Hi HN community, maintainer here (<a href="http://github.com/aeneasr" rel="nofollow">http://github.com/aeneasr</a>)!<p>I started the project Ory Hydra back in 2015 as a side project, and it has now become a full time job with a dedicated team! Ory Hydra is used at a lot of companies and we have since started with some other projects such as ORY Kratos (<a href="https://github.com/ory/kratos" rel="nofollow">https://github.com/ory/kratos</a>).<p>If you have any questions regarding Hydra, Ory, Golang, or open source - I am more than happy to answer!<p>edit:// Signing off - if you have any questions for maintainers feel free to check out the ory slack channel or ask on the GitHub discussions board!
Congrats on the latest release! I'm really excited to see this space getting a lot of attention and traction lately. I think it's one of those things that basically every app has to "reinvent" to some extent, and I would love to just be able to spin up a container that handles a lot of this stuff. Especially considering the security implications.<p>I dug into this space recently and Keycloak is really the best, most full-featured (open source) solution at the moment. But it's a hefty and can be difficult to work with at times (documentation can be lacking and confusing, customizations difficult). It doesn't seem to jive well with a modern containerized stack, either.<p>Ory and Supertokens are the two open source projects that I've been keeping an eye on and I think are making great progress and will be real viable alternatives to Keycloak soon. Last I checked they weren't _quite_ ready for real production usage (for various reasons, I'll have to revisit my notes), but they both seem to be moving quickly so looking forward to trying them again soon.
I'm working on a Keycloak deployment and also had a look at Ory
What pushed me away from it:<p>* Harder to evaluate quickly locally<p>* Documentation split across multiple services<p>* Was looking for a more turnkey solution instead of having to assemble and configure multiple parts<p>* Red Hat as a user<p>I dont mind Keycloak's monolithic architecture at all so far<p>Ory does look interesting but I would recommend to market this as a suite, not the sum of its parts
If curious see also<p>2016 <a href="https://news.ycombinator.com/item?id=12789720" rel="nofollow">https://news.ycombinator.com/item?id=12789720</a><p>2016 <a href="https://news.ycombinator.com/item?id=11798045" rel="nofollow">https://news.ycombinator.com/item?id=11798045</a>
How does Ory compare to alternatives like e.g. Keycloak and Authelia?<p>From experience, can anyone make a recommendation for a system that can be rolled out to an organization with confidence (long-term support, security, performance)?
I currently use Keycloak with vouch-proxy[0] to secure services on my personal self-hosting server. It seems to be quite slow, and much more heavyweight and complex than I need . Is this something Ory can solve for me? Is there any documentation similar to this situation?<p>[0] <a href="https://github.com/vouch/vouch-proxy" rel="nofollow">https://github.com/vouch/vouch-proxy</a>
I don't like the ae... guy there.
Some arrogant German youngster. When I asked him a question about a workflow he told me that there's commercial support. Yeah screw you too.
Mostly happy with keycloak, don't need no hydra and greedy pseudo open source disguised payware