Kratos as identityt server and hydra as opn.Id/0auth provider guide

[tima-t]

Is your feature request related to a problem? Please describe.
My problem is that I cannot connect ory kratos (latest) to hydra (latest) using https://github.com/ory/kratos-selfservice-ui-node/

I've tried to look at the branch hydra-integration-2021 and to integrate kratos(latest version) and hydra via kratos-selfservice-ui-node, but I cannot finalzie the integration for two days now. Both document look well documented, but as they are big apps by their own it is hard to me to connect them and make them work together. I am searhcing for godo examples but there is not a clear step by step guide how to connect these two services.
I saw that it will eb a natiev itnegratiion between hydra and kratos but it is still WIP. https://www.ory.sh/kratos/docs/concepts/federation/
Is it going to be live soon, or can I look and even test the future branch if it is ready for beta?

Describe the solution you'd like

A docker setup that runs ory kratos as identity provider and hydra as open.Id/ 0Auth2 provider.
If that is not possible or still wip, I would like a clear step by step guide how to implement and add this feature in kratos-selfservice-ui-node, because this version https://github.com/ory/kratos-selfservice-ui-node/tree/hydra-integration-2021 is already outdated and the migration to latest versions is not headless

Describe alternatives you've considered
I would like a clear step by step guide how to implement and add ory/hydra in kratos-selfservice-ui-node

[aeneasr]

Welcome, and sorry to hear that this is complicated! We have an issue tracking this #273 - it is currently tracked for v0.9.0 but depending on how it goes (the milestone is pretty large) it could also be pushed back to v0.10.0. My recommendation would be to start with Ory Kratos first, and then add Ory Hydra in at a later stage. This will make you comfortable with Ory Kratos! And depending on what you want to do will also take a bit of time.

Once you have figured out how to best use Ory Kratos, the linked repo might make more sense and will be easier to adjust!

[atreya2011]

@tima-t
I have created an extremely simple implementation here in Go. Should be easy to follow and translate to any other language of your choice.
Its WIP and does not have a README at the moment. Planning to add instructions of how to spin everything up within the next few days,
and add verification, recovery flows as well!

https://github.com/atreya2011/go-kratos-test without hydra
https://github.com/atreya2011/go-kratos-test/tree/hydra with hydra

Diff
https://github.com/atreya2011/go-kratos-test/compare/hydra

All I did was follow all the UML diagrams in the docs and the reference implementations in Node.
And as @aeneasr suggested, I first started with Kratos, got everything working and then moved on to integrating Hydra.
Kratos is an extremely well thought out and thoroughly documented Identity Provider! Thanks for this @aeneasr 🙇🏼‍♂️

[atreya2011]

@AlimByWater

I guess api registrations(for example) endpoint can incapsulate all proccess, like so: initialize registration flow -> submite registration -> return session token. Do u see any flaws in this method?

Yes I saw a very similar implementation over here and it is possible.
However, the only thing missing is the security protection we get by means of csrf tokens.

EDIT: If we employ our own CSRF protection in our web servers and store session details server-side, I don't see any reason for NOT using API flows instead of the browser flows.

https://github.com/ory/kratos/blob/master/examples/go/selfservice/registration/main.go

[vinckr]

Hey @atreya2011
Yes, just go to https://github.com/ory/hydra/discussions/new and pick "Show & Tell" as category :-).

And don't worry if your project is not 100% done or some things are missing, that is totally ok. The show & tell post will hopefully also attract some more contributors.

[atreya2011]

@vinckr Thanks for the clarification :) I will create a dedicated show&tell discussion within the next few days 🙏🏼
And thank you for featuring my sample implementation over here: ory/hydra#2855 (reply in thread) 🙇🏼‍♂️

[atreya2011]

@vinckr Sorry for the delay. I have created a dedicated show&tell discussion :)
ory/hydra#2873

[vinckr]

Thanks Atreya! ❤️

[vinckr]

Hey @azazel75 @AlimByWater @tima-t
The Ory Kratos and Ory Hydra integration just landed with Hydra 2.0,
see the release notes for more details!