Ory Blog & Articles

Hop-by-hop header vulnerability in go standard library reverse proxy description and how to fix it

Our Commitment to Protecting Your Data and Privacy.

What is the right solution for you: self-hosting or the Ory Network?

In this step-by-step guide, discover how to effectively use Ory with Cloudflare Workers to optimize your application's performance.

Explore the latest authentication methods and their benefits and drawbacks in this in-depth article. This article provides valuable insights into how to secure your online services with strong authentication mechanisms.

In this guide, you will learn how to manage your Ory Network projects using the API. You can just copy & paste our code snippets to manage your Ory Network projects.

Is Ory Network the right fit for you?

Ory has listened to your feedback and made changes to the pricing structure. Review our new transparent and accessible pricing plan.

Learn how to save money and improve customer value using Ory.

The Ory Permission Language is a language that allows configuring Ory Keto.

The Ory SDKs are now released as version 1.0!

We built login and account management, so you don’t have to.

A global network for end-to-end security

A new milestone for Ory Hydra, the OpenID Certified OAuth 2.0 and OpenID Connect Server.

Customize email templates for all out-of-band communication. With code examples!

Was your authentication portal breached by some unknown hacker? You may not be alone. Here is an overview of the most common attack vectors against authentication services.

Replace legacy identity infrastructure IdentityServer with modern, cloud-native, and scalable open source services by Ory. Read more about the implementation of an IdentityServer alternative here.

Add login, registration, user and profile management to Django applications in minutes using the Ory Kratos open source project.

Announcing Ory's second Community Call of 2022

Learn how to migrate build a URL shortener using the Ory Kratos and Supabase open source projects. Includes code examples for Go and Docker!

Ory’s flagship zero trust network “Ory Network” is a global, scalable and secure platform for managing identities and its distribution across various internet services.

Build a social network to share side projects and explore what other studends are making, using open source software and Ory Kratos for authentication.

Learn how to build a URL shortener using the Ory Kratos and Supabase open source projects. Includes code examples for Nuxt and Tailwind CSS!

Build scalable and secure zero trust microservice architecture using open source components from Ory and Kong.

Do I need authentication or authorization? Do I require a session? Is a session a cookie or a token? Do I require JWTs or Cookies?

Learn how to build a URL shortener using the Ory Kratos and Supabase open source projects. Includes code examples for Go and Docker!

Announcing Ory's first Community Call of 2022

In this article we'll show you a cost effective way to build bots for Slack

How Vadosware built LoginWithHN, an OAuth2+OpenID Connect provider for HackerNews using the Ory Hydra open source project.

Add login, registration, user and profile management to Flutter web applications in minutes using the Ory Kratos open source project. Includes code examples for Dart!

Securing your flask application with open source solutions

Use hardware tokens like Yubikey to secure Ory Network admin accounts.

OAuth2.0 for Ory Network is coming

Practical steps and tips for organizing a conference for your community, focused on developer and open source communities.

Adding OAuth2 / OpenID Connect to your application is a complex process. This article will help you understand why you do not need OAuth2 / OpenID Connect in most cases!

This article is a company announcement that informs about the Series A investment.

The log4j vulnerability sparked a new discussion about open source maintainership and how it can be improved. This article summarizes the discussion and shows how Ory is addressing the problem.

A distillation of the key beliefs that underpin Ory as an organization.

Build custom login, registration, user settings, password recovery, email and phone verification pages to your Next.js React Single Page Application (SPA) using the ORY Kratos open source project. Includes code examples for TypeScript and Docker, and end-to-end tests!

Add login, registration, user and profile management to Next.js Single Page Applications in minutes using the ORY Kratos open source project. Includes code examples for TypeScript and Docker, and end-to-end tests!

Learn how to your existing node.js backend with the Ory Network, business model and data architecture.

This is an example of integrating the Ory Network with a Flutter frontend.

Add login, registration, user, and profile management to React Native mobile and desktop apps using the Ory Kratos open source project. Includes code examples for TypeScript and Docker!

In this guide, you will set up a hardened, fully functional OAuth2 Server and OpenID Connect provider using open source only. It will take you about ~10 minutes. We will use Ory Hydra (open source), a security-first OAuth2 and OpenID Connect server written in Golang.

A hands-on example of Ory Keto based on a real use case. Try out the capabilities of an open source implementation of the Google Zanzibar authorization system with code examples!

This article discusses the pioneering efforts by Ory to build the open source implementation of Google Zanzibar called Ory Keto. It will outline the motivation, challenges and concepts of building a global, low latency consistent access control system.

This article gives a short introduction to Dockertest and how Google is using it against Covid19, also an overview about the open-source virus response in general.

Pick recommended Argon2 (Argon2id, Argon2i) parameters (iteration, memory, parallelism) for secure login and password hashing, following security best practices using only open source.

Run ORY Kratos as a serverless service on Kubernetes and Knative with scale-to-zero deployments.

A short introduction into modern application architecture and Ory's thinking and philosophy around software development.

Learn how to test SQL migrations in any environment. This guide will point out all the considerations we at ORY make when implementing SQL migration tests for our open source products.

We are very excited to announce the 1.0 release of ORY Hydra!

Read this guide to learn how to implement authentication and authorization for mobile, browser, and native apps with better user experience and buffed security.

Applications that implement a "Sign in with ..." flow must not use a mutable identifier to match external users to the internal user management system. Several web applications implementing "Sign in with GitHub" have been found to be vulnerable to this.

Control access to your APIs with cloud native ORY Oathkeeper and the Ambassador Reverse Proxy on Kubernetes.

This is the first blog post of a multi-part series about control on the web. The goal of this series is to be the go-to guide for anyone that needs help with setting up access control (authentication & authorization) for their web application.

Get accurate Golang (Go) code coverage reports using go-acc. Your test might perform better than you think!

Learn how to save money and improve customer value using Ory.

The Ory SDKs are now released as version 1.0!

Practical steps and tips for organizing a conference for your community, focused on developer and open source communities.

The log4j vulnerability sparked a new discussion about open source maintainership and how it can be improved. This article summarizes the discussion and shows how Ory is addressing the problem.

A hands-on example of Ory Keto based on a real use case. Try out the capabilities of an open source implementation of the Google Zanzibar authorization system with code examples!

This article discusses the pioneering efforts by Ory to build the open source implementation of Google Zanzibar called Ory Keto. It will outline the motivation, challenges and concepts of building a global, low latency consistent access control system.

A short introduction into modern application architecture and Ory's thinking and philosophy around software development.

Control access to your APIs with cloud native ORY Oathkeeper and the Ambassador Reverse Proxy on Kubernetes.

Explore the latest authentication methods and their benefits and drawbacks in this in-depth article. This article provides valuable insights into how to secure your online services with strong authentication mechanisms.

Was your authentication portal breached by some unknown hacker? You may not be alone. Here is an overview of the most common attack vectors against authentication services.

Add login, registration, user and profile management to Django applications in minutes using the Ory Kratos open source project.

Do I need authentication or authorization? Do I require a session? Is a session a cookie or a token? Do I require JWTs or Cookies?

Applications that implement a "Sign in with ..." flow must not use a mutable identifier to match external users to the internal user management system. Several web applications implementing "Sign in with GitHub" have been found to be vulnerable to this.

Replace legacy identity infrastructure IdentityServer with modern, cloud-native, and scalable open source services by Ory. Read more about the implementation of an IdentityServer alternative here.

Ory’s flagship zero trust network “Ory Network” is a global, scalable and secure platform for managing identities and its distribution across various internet services.

Announcing Ory's second Community Call of 2022

Announcing Ory's first Community Call of 2022

This article is a company announcement that informs about the Series A investment.

A distillation of the key beliefs that underpin Ory as an organization.

Hop-by-hop header vulnerability in go standard library reverse proxy description and how to fix it

In this step-by-step guide, discover how to effectively use Ory with Cloudflare Workers to optimize your application's performance.

In this guide, you will learn how to manage your Ory Network projects using the API. You can just copy & paste our code snippets to manage your Ory Network projects.

The Ory Permission Language is a language that allows configuring Ory Keto.

Customize email templates for all out-of-band communication. With code examples!

Learn how to migrate build a URL shortener using the Ory Kratos and Supabase open source projects. Includes code examples for Go and Docker!

Build a social network to share side projects and explore what other studends are making, using open source software and Ory Kratos for authentication.

Learn how to build a URL shortener using the Ory Kratos and Supabase open source projects. Includes code examples for Nuxt and Tailwind CSS!

Build scalable and secure zero trust microservice architecture using open source components from Ory and Kong.

Learn how to build a URL shortener using the Ory Kratos and Supabase open source projects. Includes code examples for Go and Docker!

In this article we'll show you a cost effective way to build bots for Slack

How Vadosware built LoginWithHN, an OAuth2+OpenID Connect provider for HackerNews using the Ory Hydra open source project.

Add login, registration, user and profile management to Flutter web applications in minutes using the Ory Kratos open source project. Includes code examples for Dart!

Securing your flask application with open source solutions

Use hardware tokens like Yubikey to secure Ory Network admin accounts.

Adding OAuth2 / OpenID Connect to your application is a complex process. This article will help you understand why you do not need OAuth2 / OpenID Connect in most cases!

Build custom login, registration, user settings, password recovery, email and phone verification pages to your Next.js React Single Page Application (SPA) using the ORY Kratos open source project. Includes code examples for TypeScript and Docker, and end-to-end tests!

Add login, registration, user and profile management to Next.js Single Page Applications in minutes using the ORY Kratos open source project. Includes code examples for TypeScript and Docker, and end-to-end tests!

Learn how to your existing node.js backend with the Ory Network, business model and data architecture.

This is an example of integrating the Ory Network with a Flutter frontend.

Add login, registration, user, and profile management to React Native mobile and desktop apps using the Ory Kratos open source project. Includes code examples for TypeScript and Docker!

In this guide, you will set up a hardened, fully functional OAuth2 Server and OpenID Connect provider using open source only. It will take you about ~10 minutes. We will use Ory Hydra (open source), a security-first OAuth2 and OpenID Connect server written in Golang.

This article gives a short introduction to Dockertest and how Google is using it against Covid19, also an overview about the open-source virus response in general.

Pick recommended Argon2 (Argon2id, Argon2i) parameters (iteration, memory, parallelism) for secure login and password hashing, following security best practices using only open source.

Run ORY Kratos as a serverless service on Kubernetes and Knative with scale-to-zero deployments.

Learn how to test SQL migrations in any environment. This guide will point out all the considerations we at ORY make when implementing SQL migration tests for our open source products.

Read this guide to learn how to implement authentication and authorization for mobile, browser, and native apps with better user experience and buffed security.

This is the first blog post of a multi-part series about control on the web. The goal of this series is to be the go-to guide for anyone that needs help with setting up access control (authentication & authorization) for their web application.

Get accurate Golang (Go) code coverage reports using go-acc. Your test might perform better than you think!

Our Commitment to Protecting Your Data and Privacy.

What is the right solution for you: self-hosting or the Ory Network?

Is Ory Network the right fit for you?

Ory has listened to your feedback and made changes to the pricing structure. Review our new transparent and accessible pricing plan.

We built login and account management, so you don’t have to.

A global network for end-to-end security

A new milestone for Ory Hydra, the OpenID Certified OAuth 2.0 and OpenID Connect Server.

OAuth2.0 for Ory Network is coming

We are very excited to announce the 1.0 release of ORY Hydra!