diff --git a/docs/docs/milestones.md b/docs/docs/milestones.md new file mode 100644 index 00000000000..24685b38db1 --- /dev/null +++ b/docs/docs/milestones.md @@ -0,0 +1,1102 @@ +--- +id: milestones +title: Milestones and Roadmap +--- + +## [v0.7.0-alpha.1](https://github.com/ory/kratos/milestone/9) + +### [Label Bug](https://github.com/ory/kratos/labels/bug) + +Something isn't working + +#### Issues + +#### Pull Requests + +### [Label Enhancement](https://github.com/ory/kratos/labels/enhancement) + +New feature or request + +#### Issues + +* [ ] Selfservice account deletion ([kratos#596](https://github.com/ory/kratos/issues/596)) +* [ ] Implement Hydra integration ([kratos#273](https://github.com/ory/kratos/issues/273)) + +#### Pull Requests + +### [Label Help wanted](https://github.com/ory/kratos/labels/help%20wanted) + +Extra attention is needed + +#### Issues + +#### Pull Requests + +### [Label Good first issue](https://github.com/ory/kratos/labels/good%20first%20issue) + +Good for newcomers + +#### Issues + +#### Pull Requests + +### [Label Module:session](https://github.com/ory/kratos/labels/module%3Asession) + +Affects session components + +#### Issues + +#### Pull Requests + +### [Label Module:identity](https://github.com/ory/kratos/labels/module%3Aidentity) + +Affects identity components + +#### Issues + +#### Pull Requests + +### [Label Module:2fa](https://github.com/ory/kratos/labels/module%3A2fa) + +Affects 2FA components + +#### Issues + +#### Pull Requests + +### [Label Module:cli](https://github.com/ory/kratos/labels/module%3Acli) + +Affects the CLI + +#### Issues + +#### Pull Requests + +### [Label Module:ss/oidc](https://github.com/ory/kratos/labels/module%3Ass%2Foidc) + +Affects the OpenID Connect Self Service Strategy + +#### Issues + +#### Pull Requests + +### [Label Module:docs](https://github.com/ory/kratos/labels/module%3Adocs) + +Affects the documentation + +#### Issues + +#### Pull Requests + +### [Label Module:verification](https://github.com/ory/kratos/labels/module%3Averification) + +Affects verification components + +#### Issues + +#### Pull Requests + +### [Label Module:schema](https://github.com/ory/kratos/labels/module%3Aschema) + +Affects JSON Schema components + +#### Issues + +#### Pull Requests + +### [Label Module:ss/password](https://github.com/ory/kratos/labels/module%3Ass%2Fpassword) + +Affects the Password Self Service Strategy + +#### Issues + +#### Pull Requests + +### [Label Module:selfservice](https://github.com/ory/kratos/labels/module%3Aselfservice) + +Affects selfservice components + +#### Issues + +#### Pull Requests + +### [Label Module:broadcast](https://github.com/ory/kratos/labels/module%3Abroadcast) + +Affects the broadcast system + +#### Issues + +#### Pull Requests + +### [Label Stale](https://github.com/ory/kratos/labels/stale) + +#### Issues + +#### Pull Requests + +### [Label Security](https://github.com/ory/kratos/labels/security) + +#### Issues + +#### Pull Requests + +### [Label Proposal](https://github.com/ory/kratos/labels/proposal) + +#### Issues + +#### Pull Requests + +### [Label Epic](https://github.com/ory/kratos/labels/epic) + +#### Issues + +#### Pull Requests + +### [Label Hacktoberfest](https://github.com/ory/kratos/labels/hacktoberfest) + +#### Issues + +#### Pull Requests + +### [Label Module:errorx](https://github.com/ory/kratos/labels/module%3Aerrorx) + +#### Issues + +#### Pull Requests + +### [Label Rfc](https://github.com/ory/kratos/labels/rfc) + +#### Issues + +#### Pull Requests + +### [Label Module:courier](https://github.com/ory/kratos/labels/module%3Acourier) + +#### Issues + +#### Pull Requests + +### [Label Debt](https://github.com/ory/kratos/labels/debt) + +#### Issues + +#### Pull Requests + +### [Label Research](https://github.com/ory/kratos/labels/research) + +#### Issues + +#### Pull Requests + +### [Label Blocker](https://github.com/ory/kratos/labels/blocker) + +#### Issues + +#### Pull Requests + +### [Label Up for grab](https://github.com/ory/kratos/labels/up%20for%20grab) + +#### Issues + +#### Pull Requests + +### [Label Upstream](https://github.com/ory/kratos/labels/upstream) + +#### Issues + +#### Pull Requests + +### [Label Module:migrations](https://github.com/ory/kratos/labels/module%3Amigrations) + +#### Issues + +#### Pull Requests + +### [Label Investigate](https://github.com/ory/kratos/labels/investigate) + +#### Issues + +#### Pull Requests + +### [Label Breaking change](https://github.com/ory/kratos/labels/breaking%20change) + +#### Issues + +#### Pull Requests + +### [Label Question](https://github.com/ory/kratos/labels/question) + +#### Issues + +#### Pull Requests + +### [Label Response-pending](https://github.com/ory/kratos/labels/response-pending) + +#### Issues + +#### Pull Requests + +## [v0.6.0-alpha.1](https://github.com/ory/kratos/milestone/8) + +### [Label Bug](https://github.com/ory/kratos/labels/bug) + +Something isn't working + +#### Issues + +* [ ] Sending JSON to complete oidc/password strategy flows causes CSRF issues ([kratos#378](https://github.com/ory/kratos/issues/378)) +* [ ] Unmable to use Auth0 as a generic OIDC provider ([kratos#609](https://github.com/ory/kratos/issues/609)) +* [ ] Password reset emails sent twice by each of the two kratos pods in my cluster ([kratos#652](https://github.com/ory/kratos/issues/652)) + +#### Pull Requests + +### [Label Enhancement](https://github.com/ory/kratos/labels/enhancement) + +New feature or request + +#### Issues + +* [ ] Implement Security Questions MFA ([kratos#469](https://github.com/ory/kratos/issues/469)) +* [ ] Feature request: adjustable thresholds on how many times a password has been in a breach according to haveibeenpwned ([kratos#450](https://github.com/ory/kratos/issues/450)) +* [ ] Do not send credentials to hooks ([kratos#77](https://github.com/ory/kratos/issues/77)) - [@hackerman](https://github.com/aeneasr) +* [ ] Implement immutable keyword in JSON Schema for Identity Traits ([kratos#117](https://github.com/ory/kratos/issues/117)) +* [ ] Add filters to admin api ([kratos#249](https://github.com/ory/kratos/issues/249)) +* [ ] Feature Request: Webhooks ([kratos#271](https://github.com/ory/kratos/issues/271)) +* [ ] Support email verification paswordless login ([kratos#286](https://github.com/ory/kratos/issues/286)) +* [ ] Support remote argon2 execution ([kratos#357](https://github.com/ory/kratos/issues/357)) - [@hackerman](https://github.com/aeneasr) +* [ ] Implement identity state and disabling identities ([kratos#598](https://github.com/ory/kratos/issues/598)) - [@hackerman](https://github.com/aeneasr) +* [ ] SMTP Error spams the server logs ([kratos#402](https://github.com/ory/kratos/issues/402)) +* [ ] Gracefully handle CSRF errors ([kratos#91](https://github.com/ory/kratos/issues/91)) - [@hackerman](https://github.com/aeneasr) +* [ ] How to sign in with Twitter ([kratos#517](https://github.com/ory/kratos/issues/517)) +* [ ] Add ability to import user credentials ([kratos#605](https://github.com/ory/kratos/issues/605)) - [@hackerman](https://github.com/aeneasr) +* [ ] Throttling repeated login requests ([kratos#654](https://github.com/ory/kratos/issues/654)) +* [ ] Admin/Selfservice session management ([kratos#655](https://github.com/ory/kratos/issues/655)) + +#### Pull Requests + +### [Label Help wanted](https://github.com/ory/kratos/labels/help%20wanted) + +Extra attention is needed + +#### Issues + +* [ ] Document that identity information (traits, etc) are available to token holders and backend systems ([kratos#43](https://github.com/ory/kratos/issues/43)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Good first issue](https://github.com/ory/kratos/labels/good%20first%20issue) + +Good for newcomers + +#### Issues + +* [ ] SMTP Error spams the server logs ([kratos#402](https://github.com/ory/kratos/issues/402)) + +#### Pull Requests + +### [Label Module:session](https://github.com/ory/kratos/labels/module%3Asession) + +Affects session components + +#### Issues + +#### Pull Requests + +### [Label Module:identity](https://github.com/ory/kratos/labels/module%3Aidentity) + +Affects identity components + +#### Issues + +* [ ] Document that identity information (traits, etc) are available to token holders and backend systems ([kratos#43](https://github.com/ory/kratos/issues/43)) - [@hackerman](https://github.com/aeneasr) +* [ ] Implement immutable keyword in JSON Schema for Identity Traits ([kratos#117](https://github.com/ory/kratos/issues/117)) + +#### Pull Requests + +### [Label Module:2fa](https://github.com/ory/kratos/labels/module%3A2fa) + +Affects 2FA components + +#### Issues + +* [ ] Implement 2FA capabilities ([kratos#26](https://github.com/ory/kratos/issues/26)) +* [ ] Grace period for 2FA enrollment ([kratos#143](https://github.com/ory/kratos/issues/143)) + +#### Pull Requests + +### [Label Module:cli](https://github.com/ory/kratos/labels/module%3Acli) + +Affects the CLI + +#### Issues + +#### Pull Requests + +### [Label Module:ss/oidc](https://github.com/ory/kratos/labels/module%3Ass%2Foidc) + +Affects the OpenID Connect Self Service Strategy + +#### Issues + +#### Pull Requests + +### [Label Module:docs](https://github.com/ory/kratos/labels/module%3Adocs) + +Affects the documentation + +#### Issues + +* [ ] Document that identity information (traits, etc) are available to token holders and backend systems ([kratos#43](https://github.com/ory/kratos/issues/43)) - [@hackerman](https://github.com/aeneasr) +* [ ] Config JSON Schema needs example values ([kratos#179](https://github.com/ory/kratos/issues/179)) - [@hackerman](https://github.com/aeneasr) +* [ ] Elaborate on security practices against DoS and Brute Force ([kratos#134](https://github.com/ory/kratos/issues/134)) + +#### Pull Requests + +### [Label Module:verification](https://github.com/ory/kratos/labels/module%3Averification) + +Affects verification components + +#### Issues + +#### Pull Requests + +### [Label Module:schema](https://github.com/ory/kratos/labels/module%3Aschema) + +Affects JSON Schema components + +#### Issues + +* [ ] Add caching to served JSON schemas ([kratos#161](https://github.com/ory/kratos/issues/161)) + +#### Pull Requests + +### [Label Module:ss/password](https://github.com/ory/kratos/labels/module%3Ass%2Fpassword) + +Affects the Password Self Service Strategy + +#### Issues + +* [ ] Require recaptcha on suspicious login and signup ([kratos#65](https://github.com/ory/kratos/issues/65)) - [@hackerman](https://github.com/aeneasr) +* [ ] password validation: require Levenshtein distance between password and any other trait ([kratos#232](https://github.com/ory/kratos/issues/232)) +* [ ] Throttling repeated login requests ([kratos#654](https://github.com/ory/kratos/issues/654)) + +#### Pull Requests + +### [Label Module:selfservice](https://github.com/ory/kratos/labels/module%3Aselfservice) + +Affects selfservice components + +#### Issues + +* [ ] Enforce password reset ([kratos#35](https://github.com/ory/kratos/issues/35)) +* [ ] Require recaptcha on suspicious login and signup ([kratos#65](https://github.com/ory/kratos/issues/65)) - [@hackerman](https://github.com/aeneasr) +* [ ] Implement immutable keyword in JSON Schema for Identity Traits ([kratos#117](https://github.com/ory/kratos/issues/117)) +* [ ] Feature Request: Webhooks ([kratos#271](https://github.com/ory/kratos/issues/271)) +* [ ] Gracefully handle CSRF errors ([kratos#91](https://github.com/ory/kratos/issues/91)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Module:broadcast](https://github.com/ory/kratos/labels/module%3Abroadcast) + +Affects the broadcast system + +#### Issues + +#### Pull Requests + +### [Label Stale](https://github.com/ory/kratos/labels/stale) + +#### Issues + +#### Pull Requests + +### [Label Security](https://github.com/ory/kratos/labels/security) + +#### Issues + +* [ ] Ensure that login, registration and recovery do not leak identity information (Account Enumeration Attack) ([kratos#133](https://github.com/ory/kratos/issues/133)) - [@hackerman](https://github.com/aeneasr) +* [ ] Require recaptcha on suspicious login and signup ([kratos#65](https://github.com/ory/kratos/issues/65)) - [@hackerman](https://github.com/aeneasr) +* [ ] Do not send credentials to hooks ([kratos#77](https://github.com/ory/kratos/issues/77)) - [@hackerman](https://github.com/aeneasr) +* [ ] Implement Password Strength Meter API ([kratos#136](https://github.com/ory/kratos/issues/136)) +* [ ] Define anti-automation policies with CAPTCHA ([kratos#138](https://github.com/ory/kratos/issues/138)) +* [ ] Updating recovery address should require confirmation ([kratos#141](https://github.com/ory/kratos/issues/141)) +* [ ] Grace period for 2FA enrollment ([kratos#143](https://github.com/ory/kratos/issues/143)) +* [ ] Prevent account enumeration for profile updates ([kratos#292](https://github.com/ory/kratos/issues/292)) +* [ ] Elaborate on security practices against DoS and Brute Force ([kratos#134](https://github.com/ory/kratos/issues/134)) +* [ ] Prevent request scanning attacks ([kratos#613](https://github.com/ory/kratos/issues/613)) +* [ ] Throttling repeated login requests ([kratos#654](https://github.com/ory/kratos/issues/654)) + +#### Pull Requests + +### [Label Proposal](https://github.com/ory/kratos/labels/proposal) + +#### Issues + +* [ ] Introduce prevent extension in Identity JSON schema ([kratos#47](https://github.com/ory/kratos/issues/47)) + +#### Pull Requests + +### [Label Epic](https://github.com/ory/kratos/labels/epic) + +#### Issues + +#### Pull Requests + +### [Label Hacktoberfest](https://github.com/ory/kratos/labels/hacktoberfest) + +#### Issues + +#### Pull Requests + +### [Label Module:errorx](https://github.com/ory/kratos/labels/module%3Aerrorx) + +#### Issues + +#### Pull Requests + +### [Label Rfc](https://github.com/ory/kratos/labels/rfc) + +#### Issues + +#### Pull Requests + +### [Label Module:courier](https://github.com/ory/kratos/labels/module%3Acourier) + +#### Issues + +#### Pull Requests + +### [Label Debt](https://github.com/ory/kratos/labels/debt) + +#### Issues + +* [ ] Fix broken schema tests ([kratos#347](https://github.com/ory/kratos/issues/347)) - [@Patrik](https://github.com/zepatrik) + +#### Pull Requests + +### [Label Research](https://github.com/ory/kratos/labels/research) + +#### Issues + +#### Pull Requests + +### [Label Blocker](https://github.com/ory/kratos/labels/blocker) + +#### Issues + +#### Pull Requests + +### [Label Up for grab](https://github.com/ory/kratos/labels/up%20for%20grab) + +#### Issues + +* [ ] Feature Request: Webhooks ([kratos#271](https://github.com/ory/kratos/issues/271)) + +#### Pull Requests + +### [Label Upstream](https://github.com/ory/kratos/labels/upstream) + +#### Issues + +#### Pull Requests + +### [Label Module:migrations](https://github.com/ory/kratos/labels/module%3Amigrations) + +#### Issues + +#### Pull Requests + +### [Label Investigate](https://github.com/ory/kratos/labels/investigate) + +#### Issues + +#### Pull Requests + +### [Label Breaking change](https://github.com/ory/kratos/labels/breaking%20change) + +#### Issues + +#### Pull Requests + +### [Label Question](https://github.com/ory/kratos/labels/question) + +#### Issues + +#### Pull Requests + +### [Label Response-pending](https://github.com/ory/kratos/labels/response-pending) + +#### Issues + +#### Pull Requests + +## [v0.5.0-alpha.1](https://github.com/ory/kratos/milestone/5) + +This release focuses on Admin API capabilities + +### [Label Bug](https://github.com/ory/kratos/labels/bug) + +Something isn't working + +#### Issues + +* [ ] Logout does not use new cookie domain setting ([kratos#645](https://github.com/ory/kratos/issues/645)) +* [ ] Refresh Sessions Without Having to Log In Again ([kratos#615](https://github.com/ory/kratos/issues/615)) - [@hackerman](https://github.com/aeneasr) +* [x] Generate a new UUID/token after every interaction ([kratos#236](https://github.com/ory/kratos/issues/236)) - [@hackerman](https://github.com/aeneasr) +* [x] UNIQUE constraint failure when updating identities via Admin API ([kratos#325](https://github.com/ory/kratos/issues/325)) - [@hackerman](https://github.com/aeneasr) +* [x] Can not update an identity using PUT /identities/{id} ([kratos#435](https://github.com/ory/kratos/issues/435)) +* [x] Verification email is sent after password recovery ([kratos#578](https://github.com/ory/kratos/issues/578)) - [@hackerman](https://github.com/aeneasr) +* [x] Do not return expired sessions in `/sessions/whoami` ([kratos#611](https://github.com/ory/kratos/issues/611)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Enhancement](https://github.com/ory/kratos/labels/enhancement) + +New feature or request + +#### Issues + +* [x] Implement JSON capabilities in ErrorHandler ([kratos#61](https://github.com/ory/kratos/issues/61)) - [@hackerman](https://github.com/aeneasr) +* [x] Allow attaching credentials to identities in CRUD create ([kratos#200](https://github.com/ory/kratos/issues/200)) +* [x] Move away from UUID-based challenges and responses ([kratos#241](https://github.com/ory/kratos/issues/241)) - [@hackerman](https://github.com/aeneasr) +* [x] Add tests to prevent duplicate migration files ([kratos#282](https://github.com/ory/kratos/issues/282)) - [@Patrik](https://github.com/zepatrik) +* [x] Session cookie (ory_kratos_session) expired time should be configurable ([kratos#326](https://github.com/ory/kratos/issues/326)) - [@hackerman](https://github.com/aeneasr) +* [x] Can not update an identity using PUT /identities/{id} ([kratos#435](https://github.com/ory/kratos/issues/435)) +* [x] Make session cookie 'domain' property configurable ([kratos#516](https://github.com/ory/kratos/issues/516)) +* [x] Remove one of in-memory/on-disk SQLite e2e runners and replace with faster test ([kratos#580](https://github.com/ory/kratos/issues/580)) - [@Andreas Bucksteeg](https://github.com/tricky42) +* [x] Password similarity policy is too strict ([kratos#581](https://github.com/ory/kratos/issues/581)) - [@Patrik](https://github.com/zepatrik) +* [x] Implement a test-error for implementing the Error UI ([kratos#610](https://github.com/ory/kratos/issues/610)) + +#### Pull Requests + +### [Label Help wanted](https://github.com/ory/kratos/labels/help%20wanted) + +Extra attention is needed + +#### Issues + +#### Pull Requests + +### [Label Good first issue](https://github.com/ory/kratos/labels/good%20first%20issue) + +Good for newcomers + +#### Issues + +#### Pull Requests + +### [Label Module:session](https://github.com/ory/kratos/labels/module%3Asession) + +Affects session components + +#### Issues + +* [x] Allow users to decide if they want to stay signed in on this device ([kratos#42](https://github.com/ory/kratos/issues/42)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Module:identity](https://github.com/ory/kratos/labels/module%3Aidentity) + +Affects identity components + +#### Issues + +* [x] Implement administrative identity management ([kratos#34](https://github.com/ory/kratos/issues/34)) +* [x] Allow attaching credentials to identities in CRUD create ([kratos#200](https://github.com/ory/kratos/issues/200)) + +#### Pull Requests + +### [Label Module:2fa](https://github.com/ory/kratos/labels/module%3A2fa) + +Affects 2FA components + +#### Issues + +#### Pull Requests + +### [Label Module:cli](https://github.com/ory/kratos/labels/module%3Acli) + +Affects the CLI + +#### Issues + +#### Pull Requests + +### [Label Module:ss/oidc](https://github.com/ory/kratos/labels/module%3Ass%2Foidc) + +Affects the OpenID Connect Self Service Strategy + +#### Issues + +* [x] Allow users to decide if they want to stay signed in on this device ([kratos#42](https://github.com/ory/kratos/issues/42)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Module:docs](https://github.com/ory/kratos/labels/module%3Adocs) + +Affects the documentation + +#### Issues + +* [x] Document multi-tenant set up ([kratos#370](https://github.com/ory/kratos/issues/370)) + +#### Pull Requests + +### [Label Module:verification](https://github.com/ory/kratos/labels/module%3Averification) + +Affects verification components + +#### Issues + +#### Pull Requests + +### [Label Module:schema](https://github.com/ory/kratos/labels/module%3Aschema) + +Affects JSON Schema components + +#### Issues + +#### Pull Requests + +### [Label Module:ss/password](https://github.com/ory/kratos/labels/module%3Ass%2Fpassword) + +Affects the Password Self Service Strategy + +#### Issues + +* [ ] Support JSON body in registration ([kratos#44](https://github.com/ory/kratos/issues/44)) - [@hackerman](https://github.com/aeneasr) +* [x] Allow users to decide if they want to stay signed in on this device ([kratos#42](https://github.com/ory/kratos/issues/42)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Module:selfservice](https://github.com/ory/kratos/labels/module%3Aselfservice) + +Affects selfservice components + +#### Issues + +* [x] Implement JSON capabilities in ErrorHandler ([kratos#61](https://github.com/ory/kratos/issues/61)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Module:broadcast](https://github.com/ory/kratos/labels/module%3Abroadcast) + +Affects the broadcast system + +#### Issues + +#### Pull Requests + +### [Label Stale](https://github.com/ory/kratos/labels/stale) + +#### Issues + +#### Pull Requests + +### [Label Security](https://github.com/ory/kratos/labels/security) + +#### Issues + +* [ ] Require CSRF Token for logout ([kratos#142](https://github.com/ory/kratos/issues/142)) +* [x] Generate a new UUID/token after every interaction ([kratos#236](https://github.com/ory/kratos/issues/236)) - [@hackerman](https://github.com/aeneasr) +* [x] Move away from UUID-based challenges and responses ([kratos#241](https://github.com/ory/kratos/issues/241)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Proposal](https://github.com/ory/kratos/labels/proposal) + +#### Issues + +#### Pull Requests + +### [Label Epic](https://github.com/ory/kratos/labels/epic) + +#### Issues + +#### Pull Requests + +### [Label Hacktoberfest](https://github.com/ory/kratos/labels/hacktoberfest) + +#### Issues + +#### Pull Requests + +### [Label Module:errorx](https://github.com/ory/kratos/labels/module%3Aerrorx) + +#### Issues + +#### Pull Requests + +### [Label Rfc](https://github.com/ory/kratos/labels/rfc) + +#### Issues + +* [ ] Rename login/registration/recovery/... request to flow ([kratos#635](https://github.com/ory/kratos/issues/635)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Module:courier](https://github.com/ory/kratos/labels/module%3Acourier) + +#### Issues + +#### Pull Requests + +### [Label Debt](https://github.com/ory/kratos/labels/debt) + +#### Issues + +* [x] Add tests to prevent duplicate migration files ([kratos#282](https://github.com/ory/kratos/issues/282)) - [@Patrik](https://github.com/zepatrik) +* [x] Remove one of in-memory/on-disk SQLite e2e runners and replace with faster test ([kratos#580](https://github.com/ory/kratos/issues/580)) - [@Andreas Bucksteeg](https://github.com/tricky42) + +#### Pull Requests + +### [Label Research](https://github.com/ory/kratos/labels/research) + +#### Issues + +#### Pull Requests + +### [Label Blocker](https://github.com/ory/kratos/labels/blocker) + +#### Issues + +#### Pull Requests + +### [Label Up for grab](https://github.com/ory/kratos/labels/up%20for%20grab) + +#### Issues + +#### Pull Requests + +### [Label Upstream](https://github.com/ory/kratos/labels/upstream) + +#### Issues + +#### Pull Requests + +### [Label Module:migrations](https://github.com/ory/kratos/labels/module%3Amigrations) + +#### Issues + +#### Pull Requests + +### [Label Investigate](https://github.com/ory/kratos/labels/investigate) + +#### Issues + +* [x] Investigate what happens when recovery/verified email are removed from traits ([kratos#576](https://github.com/ory/kratos/issues/576)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Breaking change](https://github.com/ory/kratos/labels/breaking%20change) + +#### Issues + +#### Pull Requests + +### [Label Question](https://github.com/ory/kratos/labels/question) + +#### Issues + +* [x] initializeSelfServiceBrowserLoginFlow: Request Header Fields Too Large ([kratos#599](https://github.com/ory/kratos/issues/599)) + +#### Pull Requests + +### [Label Response-pending](https://github.com/ory/kratos/labels/response-pending) + +#### Issues + +#### Pull Requests + +## [unplanned](https://github.com/ory/kratos/milestone/2) + +### [Label Bug](https://github.com/ory/kratos/labels/bug) + +Something isn't working + +#### Issues + +* [x] Investigate flaky tests ([kratos#577](https://github.com/ory/kratos/issues/577)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Enhancement](https://github.com/ory/kratos/labels/enhancement) + +New feature or request + +#### Issues + +* [ ] SelfService/HTMLForm: array types are rendered very primitive from jsonschema ([kratos#239](https://github.com/ory/kratos/issues/239)) +* [ ] LDAP authentication ([kratos#274](https://github.com/ory/kratos/issues/274)) +* [ ] SAML authentication ([kratos#275](https://github.com/ory/kratos/issues/275)) +* [ ] Confirm verified address changes by the initial holder ([kratos#306](https://github.com/ory/kratos/issues/306)) +* [ ] Missing password omits other validation errors during sign up ([kratos#368](https://github.com/ory/kratos/issues/368)) +* [ ] Required fields aren't actually required ([kratos#400](https://github.com/ory/kratos/issues/400)) - [@Patrik](https://github.com/zepatrik) +* [ ] Kerberos authentication ([kratos#418](https://github.com/ory/kratos/issues/418)) +* [ ] Auto-register OAuth2 Clients for popular services ([kratos#24](https://github.com/ory/kratos/issues/24)) +* [ ] Courier messages polling the database ([kratos#466](https://github.com/ory/kratos/issues/466)) +* [ ] Support deploying HTTPS and auto-certs with certbot ([kratos#529](https://github.com/ory/kratos/issues/529)) +* [ ] Support Discord as OIDC Provider ([kratos#533](https://github.com/ory/kratos/issues/533)) +* [ ] Support GitLab as OIDC Provider ([kratos#518](https://github.com/ory/kratos/issues/518)) +* [ ] Send invite links directly via email ([kratos#595](https://github.com/ory/kratos/issues/595)) +* [x] If credentials can be unlinked, prevent unliking of the last credential ([kratos#119](https://github.com/ory/kratos/issues/119)) +* [x] Improve JSON Schema Validation Errors ([kratos#413](https://github.com/ory/kratos/issues/413)) +* [x] Add the config schema to schemastore.org ([kratos#590](https://github.com/ory/kratos/issues/590)) + +#### Pull Requests + +### [Label Help wanted](https://github.com/ory/kratos/labels/help%20wanted) + +Extra attention is needed + +#### Issues + +* [ ] Missing password omits other validation errors during sign up ([kratos#368](https://github.com/ory/kratos/issues/368)) +* [ ] Testing Jsonnet snippets ([kratos#391](https://github.com/ory/kratos/issues/391)) +* [ ] Add versioning to identity models ([kratos#396](https://github.com/ory/kratos/issues/396)) +* [ ] Keep track of Access and Refresh Tokens from OIDC flows ([kratos#397](https://github.com/ory/kratos/issues/397)) +* [ ] Support deploying HTTPS and auto-certs with certbot ([kratos#529](https://github.com/ory/kratos/issues/529)) +* [x] docs: add config excerpts with file names to quickstart guide ([kratos#344](https://github.com/ory/kratos/issues/344)) +* [x] Improve JSON Schema Validation Errors ([kratos#413](https://github.com/ory/kratos/issues/413)) +* [x] Document `refresh=true` for login endpoint ([kratos#464](https://github.com/ory/kratos/issues/464)) + +#### Pull Requests + +### [Label Good first issue](https://github.com/ory/kratos/labels/good%20first%20issue) + +Good for newcomers + +#### Issues + +#### Pull Requests + +### [Label Module:session](https://github.com/ory/kratos/labels/module%3Asession) + +Affects session components + +#### Issues + +#### Pull Requests + +### [Label Module:identity](https://github.com/ory/kratos/labels/module%3Aidentity) + +Affects identity components + +#### Issues + +#### Pull Requests + +### [Label Module:2fa](https://github.com/ory/kratos/labels/module%3A2fa) + +Affects 2FA components + +#### Issues + +#### Pull Requests + +### [Label Module:cli](https://github.com/ory/kratos/labels/module%3Acli) + +Affects the CLI + +#### Issues + +* [ ] Testing Jsonnet snippets ([kratos#391](https://github.com/ory/kratos/issues/391)) + +#### Pull Requests + +### [Label Module:ss/oidc](https://github.com/ory/kratos/labels/module%3Ass%2Foidc) + +Affects the OpenID Connect Self Service Strategy + +#### Issues + +* [ ] Testing Jsonnet snippets ([kratos#391](https://github.com/ory/kratos/issues/391)) +* [ ] Auto-register OAuth2 Clients for popular services ([kratos#24](https://github.com/ory/kratos/issues/24)) + +#### Pull Requests + +### [Label Module:docs](https://github.com/ory/kratos/labels/module%3Adocs) + +Affects the documentation + +#### Issues + +* [ ] Clarify request sequence for client-side apps ([kratos#487](https://github.com/ory/kratos/issues/487)) - [@hackerman](https://github.com/aeneasr) +* [ ] REST Api document is not expected ([kratos#560](https://github.com/ory/kratos/issues/560)) +* [x] Document identity hooks ([kratos#31](https://github.com/ory/kratos/issues/31)) +* [x] docs: add config excerpts with file names to quickstart guide ([kratos#344](https://github.com/ory/kratos/issues/344)) +* [x] Document `refresh=true` for login endpoint ([kratos#464](https://github.com/ory/kratos/issues/464)) + +#### Pull Requests + +### [Label Module:verification](https://github.com/ory/kratos/labels/module%3Averification) + +Affects verification components + +#### Issues + +#### Pull Requests + +### [Label Module:schema](https://github.com/ory/kratos/labels/module%3Aschema) + +Affects JSON Schema components + +#### Issues + +* [ ] Implement JSON Schema Caching ([kratos#28](https://github.com/ory/kratos/issues/28)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Module:ss/password](https://github.com/ory/kratos/labels/module%3Ass%2Fpassword) + +Affects the Password Self Service Strategy + +#### Issues + +#### Pull Requests + +### [Label Module:selfservice](https://github.com/ory/kratos/labels/module%3Aselfservice) + +Affects selfservice components + +#### Issues + +* [ ] Implement RPC After Hook ([kratos#30](https://github.com/ory/kratos/issues/30)) +* [x] If credentials can be unlinked, prevent unliking of the last credential ([kratos#119](https://github.com/ory/kratos/issues/119)) + +#### Pull Requests + +### [Label Module:broadcast](https://github.com/ory/kratos/labels/module%3Abroadcast) + +Affects the broadcast system + +#### Issues + +* [x] Implement Broadcasting ([kratos#33](https://github.com/ory/kratos/issues/33)) + +#### Pull Requests + +### [Label Stale](https://github.com/ory/kratos/labels/stale) + +#### Issues + +#### Pull Requests + +### [Label Security](https://github.com/ory/kratos/labels/security) + +#### Issues + +#### Pull Requests + +### [Label Proposal](https://github.com/ory/kratos/labels/proposal) + +#### Issues + +#### Pull Requests + +### [Label Epic](https://github.com/ory/kratos/labels/epic) + +#### Issues + +#### Pull Requests + +### [Label Hacktoberfest](https://github.com/ory/kratos/labels/hacktoberfest) + +#### Issues + +#### Pull Requests + +### [Label Module:errorx](https://github.com/ory/kratos/labels/module%3Aerrorx) + +#### Issues + +#### Pull Requests + +### [Label Rfc](https://github.com/ory/kratos/labels/rfc) + +#### Issues + +* [ ] Require re-authentication when modifying sensitive traits via the Admin API ([kratos#537](https://github.com/ory/kratos/issues/537)) + +#### Pull Requests + +### [Label Module:courier](https://github.com/ory/kratos/labels/module%3Acourier) + +#### Issues + +#### Pull Requests + +### [Label Debt](https://github.com/ory/kratos/labels/debt) + +#### Issues + +#### Pull Requests + +### [Label Research](https://github.com/ory/kratos/labels/research) + +#### Issues + +* [ ] Evaluate replacing GJSON/SJSON syntax with JSON Pointer ([kratos#181](https://github.com/ory/kratos/issues/181)) +* [ ] Consider switching to okon to search HIBP database ([kratos#301](https://github.com/ory/kratos/issues/301)) + +#### Pull Requests + +### [Label Blocker](https://github.com/ory/kratos/labels/blocker) + +#### Issues + +#### Pull Requests + +### [Label Up for grab](https://github.com/ory/kratos/labels/up%20for%20grab) + +#### Issues + +* [ ] SelfService/HTMLForm: array types are rendered very primitive from jsonschema ([kratos#239](https://github.com/ory/kratos/issues/239)) +* [ ] Testing Jsonnet snippets ([kratos#391](https://github.com/ory/kratos/issues/391)) +* [ ] Add versioning to identity models ([kratos#396](https://github.com/ory/kratos/issues/396)) +* [ ] Keep track of Access and Refresh Tokens from OIDC flows ([kratos#397](https://github.com/ory/kratos/issues/397)) +* [x] Make the session cookie name configurable ([kratos#268](https://github.com/ory/kratos/issues/268)) +* [x] docs: add config excerpts with file names to quickstart guide ([kratos#344](https://github.com/ory/kratos/issues/344)) +* [x] Improve JSON Schema Validation Errors ([kratos#413](https://github.com/ory/kratos/issues/413)) +* [x] Add the config schema to schemastore.org ([kratos#590](https://github.com/ory/kratos/issues/590)) + +#### Pull Requests + +### [Label Upstream](https://github.com/ory/kratos/labels/upstream) + +#### Issues + +#### Pull Requests + +### [Label Module:migrations](https://github.com/ory/kratos/labels/module%3Amigrations) + +#### Issues + +#### Pull Requests + +### [Label Investigate](https://github.com/ory/kratos/labels/investigate) + +#### Issues + +* [x] Investigate flaky tests ([kratos#577](https://github.com/ory/kratos/issues/577)) - [@hackerman](https://github.com/aeneasr) + +#### Pull Requests + +### [Label Breaking change](https://github.com/ory/kratos/labels/breaking%20change) + +#### Issues + +#### Pull Requests + +### [Label Question](https://github.com/ory/kratos/labels/question) + +#### Issues + +#### Pull Requests + +### [Label Response-pending](https://github.com/ory/kratos/labels/response-pending) + +#### Issues + +#### Pull Requests +