ory hydra, Kratos

Hi everyone! I have created an extremely simple hydra + kratos implementation in Go. Should be easy to follow and translate to any other language of your choice. It's WIP and does not have a RE...

In May 2021, we open sourced Pixie, which had previously been a closed source application with closed source dependencies. As part of that process, we needed to change all of those dependencies from our system. In this case, we needed to create an authentication path that didn't rely on Auth0.

When we building a server application that needs to protect some API resource, usually we only direct implemented simple authentication method. We send user's credential directly to the server and then server respond with a session or returning a random string (access token) that we save in our database: stating that this {access_token} is owned by this {user_id}.

In my upcoming articles, I implemented authentication on the API Gateway side using JWT tokens.But it's time to take a big step forward (of course with little effort)It's time to implement OAuth2 and OpenID protocol to access our resources. And we will no longer have to solve the problem with revoked tokens and many more with what.