May 2022 Summaries

Since its inception in 2014, Lumin PDF, a cloud-based platform for PDF collaboration and editing, has rapidly expanded its user base and security measures, especially after a data breach in 2019. Partnering with Ory, Lumin has enhanced its security infrastructure using Ory's zero trust network to manage identity, authentication, and access control, ensuring enterprise-grade security for its diverse clientele. This collaboration utilizes Ory's tools like Kratos for session management, Hydra for API authentication, and Keto for access control, enabling Lumin to maintain robust security while remaining flexible, scalable, and affordable in a competitive market. Lumin’s adoption of open-source technology supports its mission to offer accessible services globally, allowing the company to sustain its growth and continually improve user experiences.

The student project platform described facilitates the sharing of student side-projects while employing Ory Kratos for authentication. The system's architecture integrates a React UI, a GraphQL API, and Ory Kratos, which together manage user login credentials and ensure that data requests are authenticated. The authentication process involves initiating login flows, verifying session cookies, and managing redirects for account recovery. Ory Kratos is deployed via Kubernetes using Helm and Helmfile, with a configuration that includes email credentials for account recovery and secret management to securely handle credentials. The platform's login UI is designed with a popup component that interacts with the Ory Kratos JS SDK to handle registration, login, and password recovery. The backend verifies users by extracting session cookies and using the Ory Kratos Go SDK to attach user IDs to request contexts, facilitating access to protected fields. This approach allows seamless user authentication within the UI without additional interventions, optimizing the user experience and maintaining data security.