Run your own OAuth2 Server
Blog post from Ory
Ory Hydra, an open-source technology written in Go, serves as an OAuth2 Server and OpenID Certified OpenID Connect Provider, facilitating the setup of a secure OAuth2 and OpenID Connect server for API security and third-party developer integration. It does not include user database management, instead using Login and Consent Flows to delegate user authentication tasks to external applications, and integrates seamlessly with identity services like IdentityServer and Azure AD. The guide details the setup process using the Ory Command Line Interface (CLI) on the Ory Network and offers advanced instructions for running Ory Hydra locally using Docker. It covers performing essential OAuth2 flows such as Client Credentials and Authorization Code Flows, and emphasizes Ory Hydra's capability to issue opaque Access Tokens, enhancing security by reducing attack vectors. The document highlights Ory Hydra's integration with the Docker and container ecosystem, making it suitable for cloud-native environments, and notes its positioning as a dedicated service distinct from full-stack identity management solutions. Ory Hydra is released under the Apache 2.0 license and is part of a broader suite of Ory's API security products, supported by a vibrant community.