Ory Hydra, the OAuth2 and OpenID Connect server designed for web-scale deployments introduces over 6x higher OAuth2 throughput on a single PostgreSQL instance!

Want to check out Ory Hydra yourself? Try common OAuth2 flows in the Ory OAuth2 Get Started guide!

This version significantly enhances performance, processing over 6x more authorization flows than version 2.1, thanks to architectural improvements that minimize database interactions for login and consent processes.

Key improvements include:

• Enhanced integration with Ory Kratos, ensuring seamless synchronization of login and logout states across both services. Users logged out from Ory Hydra will automatically log out from Ory Kratos, enhancing security and user experience.
• The ability to bypass the logout consent screen for specific clients, streamlining the logout process.
• Simplified migration with the new feature to import OAuth2 Client IDs, making the transition to Ory Hydra smoother.
• Support for the OIDC Verifiable Credentials specification, expanding the server's capabilities in identity verification.

Thank all contributors who have made this release available!

Bug Fixes

• Return empty slice if requested_scope or audience is null (#3711) (65165e7)

• Correct id token type in token exchange response (#3625) (d1f9ba8):

  Closes https://github.com/ory/client-go/issues/2

• Dropped persistence/sql test errors (#3670) (22f0119)

• Handle logout double-submit gracefully (#3675) (5133cf9)

• Handle subject mismatch gracefully () ():

Documentation

• Fix typo (#3649) (f0501d2)

Features

• Add --skip-logout-consent flag to CLI (#3709) (f502d6e)

• Add authentication options to hooks (#3633) (5c8e792)

• Add flag to export public keys (#3684) (62c006b)

• Add missing index for jwk table (#3691) (39ee5e1)

• Add prompt=registration (#3636) ():

Changelog

• b346f90e autogen(docs): generate and bump docs
• 01aeffc6 autogen(docs): regenerate and update changelog
• 3a65840d autogen(docs): regenerate and update changelog
• 2dc52b4d autogen(docs): regenerate and update changelog
• 74732591 autogen(docs): regenerate and update changelog
• 4b8c9715 autogen(docs): regenerate and update changelog
• d0dfc0f0 autogen(docs): regenerate and update changelog
• 9e9be2d2 autogen(docs): regenerate and update changelog
• ada59a5f autogen(docs): regenerate and update changelog
• cdd2647c autogen(docs): regenerate and update changelog
• e4c160f5 autogen(docs): regenerate and update changelog
• 5121dba3 autogen(docs): regenerate and update changelog
• 21e0a9bd autogen(docs): regenerate and update changelog
• 89b1b1bd autogen(docs): regenerate and update changelog
• 0a5e0439 autogen(docs): regenerate and update changelog
• 6cbe0893 autogen(docs): regenerate and update changelog
• 78617027 autogen(docs): regenerate and update changelog
• c9f4b5f3 autogen(docs): regenerate and update changelog
• fe260d10 autogen(docs): regenerate and update changelog
• fbf39dd3 autogen(docs): regenerate and update changelog
• 9b33fc55 autogen(docs): regenerate and update changelog
• f9cee328 autogen(docs): regenerate and update changelog
• 841d58b8 autogen(docs): regenerate and update changelog
• 4a8e9a4c autogen(docs): regenerate and update changelog
• cdc0bec3 autogen(openapi): regenerate swagger spec and internal client
• 4a00e3e0 autogen(openapi): regenerate swagger spec and internal client
• dedcf5b4 autogen(openapi): regenerate swagger spec and internal client
• 92eb03a0 autogen(openapi): regenerate swagger spec and internal client
• f9a87d35 autogen(openapi): regenerate swagger spec and internal client
• 1ff8f20a autogen(openapi): regenerate swagger spec and internal client
• 11bf9df8 autogen(openapi): regenerate swagger spec and internal client
• e7968931 autogen(openapi): regenerate swagger spec and internal client
• 27f2ef50 autogen(openapi): regenerate swagger spec and internal client
• 35d62950 autogen(openapi): regenerate swagger spec and internal client
• ce00a428 autogen(openapi): regenerate swagger spec and internal client
• db4fd7d1 autogen(openapi): regenerate swagger spec and internal client
• 146b1625 autogen(openapi): regenerate swagger spec and internal client
• e1636d1e autogen(openapi): regenerate swagger spec and internal client

Artifacts can be verified with cosign using this public key.