/OAuth2 user cases over night. Consume as a service on Ory Network or self-host. Trusted by OpenAI and many others for scale and security. Written in Go.
GitHub
Where it is used
No documented product use was verified in the last source check.
What people are saying
No recommendation phrase was found in the indexed comments.
No classified warning is attached to this page. Read the discussions before treating silence as approval.
Also in these discussions
- dexidp/dex · linked in 3 of the same discussions
- ory/kratos · linked in 2 of the same discussions
- ory/oathkeeper · linked in 2 of the same discussions
Mentioned in the same Hacker News threads. That is not proof they are substitutes.
This week on Hacker News
Nov 8–Nov 15 UTC · Direct repository links and separately labeled related project stories. Indexed through 11/15/2026, 2:17:07 AM UTC.
No direct repository links were found in the indexed HN discussions over the past seven days. Older discussions are available below.
Mentions over time
HN mentions by year36 dated mentions
Observed mentions: 2016-05-29 20:26:48 UTC to 2025-11-11 09:18:46 UTC.
Counts come from the repository’s dated source evidence. Index cutoff: 2026-11-02 08:16:59 UTC.
View mention counts and date ranges
| Period | Start (UTC) | End (exclusive, UTC) | Mentions | Submissions | Comments |
|---|---|---|---|---|---|
| 2016 | 2016-01-01 00:00:00 UTC | 2017-01-01 00:00:00 UTC | 4 | 2 | 2 |
| 2017 | 2017-01-01 00:00:00 UTC | 2018-01-01 00:00:00 UTC | 8 | 0 | 8 |
| 2018 | 2018-01-01 00:00:00 UTC | 2019-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2019 | 2019-01-01 00:00:00 UTC | 2020-01-01 00:00:00 UTC | 2 | 0 | 2 |
| 2020 | 2020-01-01 00:00:00 UTC | 2021-01-01 00:00:00 UTC | 3 | 0 | 3 |
| 2021 | 2021-01-01 00:00:00 UTC | 2022-01-01 00:00:00 UTC | 5 | 1 | 4 |
| 2022 | 2022-01-01 00:00:00 UTC | 2023-01-01 00:00:00 UTC | 2 | 1 | 1 |
| 2023 | 2023-01-01 00:00:00 UTC | 2024-01-01 00:00:00 UTC | 5 | 1 | 4 |
| 2024 | 2024-01-01 00:00:00 UTC | 2025-01-01 00:00:00 UTC | 1 | 1 | 0 |
| 2025 | 2025-01-01 00:00:00 UTC | 2026-01-01 00:00:00 UTC | 3 | 2 | 1 |
What Hacker News says
8 sourcesThat would be great, thanks! Here are the links to the projects I mentioned.
https://github.com/coreos/dex
https://github.com/ory/hydra
In Show HN: Keratin AuthN – Accounts and Auth Microservice in GoUnfortunately Hydra does not (and will not) support the resource owner password credentials (ROPC) grant (https://github.com/ory/hydra/pull/297#issuecomment-294282671)
I'm no security expert, but to my understanding the ROPC grant makes sense for highly privileged applications, i.e. 1st party client applications (e.g. main app website, main native iOS client) as explained by http://oauthlib.readthedocs.io/en/latest/oauth2/grants/passw...
I've been looking around in this space for OAuth and auth out of the box alternatives. I've tried Kong's OAuth2 plugin (https://getkong.org/plugins/oauth2-authentication/) but after trying to integrate it felt like I had to write more code than necessary. Also had to configure a lot of APIs, and felt like it was clunky to manage them that way.
I have also tried to play with http://anvil.io, but the author
Read the rest
s are busy with another project (https://solid.mit.edu) so Anvil is taking a back seat. Even the Getting Started currently has known unfixed issues.
I am heavily investigating http://www.keycloak.org/, and so far I am really impressed. However though, to deploy you will need to delve into Wildfly/Java configurations. And of course, minimum 512MB to run any Java app on a node.
Dex is also advertised as a solution but it looks like the documentation could do with more information and improvements. https://github.com/coreos/dex Doesn't seem easy to just take and run.
Thanks to comments here, I might these looking at these next:
1. https://github.com/RichardKnop/go-oauth2-server
2. https://portier.github.io/
Good point, Hydra does this to for things like missing TLS encryption but not yet for secrets (it only rejects secrets that are too short). I've tracked this here: https://github.com/ory/hydra/issues/573
In Run your own OAuth2 serverIf you're not into reading the article itself and want to check out the technology first, here's the link to github: https://github.com/ory/hydra
If you have any questions, feel free to ask ahead.
In Run your own OAuth2 serverI make over 700$ per month through patreon for my open source work, primarily https://github.com/ory/hydra . Hydra started as a side project for a work-for-hire project. After getting bashed by people for it being trash (it was, mostly due to bad dependencies but also due to bad architecture), I rewrote it (and the libraries enabling it) and now it's one of the go-to services for getting an OAuth2 server up and running. I am very stubborn and spent a ton of time on auth* questions while building other projects, and it seems like people like my approaches to it! :)
It's come so far now that I'm starting to consider this my full-time thing (I'm in the final stages of completing my MSc computer science) and I'm currently running evaluation on an API security platform based on that technology. Basically, I spend most of my time on it and I ev
Read the rest
en got a small team helping me - but it's not what earns my living at the moment.
Before that I gathered a lot of experience from running and building https://en.serlo.org/ which is basically a Wikipedia for learning (I built the whole CMS from scratch) that serves over 1m MAUs in Germany (the english page is very sparse, most of it is on https://de.serlo.org ) and is thus on the most popular learning platforms in Germany. The company behind it is an NGO (= no profits) I cofounded and the platform is ad-free and doesn't cost anything. We get money through donations and other funds.
It's an exciting journey, I'm now at a point where I need to figure out how to actually make money on the web that doesn't come through donations and goodwill, but I think I can do it - why not, right?
By the way, you may also like the WYSIWYG editor I wrote - I also plan a static site generator based on it with a themeforest-y market place. Feel free to check those out:
* https://www.ory.am/sites/
* https://github.com/ory/editor
ps: It took me almost 2 years to get to 700$ at patreon and most of it comes from one sponsorship I'm very glad of. Their CTO texted me one day because he saw hydra on HN frontpage and he works in the identity space.
Ory makes some really cool stuff for OAuth / Authorization that we are considering using in our stack.
https://github.com/ory/hydra
https://github.com/ory/ladon
https://github.com/ory/fosite
In Show HN: ORY Editor – A rich editor for the browser, built with React and ReduxWhy do those policies make it there in the first place? Could you share some scenarios? I'd love to improve the managibility of policies :)
The hydra ( http://github.com/ory/hydra ) project for example has groups, which allow you to set e.g. an admin group and then assign people to it. I think this helps a lot with managing policies!
In Show HN: A Go Library for Better Access Control