This release focuses on improving OpenID Connect capabilities, resolving various bugs in the CLI and OAuth2, shipping with a working hydra version
, allowing unauthorized requests to access the JWK API, if an according policy is set, making it possible to update OAuth2 clients.
Additionally, two breaking changes where introduced to improve readability and understandability of various identifiers:
- The SDK had a few structs renamed, the new names are documented here: #226 (comment)
- Hydra's mandatory JSON Web Key Identifiers changed:
hydra.openid.connect
is nowhydra.openid.id-token
consent.challenge
is nowhydra.consent.challenge
consent.endpoint
is nowhydra.consent.response
hydra.tls
is nowhydra.https-tls
There are no known database breaks. The new JWK sets will be generated automatically and you can remove the old ones if you want.
A full list of resolved issues can be viewed here: https://github.com/ory-am/hydra/milestone/11?closed=1