hydra

Ory Hydra is a standalone OAuth 2.0 and OpenID Connect server rather than a bundled user-management system. It connects to an existing identity provider or custom authentication endpoint through a login and consent app, allowing teams to retain control over their user interface and authentication experience. The server implements OAuth 2.0 and OpenID Connect flows, token issuance and validation, client management, consent and login orchestration, and JWKS management. The README cites support for standards including token revocation, token introspection, PKCE, JWT client authentication, dynamic client registration, OpenID Connect Discovery, and front- and back-channel logout. It is an OpenID Foundation-certified OpenID Provider for Basic, Implicit, Hybrid, configuration publishing, and dynamic provider profiles. Hydra can be used as a managed service through the Ory Network or self-hosted. Self-hosting documentation covers Linux, macOS, Windows, Docker, PostgreSQL, MySQL, CockroachDB, Kubernetes, and building from source. An Ory CLI quickstart demonstrates creating OAuth2 clients and running client-credentials and authorization-code flows. The project is designed for cloud-native deployments and can integrate with identity systems such as Ory Kratos or proprietary authentication services.