Existing solutions lack flexibility and granular control, limiting adaptability to specific business needs. Ory Hydra integrates with your infrastructure, giving you complete control over authentication workflows.
Ory Hydra powers systems with millions of customers and serving thousands of users per second.
Ory Hydra is written in Go and we provide SDKs for almost every language including Dart, .NET, Go, Java, PHP, Python, Ruby, Rust and Typescript. It works with any login system and it is easy to customize the login experience. Follow our step by step documentation and integrate Hydra in a snap.
Ory Hydra is the most advanced OAuth 2.0 and OIDC Certified® Server, and the only one that is open source. It integrates with any login system and allows you to interface with any application, anywhere.
Ory Hydra offers deployment flexibility. With open source roots, Ory Hydra has grown to offer different models to suit your business needs. Deploy open-source, opt for Ory Enterprise License with additional features and support, or use the fully managed Ory Network for a seamless SaaS experience.
Benjamin Billings
Engineering Manager, Identity Platforms
OpenAI wanted a partner that could help enable our vision for owning our identity processes, data, and success. We have a lot of partners, and Ory is one of our best.
OSS is where most teams start. The question is whether it holds up as scale, compliance, and security requirements grow. Running identity infrastructure yourself means owning everything, from patches to incident response, compliance controls, and performance tuning. At enterprise scale, that overhead competes with product innovation. Ory's commercial offerings, OEL and Ory Network, trade that burden for SLA-backed support, managed CVE patching, and audit-ready controls.
OSS
OEL
Ory Network
Deploy on any infrastructure and take full control over authentication and user workflows of your application.
Powering OpenAI's OAuth2 infrastructure - discover how Ory Hydra scaled to web-scale with reliable, straightforward technology.
Performing over 1000 OAuth2 Authorization Code Grants per second on a single PostgreSQL database
Implement the full Open Authorization 2.0 standard in your technology stack. Ory Hydra integrates with any open source (e.g. Ory Kratos) or proprietary IAM system.
Rely on an OpenID Certified® OIDC Provider. Ory Hydra implements all flows specified by the IETF and OpenID Foundation.
Use your branding and user interfaces for all OAuth2.0 and OpenID Connect flows. Your own styles and flows powered by a robust API and intuitive CLI.
Migrate from MITREid Connect to Ory Hydra. Migration documentation is provided.
Encrypt cryptographic keys for e.g. signing JWTs, store them securely and manage OAuth 2.0 clients directly from the CLI.
Sleep easy, knowing that Ory Hydra is designed to reduce security incidents and scales as required. Ory Hydra serves tokens to millions of users weekly and just works.
Get started with the guides and docs below
const express = require('express');
const app = express();
const { AuthorizationCode } = require("simple-oauth2")
const client = new AuthorizationCode({
client: {
id: process.env.CLIENT_ID,
secret: process.env.CLIENT_SECRET,
},
auth: {
tokenHost: "https://<your-project>.projects.oryapis.com",
tokenPath: "/oauth2/token",
authorizePath: "/oauth2/auth",
},
})
app.get("/", (req, res) => {
const authorizationUri = client.authorizeURL({
redirect_uri: REDIRECT_URI,
scope: "openid offline",
})
res.redirect(authorizationUri)
})
app.get("/callback", async (req, res) => {
const { code } = req.query
try {
const accessToken = await client.getToken({
code,
redirect_uri: process.env.REDIRECT_URI,
scope: "openid offline",
})
res.json(accessToken.token)
} catch (error) {
res.status(500).json({ error: error.message })
}
})