baconfly

Thank you for the kind words :)

Ory Keto and Ory Oathkeeper can play together! Ory Keto implements Google Zanzibar, it's basically a service where you can check if "x is allowed to do y". Ory Oathkeeper on the other hand is something which can check for any given HTTP request: who is the user making the request? is the user allowed to make the request? and finally convert all this information into a common format. However, Ory Oathkeeper does itself not make the decision, it uses e.g. Ory Keto to check the permission itself. Hope this makes sense

Thank you! :) We have an RFC for adding this type of short lived tokens to Ory Kratos. If you want to go deeper in the security space, there is also Ory Hydra which supports things like Service Accounts using OAuth2 Client Credentials (with PKI!) as well as OAuth2 Token Exchange :)

That is so great to hear! We are in the midst of refactoring the documentation structure for different audiences: people who want to try it out quickly, those who want in depth understanding (like you), code contributors, non-dev

It’s a long journey! If you ever see some of our docs again and feel that it has lost it’s way please reach out; It’s very important to us to not only show how the product works but also why :)

I also heard that there’s a blog post for migration coming, but it has to be translated from Japanese first. If you sign up to the newsletter you should receive a notice when it’s released :)

Pretty sure! We have documentation on importing users and already support several hashing algorithms. Support for more algorithms will follow soon!

One of the co-maintainers here. Ory Kratos has been in development since 2018 and is finally out of beta! If you have any questions about the project, tech, flows, or Ory as a whole I’m here to help :)