Sienna Meridian Satterwhite
50a4abf94f
fix(ory): harden Kratos and Hydra production security configuration
Kratos: xchacha20-poly1305 cipher for at-rest encryption, 12-char min
password with HaveIBeenPwned + similarity check, recovery/verification
switched to code (not link), anti-enumeration on unknown recipients,
15m privileged session, 24h session extend throttle, JSON structured
logging, WebAuthn passwordless enabled, additionalProperties: false on
all identity schemas, memory limits bumped to 256Mi.
Hydra: expose_internal_errors disabled, PKCE enforced for public
clients, janitor CronJob every 6h, cookie domain set explicitly,
SSRF prevention via disallow_private_ip_ranges, JSON structured
logging, Maester enabledNamespaces includes monitoring.
Also: fixed selfservice URL patch divergence (settings path, missing
allowed_return_urls), removed invalid responseTypes on Hive client.
2026-03-24 19:40:58 +00:00
..
2026-03-18 18:36:05 +00:00
2026-03-18 18:36:05 +00:00
2026-03-18 18:36:05 +00:00
2026-03-18 18:36:05 +00:00
2026-03-18 18:36:05 +00:00
2026-03-18 18:36:05 +00:00
2026-03-18 18:36:05 +00:00
2026-03-18 18:36:05 +00:00
2026-03-18 18:36:05 +00:00
2026-03-18 18:36:05 +00:00
2026-03-24 12:22:10 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-24 12:22:10 +00:00
2026-03-10 19:00:57 +00:00
2026-02-28 22:08:38 +00:00
2026-02-28 13:42:27 +00:00
2026-03-20 13:41:54 +00:00
2026-03-24 12:22:10 +00:00
2026-03-06 12:08:21 +00:00
2026-03-06 12:08:21 +00:00
2026-03-06 12:08:21 +00:00
2026-03-06 13:56:29 +00:00
2026-03-06 12:08:21 +00:00
2026-03-06 12:08:21 +00:00
2026-03-06 12:08:21 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-03-10 19:00:57 +00:00
2026-02-28 13:42:27 +00:00
2026-03-24 19:40:58 +00:00
2026-03-06 12:08:21 +00:00
2026-03-10 19:00:57 +00:00
2026-03-24 12:22:10 +00:00
2026-03-06 12:08:21 +00:00
2026-03-18 18:36:15 +00:00
2026-03-03 18:07:08 +00:00
2026-03-01 16:25:11 +00:00
2026-03-24 12:22:10 +00:00
2026-03-20 13:41:54 +00:00
2026-03-10 19:00:57 +00:00
2026-03-03 14:31:21 +00:00
2026-03-20 13:41:54 +00:00