Owner

ory

59 indexed repositories · View on GitHub

hydra
Internet-scale OpenID Certified™ OpenID Connect and OAuth2.1 provider that integrates with your user management through headless APIs. So...

Go · 17553 stars
kratos
Headless cloud-native authentication and identity management written in Go. Scales to a billion+ users. Replace Homegrown, Auth0, Okta, F...

Go · 13882 stars
keto
The most scalable and customizable permission server on the market. Fix your slow or broken permission system with Google's proven "Zanzi...

Go · 5398 stars
oathkeeper
A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming H...

Go · 3602 stars
polis
Streamline your web application's authentication with Polis, an SSO service supporting SAML and OpenID Connect protocols. Beyond enterpri...

TypeScript · 2264 stars
k8s
Kubernetes Helm Charts for the ORY ecosystem.

Mustache · 378 stars
kratos-selfservice-ui-node

TypeScript · 369 stars
hydra-login-consent-node
This is an ExpressJS reference implementation for the Ory Hydra User Login and Consent interface written in TypeScript and ExpressJS.

TypeScript · 330 stars
lumen
Save 30% token costs when using Claude Code, Codex, OpenCode for free - with open source, local semantic search. Works for small and larg...

Go · 297 stars
graceful
A best practice http server set up that supports graceful shutdown

Go · 208 stars
awesome-ory
A curated collection of examples and solutions created by the Ory Community.

Dart · 202 stars
elements
Ory Elements is a component library that makes building login, registration and account pages for Ory a breeze.

TypeScript · 187 stars
sdk
The place where Ory's SDKs are being auto-generated

PHP · 178 stars
mocksaml
A simple mock SAML 2.0 Identity Provider

TypeScript · 168 stars
kratos-selfservice-ui-react-nextjs
A full reference implementation for designing your own login, registration, recovery, verification, ... pages using Ory Kratos' APIs.

TypeScript · 162 stars
docs
The Ory documentation

TypeScript · 161 stars
herodot
A lightweight Go library for writing responses and errors to HTTP

Go · 130 stars
x
Libraries used in the Ory ecosystem

Go · 111 stars
kratos-selfservice-ui-react-native
A reference implementation of an app using ORY Kratos for auth (login), sign up (registration), profile settings (update password), MFA/2...

TypeScript · 110 stars
network
Ory runs a global end-to-end security infrastructure for humans, robots, and servers. We build and use open source software.

Shell · 96 stars
39 more repositories live on View on GitHub

Beginner friendly Everything

Open All

Expired native Login/Registration use_flow_id loses the session-token exchanger Open

Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 58/100

ory/kratos#4610 · Opened Sep 18, 2026
transient_payload is not propagated to all settings webhooks Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 66/100

ory/kratos#4609 · Opened Sep 17, 2026
feat: allow overriding Kratos serve and courier command/args Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

ory/k8s#903 · Opened Sep 17, 2026
search: KNN k=8192 exceeds sqlite-vec limit (4096) — semantic_search fails on any index >~4096 chunks Open

Difficulty 3/5 1-2 days Newbie friendliness 72/100

ory/lumen#187 · Opened Sep 15, 2026
serve.admin.request_log.disable_for_health has no effect: health paths missing /admin prefix in exclusion list Open

Needs Triage

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

ory/hydra#4130 · Opened Sep 14, 2026
serve.admin.request_log.disable_for_health has no effect (admin prefix added after the request logger) Open

Needs Triage

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

ory/kratos#4605 · Opened Sep 14, 2026
Support localhost redirection with arbitrary port Open

feat

Difficulty 3/5 1-2 days Newbie friendliness 68/100

ory/hydra#4127 · Opened Sep 9, 2026
Helm chart fails to render and cannot disable bundled PostgreSQL for an external DB Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

ory/polis#4081 · Opened Sep 9, 2026
Store init retries forever on a failed connect and never rejects (two unexitable while(true) loops) Open

Difficulty 4/5 3-5 days Newbie friendliness 48/100

ory/polis#4079 · Opened Sep 5, 2026
client: addFile closes the source file before io.Copy — multipart file uploads always fail Open

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

ory/client-go#12 · Opened Sep 5, 2026
Accepting login challenge with `remember: true, remember_for: 0` creates cookie with 30-day expiration Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 64/100

ory/hydra#4126 · 1 comment · Opened Sep 2, 2026
PreToolUse hook recommends semantic_search on every Bash/Grep call even when the embedding backend is down and the index is empty Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

ory/lumen#186 · Opened Sep 2, 2026
Hosted Account Experience breaks OAuth: consent page crash (RSC null deref) + COOP severs popup clients Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

ory/network#451 · 2 comments · Opened Sep 1, 2026
IdP-initiated SAML responses can be replayed; no used-assertion state is kept Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

ory/polis#4077 · Opened Aug 23, 2026
/health/ready reports ready after the first rule is loaded, so an incomplete rule set is served during startup Open

Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 48/100

ory/oathkeeper#1284 · Opened Aug 20, 2026
Single Logout uses global samlAudience as Issuer instead of the connection's samlAudienceOverride Open

Difficulty 2/5 1-3 hours Newbie friendliness 25/100

ory/polis#4076 · Opened Aug 10, 2026
Re-enable Dart SDK generation/release (kratos-client-dart lagging behind v26.2.0) Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

ory/sdk#480 · Opened Aug 9, 2026
remote_json: preserve 4xx status codes from remote authorizer Open

Needs Triage

Difficulty 4/5 3-5 days Newbie friendliness 58/100

ory/oathkeeper#1283 · Opened Aug 5, 2026
@boxyhq/saml-jackson 26.2.0 missing google-auth-library dependency Open

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

ory/polis#4072 · Opened Aug 5, 2026
Claim Artifact Hub ownership for the Ory Helm charts Open

Difficulty 1/5 Under an hour Newbie friendliness 45/100

ory/k8s#892 · Opened Jul 30, 2026
Device verification GET query parameters are not propagated to the authorization request Open

Needs Triage

Difficulty 3/5 1-2 days Newbie friendliness 78/100

ory/hydra#4118 · Opened Jul 30, 2026
Nil-pointer panic in JWT tokenizer when Jsonnet claims mapper returns non-object `claims` Open

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

ory/kratos#4585 · Opened Jul 23, 2026
Allow updating session information in webhooks Open

feat

Difficulty 5/5 Over a week Newbie friendliness 38/100

ory/kratos#4584 · 2 reactions · Opened Jul 23, 2026
upstream reference closed: github.com/w3c/webauthn/issues/1372 Open

good first issue help wanted upstream

Difficulty 1/5 1-3 hours Newbie friendliness 72/100

ory/docs#2684 · 2 comments · Opened Jul 18, 2026
Shared kratos pages can only belong to one sidebar — OEL readers lose navigation context Open

ory/docs#2674 · 1 assignee · Opened Jul 12, 2026
upstream reference closed: github.com/ory/elements/issues/575 Open

good first issue help wanted upstream

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

ory/elements#602 · Opened Jul 8, 2026
Valid sessions intermittently receive 401s under load Open

bug

Difficulty 5/5 Over a week Newbie friendliness 25/100

ory/kratos#4581 · Opened Jul 3, 2026
upstream reference closed: github.com/ory/kratos/issues/4194 Open

good first issue help wanted upstream

Difficulty 3/5 1-2 days Newbie friendliness 25/100

ory/elements#600 · Opened Jul 2, 2026
hydra PodDisruptionBudget helm template is missing namespace metadata Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

ory/k8s#884 · Opened Jul 1, 2026
oathkeeper PodDisruptionBudget helm template is missing namespace metadata Open

bug

Difficulty 1/5 Under an hour Newbie friendliness 90/100

ory/k8s#882 · Opened Jul 1, 2026
SetClientAssertionJWT inline DELETE on hydra_oauth2_jti_blacklist causes lock contention and latency spikes under concurrent load Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 52/100

ory/hydra#4113 · 2 comments · Opened Jul 1, 2026
Inconsistent "revoke_active_sessions" hook docs Open

bug

Difficulty 1/5 Under an hour Newbie friendliness 78/100

ory/docs#2651 · Opened Jun 29, 2026
Courier service health endpoints Open

feat

Difficulty 3/5 1-2 days Newbie friendliness 58/100

ory/kratos#4579 · Opened Jun 18, 2026
upstream reference closed: github.com/knadh/koanf/pull/47 Open

good first issue help wanted upstream

Difficulty 4/5 3-5 days Newbie friendliness 35/100

ory/oathkeeper#1277 · Opened Jun 18, 2026
upstream reference closed: github.com/kubescape/kubescape/pull/1568 Open

good first issue help wanted upstream

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

ory/oathkeeper#1276 · Opened Jun 18, 2026
upstream reference closed: github.com/gobuffalo/fizz/issues/45 Open

good first issue help wanted upstream

Difficulty 2/5 1-3 hours Newbie friendliness 35/100

ory/oathkeeper#1278 · Opened Jun 18, 2026
upstream reference closed: github.com/fsnotify/fsnotify/issues/199 Open

good first issue help wanted upstream

Difficulty 2/5 1-3 hours Newbie friendliness 42/100

ory/oathkeeper#1280 · Opened Jun 18, 2026
upstream reference closed: github.com/knadh/koanf/issues/77 Open

good first issue help wanted upstream

Difficulty 2/5 1-3 hours Newbie friendliness 30/100

ory/oathkeeper#1279 · Opened Jun 18, 2026
Dependency: pgx v5.9.2 missing auth downgrade protection (CWE-306, fix in v5.10.0) Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

ory/kratos#4576 · Opened Jun 14, 2026
Device flow: denied consent does not return access_denied to the polling client (UserCodeRejected never set) Open

backlog bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

ory/hydra#4110 · Opened Jun 12, 2026
Dependency: pgx v5.9.2 vulnerable to auth downgrade (CWE-306, fix in v5.10.0) Open

Difficulty 1/5 1-3 hours Newbie friendliness 72/100

ory/kratos#4573 · Opened Jun 12, 2026
JWKS parsing fails entirely when provider includes ES256K (secp256k1 in Telegram OIDC) Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 52/100

ory/kratos#4572 · 1 reaction · Opened Jun 12, 2026
Don't create random client id and credentials if external k8s scret is referenced and it does not exist yet Open

feat

Difficulty 5/5 Over a week Newbie friendliness 40/100

ory/hydra-maester#294 · Opened Jun 11, 2026
Perform a "Skills installation" Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

ory/codex-plugins#1 · Opened Jun 8, 2026
Windows: `index` processes all files but writes 0 chunks (silent failure) Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

ory/lumen#173 · Opened May 31, 2026
Lumen seems to be reindexing worktrees Open

Difficulty 4/5 3-5 days Newbie friendliness 45/100

ory/lumen#169 · 1 reaction · Opened May 29, 2026
upstream reference closed: github.com/ory/kratos/issues/2167 Open

good first issue help wanted upstream

Difficulty 1/5 Under an hour Newbie friendliness 58/100

ory/docs#2591 · Opened May 27, 2026
upstream reference closed: github.com/ory/hydra/issues/3363 Open

good first issue help wanted upstream

Difficulty 1/5 1-3 hours Newbie friendliness 72/100

ory/docs#2590 · Opened May 27, 2026
upstream reference closed: github.com/flutter/flutter/issues/33393 Open

good first issue help wanted upstream

Difficulty 1/5 Under an hour Newbie friendliness 38/100

ory/awesome-ory#115 · Opened May 27, 2026
upstream reference closed: github.com/knadh/koanf/pull/47 Open

good first issue help wanted upstream

Difficulty 3/5 1-2 days Newbie friendliness 42/100

ory/keto#1843 · Opened May 27, 2026

Showing the newest 100

This page lists what was indexed most recently. Advanced filter has the whole inventory, narrowed by language, difficulty and how long a task takes.

Open advanced filter

ory

Showing the newest 100

Get new issues in your inbox