Ory Network, Ory Hydra, Ory Kratos, Ory Keto v26.1.11 released + Terraform Provider

Ory Network

SAML certificate expiry date available in provider config

The provider configuration now includes the SAML certificate expiry date, enabling monitoring and proactive rotation of expiring certificates.

This is now available on Ory Network.

Terraform Provider for Ory Network (Beta)

Ory Network now has an official Terraform provider. You can manage identities, OAuth2 clients, social providers, project config, organizations, permissions, email templates, and webhooks as infrastructure-as-code.

This is a beta release. Test on staging or dev projects before using in production.

Registry: https://registry.terraform.io/providers/ory/ory/latest

GitHub: https://github.com/ory/terraform-provider-ory

Please report bugs by opening an issue on the repo.

Ory Hydra

Breaking change in pagination tokens

Upgrading directly to any version above 26.1.7 will break active pagination sessions for the following endpoints: listOAuth2Clients, listOAuth2ConsentSessions, listTrustedOAuth2JwtGrantIssuers.
Pagination tokens expire after 1 hour. Version 26.1.7 accepts tokens issued by older versions and issues tokens in the new format. Versions above 26.1.7 only accept the new format.
To upgrade without disruption: upgrade to 26.1.7 first, wait 1 hour for all active tokens to expire and be replaced, then upgrade to your target version.

This is now available for the Ory Enterprise License and will be part of the next Ory Open Source release.

Ory Kratos

Breaking change in pagination tokens

Upgrading directly to any version above 26.1.7 will break active pagination sessions for the listCourierMessagesendpoint.
Pagination tokens expire after 1 hour. Version 26.1.7 accepts tokens issued by older versions and issues tokens in the new format. Versions above 26.1.7 only accept the new format.
To upgrade without disruption: upgrade to 26.1.7 first, wait 1 hour for all active tokens to expire and be replaced, then upgrade to your target version.

This is now available for the Ory Enterprise License and will be part of the next Ory Open Source release.

Ory Keto

Breaking change in pagination tokens

Upgrading directly to any version above 26.1.7 will break active pagination sessions for the GET /relation-tuplesendpoint.
Pagination tokens expire after 1 hour. Version 26.1.7 accepts tokens issued by older versions and issues tokens in the new format. Versions above 26.1.7 only accept the new format.
To upgrade without disruption: upgrade to 26.1.7 first, wait 1 hour for all active tokens to expire and be replaced, then upgrade to your target version.

Optimizes List Tuples query performance

Optimizes pagination performance for certain list relation-tuple queries. This also changes the order of results while ensuring stable pagination.

This is now available on Ory Network, for the Ory Enterprise License, and will be part of the next Ory Open Source release.

Ory Oathkeeper, Ory Polis, and Ory Elements

No significant changes in this release.