feat: OpenID Connect Dynamic Client Registration and OAuth2 Dynamic Client Registration Protocol

.circleci/config.yml

@@ -1,7 +1,7 @@
 version: 2.1
 
 orbs:
-  goreleaser: ory/goreleaser@0.1.36
+  goreleaser: ory/goreleaser@0.1.37
   slack: circleci/slack@3.4.2
   sdk: ory/sdk@0.1.52
   changelog: ory/changelog@0.1.10

CONTRIBUTORS

@@ -0,0 +1,272 @@
+# contributors generated by `make contributors`
+
+115100 <115100@users.noreply.github.com>
+Ackermann Yuriy <ackermann.yuriy@gmail.com>
+Aeneas <aeneas.rekkas@serlo.org>
+Aeneas <aeneas@ory.am>
+Aeneas <arekkas@users.noreply.github.com>
+Aeneas Rekkas (arekkas) <aeneas@ory.am>
+Aeneas Rekkas <aeneas.rekkas@serlo.org>
+Ajanthan <balaajanthan@gmail.com>
+Akbar Uddin Kashif <kashif_9849@hotmail.com>
+Alano Terblanche <alanoterblanche@gmail.com>
+Alexander Widerberg <alexander.widerberg@cybercom.com>
+Alexander Widerberg <widerbergaren@gmail.com>
+Allan Simon <allan.simon@supinfo.com>
+Amaan Iqbal <amaaniqbal2786@gmail.com>
+Amir Aslaminejad <aaslamin@users.noreply.github.com>
+Amir Aslaminejad <aslaminejad@gmail.com>
+Andreas Litt <andreas.litt@gmail.com>
+André Filipe <MASNathan@users.noreply.github.com>
+Ankit Singh <bittuf3@gmail.com>
+Ante Mihalj <ante.mihalj@gmail.com>
+Anton Samoylenko <a.samoylenko95@gmail.com>
+Aritz Berasarte <raskasso@hotmail.com>
+Arkady Bagdasarov <56913719+arkady-bagdasarov@users.noreply.github.com>
+Artem Yarmoliuk <koolgen@gmail.com>
+Arthur Knoepflin <arthur.knoepflin@epitech.eu>
+Atallah khedrane <rohff7@gmail.com>
+BastianHofmann <bastianhofmann@me.com>
+Ben Scholzen <mail@dasprids.de>
+Benjamin Tanone <benjamin.tanone@gmail.com>
+Bernat Mut <1116133+monwolf@users.noreply.github.com>
+Bhargav SNV <44526455+Gituser143@users.noreply.github.com>
+Brandon Philips <brandon@ifup.org>
+Brian <20056195+coopbri@users.noreply.github.com>
+Brian Teller <brianateller@gmail.com>
+Bruno Bigras <bigras.bruno@gmail.com>
+Bruno Heridet <delapouite@gmail.com>
+Chris Mack <christopher.mack@gmail.com>
+Christian Dreier <dreier.christian@googlemail.com>
+Christian Skovholm <christianskovholm@gmail.com>
+Corey Burmeister <burmeister.corey@gmail.com>
+Dallan Quass <dallan@quass.org>
+Damien Bravin <damienbr@users.noreply.github.com>
+Daniel Jiménez <danijs12@hotmail.com>
+Daniel Schellhorn <daniel@schellhorn.de>
+Daniel Shuy <daniel_shuy@hotmail.com>
+Daniel Sutton <daniel@ducksecops.uk>
+Dave Kushner <1289314+dkushner@users.noreply.github.com>
+David <dlopbec@gmail.com>
+David <not4rent@gmail.com>
+David Lobe <not4rent@gmail.com>
+David López <not4rent@gmail.com>
+David Wilkins <dave@sitchai.com>
+DennisPattmann5012 <44261569+DennisPattmann5012@users.noreply.github.com>
+Dexter Chua <dalcde@users.noreply.github.com>
+Dibyajyoti Behera <dibyajyotibehera@gmail.com>
+Dimitrij Drus <dadrus@gmx.de>
+Dimitrij Drus <dimitrij.drus@innoq.com>
+Divyansh Bansal <divyansh.bansal25@gmail.com>
+Dmitry <condemil@users.noreply.github.com>
+Dmitry Dolbik <dolbik@gmail.com>
+Edward Wilde <ewilde@gmail.com>
+Eric Douglas <ericalandouglas@gmail.com>
+Euan Kemp <euank@euank.com>
+Felix Jung <felixjung@users.noreply.github.com>
+Flavio Leggio <flavioleggio@gmail.com>
+Flori <40140792+fl0lli@users.noreply.github.com>
+Frank Felhoffer <silveraid@users.noreply.github.com>
+Furkan <bayansar@users.noreply.github.com>
+Gajewski Dmitriy <dmit8815@gmail.com>
+Genchi <genchilu@gmail.com>
+George Bolo <george.bolo@gmail.com>
+Gilbert Gilb's <gilbsgilbs@users.noreply.github.com>
+Gorka Lerchundi Osa <glertxundi@gmail.com>
+Grant Zvolsky <grant@zvolsky.org>
+Grant Zvolský <grant@zvolsky.org>
+Greg Woodcock <pr1sm.g@gmail.com>
+Grigory <g.sokol99@g-sokol.info>
+Hans <laderud@hotmail.com>
+Harsimran Singh Maan <maan.harry@gmail.com>
+Helmuth Bederna <25813283+IonFoXx@users.noreply.github.com>
+Hendrik Heil <hendrik@ciidyr.com>
+Igor Zibarev <hypnoglow@gmail.com>
+Imran Ismail <imran.codely@gmail.com>
+Iñigo <i.horcajo@saltosystems.com>
+Iñigo <inigohu@gmail.com>
+Jacek Symonowicz <jacor84@gmail.com>
+Jakub Błaszczyk <daemonsthere@gmail.com>
+Jakub Błaszczyk <jakub.blaszczyk@sap.com>
+James Elliott <james-d-elliott@users.noreply.github.com>
+Jamie Stackhouse <itsjamie@users.noreply.github.com>
+Jan <king-jan1999@hotmail.de>
+Jan Beckmann <king-jan1999@hotmail.de>
+Jay Linski <jaylinski@users.noreply.github.com>
+JiaLiPassion <JiaLi.Passion@gmail.com>
+Jimmy Stridh <jimmy@stridh.nu>
+Joao Carlos <joao.cardoso@smartum.fi>
+Joao Carlos <mail@joao-carlos.com>
+Joel Pickup <joel@payfriendz.com>
+John <jfcurran@users.noreply.github.com>
+John Wu <johnwu96822@gmail.com>
+Josh Giles <jgiles@paxos.com>
+Joshua Obasaju <41480580+obasajujoshua31@users.noreply.github.com>
+Julian Tescher <jatescher@gmail.com>
+Justin Clift <justin@postgresql.org>
+Kevin Minehart <kmineh0151@gmail.com>
+Kim Neunert <kneunert@gmail.com>
+Kishan B <kishancs46@gmail.com>
+Kostya Lepa <const.lepa+github@gmail.com>
+Kunal Parikh <kunal@techthumb.in>
+L7280153 <javier.viera@mindcurv.com>
+LemurP <LemurP@users.noreply.github.com>
+Lennart Rosam <hello@takuto.de>
+Louis Laureys <louis@laureys.me>
+Luis Pedrosa <2365589+lpedrosa@users.noreply.github.com>
+Lukasz Jagiello <jagiello.lukasz@gmail.com>
+Luke Stoward <luke_stoward@hotmail.co.uk>
+MOZGIII <mike-n@narod.ru>
+Marco Hutzsch <39520486+marcohutzsch1234@users.noreply.github.com>
+Masoud Tahmasebi <mtahmasebi118@gmail.com>
+Matheus Moraes <matheusfaria.moraes@gmail.com>
+Matt Bonnell <64976795+mbonnell-wish@users.noreply.github.com>
+Matt Bonnell <matt.bonnell@icloud.com>
+Matt Drollette <matt@drollette.com>
+Matt Vinall <boyvinall@gmail.com>
+Matt Vinall <boyvinall@users.noreply.github.com>
+Matteo Suppo <matteo.suppo@gmail.com>
+Matthew Fawcett <mail@matthewfawcett.co.uk>
+Maurizio <Aterocana@users.noreply.github.com>
+Max Köhler <me@max-koehler.de>
+Maxime Song <me@cppdo.com>
+Mitar <mitar.git@tnode.com>
+Mitar <mitar.github@tnode.com>
+Moritz Lang <hi@slashmo.codes>
+Natalia <nataliabidart@gmail.com>
+Nathan Mills <rivernate@gmail.com>
+Neeraj <neeraj.viman@gmail.com>
+Nejcraft <nejcraftplays@gmail.com>
+Nestor <nesterran@gmail.com>
+Nick Otter <otternq@gmail.com>
+Nick Ufer <nick@ufer.dev>
+NickUfer <me@nick-ufer.de>
+Nikita Puzankov <humb1t@yandex.ru>
+Nikolay Stupak <nikolaystupak@gmail.com>
+NikolaySl <grafsl@gmail.com>
+ORY Continuous Integration <circleci@ory.am>
+ORY Continuous Integration <hi@ory.am>
+ORY Continuous Integration <office+ci@ory.sh>
+Olivier Deckers <olivierdeckers@users.noreply.github.com>
+Olivier Tremblay <himself@otremblay.com>
+Oz Haven <ozzyhaven@therebelrobot.com>
+Patrick Barker <patrickbarkerco@gmail.com>
+Patrick Tescher <pat2man@gmail.com>
+Patrik <zepatrik@users.noreply.github.com>
+Paul Harman <pwharman@gmail.com>
+Petr Jediný <petr.jediny@gmail.com>
+Philip Nicolcev <33558528+pnicolcev-tulipretail@users.noreply.github.com>
+Philip Nicolcev <phil.nicolcev@tulip.io>
+Pierre-David Bélanger <pierredavidbelanger@gmail.com>
+Prateek Malhotra <someone1@gmail.com>
+Quentin Perez <qperez@ocs.online.net>
+RNBack <contact@rnback.com>
+Ricardo Iván Vieitez Parra <3857362+corrideat@users.noreply.github.com>
+Rich Wareham <rjw57@users.noreply.github.com>
+Richard Zana <zanarichard@hotmail.com>
+RikiyaFujii <ridai22hanriku@gmail.com>
+Rob Smith <smith.rob.s@gmail.com>
+Roman Lytvyn <rider1493@gmail.com>
+Roman Minkin <minkinroman@gmail.com>
+Saad Tazi <stazi@fruitsoftware.com>
+SaintMalik <37118134+saintmalik@users.noreply.github.com>
+Samuele Lilli <samuele.lilli@gmail.com>
+Sawada Shota <shota.sawada@crowdworks.co.jp>
+Sawada Shota <xiootas@gmail.com>
+Shadaï ALI <nafiouali@gmail.com>
+Shane Starcher <shanestarcher@gmail.com>
+Shankar Dhanasekaran <shankardevy@gmail.com>
+Shaurya Dhadwal <shauryadhadwal@users.noreply.github.com>
+Shota SAWADA <xiootas@gmail.com>
+Simon Lipp <sloonz@gmail.com>
+Simon-Pierre Gingras <892367+spg@users.noreply.github.com>
+Smotrov Dmitriy <dsxack@gmail.com>
+Stepan Rakitin <stepanr@mailbox.org>
+Stephan Renatus <srenatus@chef.io>
+Steve Kaliski <sjkaliski@users.noreply.github.com>
+Sufijen Bani <git@sbani.net>
+Sven Neuhaus <neuhaus@users.noreply.github.com>
+T Venu Madhav <tnvmadhav@gmail.com>
+The Gitter Badger <badger@gitter.im>
+Thibault Doubliez <thibault@doubliez.com>
+Thomas Aidan Curran <thomas@ory.sh>
+Thomas Aidan Curran <thomasaidancurran@gmail.com>
+Thomas Recloux <thomas@recloux.fr>
+Thomas Stewart <thomas@stewarts.org.uk>
+Thor Marius Henrichsen <thor.henrichsen@gmail.com>
+TilmanTheile <50573074+TilmanTheile@users.noreply.github.com>
+Tim Sazon <tim.sazon51@gmail.com>
+Vadim <pr0head@gmail.com>
+Vincent <vincent@ory.sh>
+Vinci Xu <277040271@qq.com>
+Vishesh Handa <me@vhanda.in>
+Vitaly Migunov <narshodan@hotmail.com>
+Vladimir Kalugin <kalugin.mir@gmail.com>
+Wei Cheng <calvinpohwc@gmail.com>
+Wojciech Kuźmiński <45849042+woojtek@users.noreply.github.com>
+Wyatt Anderson <wanderson@gmail.com>
+Yannick Heinrich <yannick.heinrich@gmail.com>
+Yorman ����’.͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇͇Ỏ̷͖͈̞̩͎̻̫̫̜͉̠̫͕̭̭̫  ฏ๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎๎ <cixtor@users.noreply.github.com>
+Yuki Hirasawa <48427044+hirasawayuki@users.noreply.github.com>
+Zbigniew Mandziejewicz <shaxbee@gmail.com>
+abusaidm <m.abusaid@me.com>
+aeneasr <3372410+aeneasr@users.noreply.github.com>
+aeneasr <aeneas.rekkas@serlo.org>
+aeneasr <aeneas@ory.sh>
+aeneasr <aeneasr@users.noreply.github.com>
+arapaho <arapaho@users.noreply.github.com>
+arekkas <aeneas.rekkas@serlo.org>
+arekkas <aeneas@ory.am>
+arunas-ka <arunas0725@gmail.com>
+aspeteRakete <fdubrownik@gmail.com>
+bfrisbie-brex <63267486+bfrisbie-brex@users.noreply.github.com>
+catper <60221155+catper@users.noreply.github.com>
+cherrymu <cherry_rvp@protonmail.com>
+clausdenk <denk@us.es>
+darron froese <darron@froese.org>
+debrutal <duennes@gmail.com>
+dharmendraImprowised <72780358+DKImprowised@users.noreply.github.com>
+ducksecops <daniel@ducksecops.uk>
+emil <emil.vaagland@spid.no>
+fazal <mohamedfaxal@gmail.com>
+fazal <mohamedhfazal@gmail.com>
+fjviera <javier.viera@mindcurv.com>
+fjvierap <javier.viera@mindcurv.com>
+hackerman <3372410+aeneasr@users.noreply.github.com>
+hackerman <arekkas@users.noreply.github.com>
+hisamura333 <0aw2794w78t0b4c@ezweb.ne.jp>
+jamesnicolas <jamesnicolas@me.com>
+javier.viera@mindcurv.com <javier.viera@mindcurv.com>
+jayme-github <jayme-github@users.noreply.github.com>
+jess <jessachandler@gmail.com>
+jhuggett <59655877+jhuggett@users.noreply.github.com>
+khevse <khevse@gmail.com>
+kobayashilin <ss61418@gmail.com>
+lauri <anders.lauri@gmail.com>
+michaelwagler <michaelwagler@users.noreply.github.com>
+mkontani <mkontani@yahoo-corp.jp>
+naveenpaul1 <79908956+naveenpaul1@users.noreply.github.com>
+nessita <nataliabidart@gmail.com>
+nishanth2143 <nishanth2143@gmail.com>
+olFi95 <olFi95@users.noreply.github.com>
+phi2039 <climber2039@gmail.com>
+phiremande <16595434+phiremande@users.noreply.github.com>
+pike1212 <clp207@psu.edu>
+pike1212 <pike1212@gmail.com>
+prateek1192 <1192prateek@gmail.com>
+rickwang7712 <rickwang@synology.com>
+robhinds <robhinds@gmail.com>
+sagarshah1983 <sagarshah1983@gmail.com>
+sawadashota <xiootas@gmail.com>
+seremenko-wish <60801091+seremenko-wish@users.noreply.github.com>
+simpleway <simpleway@users.noreply.github.com>
+timothyknight <darkenglow@gmail.com>
+tutman96 <11356668+tutman96@users.noreply.github.com>
+tyaps <tyaps@mail.ru>
+vancity-amir <62674577+vancity-amir@users.noreply.github.com>
+vinckr <vincent@ory.sh>
+wanderer163 <93438190+wanderer163@users.noreply.github.com>
+zepatrik <patrik@ory.sh>
+zepatrik <zepatrik@users.noreply.github.com>
+İbrahim Esen <ibrahmesen@gmail.com>
+巢鹏 <chaopeng@chaopeng.me>

README.md

@@ -196,7 +196,7 @@ that your company deserves a spot here, reach out to
             <td>Zero</td>
             <td align="center"><img height="32px" src="https://raw.githubusercontent.com/ory/meta/master/static/adopters/commitzero.svg" alt="Project Zero by Commit"></td>
             <td><a href="https://getzero.dev/">getzero.dev</a></td>
-        </tr>        
+        </tr>
         <tr>
             <td>Adopter *</td>
             <td>Padis</td>
@@ -214,7 +214,7 @@ that your company deserves a spot here, reach out to
             <td>Security Onion Solutions</td>
             <td align="center"><img height="32px" src="https://raw.githubusercontent.com/ory/meta/master/static/adopters/securityonion.svg" alt="Security Onion Solutions"></td>
             <td><a href="https://securityonionsolutions.com/">securityonionsolutions.com</a></td>
-        </tr>        
+        </tr>
         <tr>
             <td>Adopter *</td>
             <td>Factly</td>
@@ -238,7 +238,7 @@ that your company deserves a spot here, reach out to
             <td>Spiri.bo</td>
             <td align="center"><img height="32px" src="https://raw.githubusercontent.com/ory/meta/master/static/adopters/spiribo.svg" alt="Spiri.bo"></td>
             <td><a href="https://spiri.bo/">spiri.bo</a></td>
-        </tr>        
+        </tr>
         <tr>
             <td>Sponsor</td>
             <td>Strivacity</td>
@@ -274,6 +274,8 @@ ORY Hydra implements Open Standards set by the IETF:
 * [OAuth 2.0 Token Revocation](https://tools.ietf.org/html/rfc7009)
 * [OAuth 2.0 Token Introspection](https://tools.ietf.org/html/rfc7662)
 * [OAuth 2.0 for Native Apps](https://tools.ietf.org/html/draft-ietf-oauth-native-apps-10)
+* [OAuth 2.0 Dynamic Client Registration Protocol](https://datatracker.ietf.org/doc/html/rfc7591)
+* [OAuth 2.0 Dynamic Client Registration Management Protocol](https://datatracker.ietf.org/doc/html/rfc7592)
 * [Proof Key for Code Exchange by OAuth Public Clients](https://tools.ietf.org/html/rfc7636)
 * [JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants](https://tools.ietf.org/html/rfc7523)
 

client/.snapshots/TestHandler-case=selfservice_with_incorrect_or_missing_auth-endpoint=selfservice-method=DELETE-with_a_different_client_auth.json

@@ -0,0 +1,7 @@
+{
+  "body": {
+    "error": "The request could not be authorized",
+    "error_description": "The requested OAuth 2.0 client does not exist or you provided incorrect credentials."
+  },
+  "status": 401
+}

client/.snapshots/TestHandler-case=selfservice_with_incorrect_or_missing_auth-endpoint=selfservice-method=DELETE-without_auth.json

@@ -0,0 +1,7 @@
+{
+  "body": {
+    "error": "The request could not be authorized",
+    "error_description": "The requested OAuth 2.0 client does not exist or you provided incorrect credentials."
+  },
+  "status": 401
+}

client/.snapshots/TestHandler-case=selfservice_with_incorrect_or_missing_auth-endpoint=selfservice-method=DELETE-without_incorrect_auth.json

@@ -0,0 +1,7 @@
+{
+  "body": {
+    "error": "The request could not be authorized",
+    "error_description": "The requested OAuth 2.0 client does not exist or you provided incorrect credentials."
+  },
+  "status": 401
+}

client/.snapshots/TestHandler-case=selfservice_with_incorrect_or_missing_auth-endpoint=selfservice-method=GET-with_a_different_client_auth.json

@@ -0,0 +1,7 @@
+{
+  "body": {
+    "error": "The request could not be authorized",
+    "error_description": "The requested OAuth 2.0 client does not exist or you provided incorrect credentials."
+  },
+  "status": 401
+}

client/.snapshots/TestHandler-case=selfservice_with_incorrect_or_missing_auth-endpoint=selfservice-method=GET-without_auth.json

@@ -0,0 +1,7 @@
+{
+  "body": {
+    "error": "The request could not be authorized",
+    "error_description": "The requested OAuth 2.0 client does not exist or you provided incorrect credentials."
+  },
+  "status": 401
+}

client/.snapshots/TestHandler-case=selfservice_with_incorrect_or_missing_auth-endpoint=selfservice-method=GET-without_incorrect_auth.json

@@ -0,0 +1,7 @@
+{
+  "body": {
+    "error": "The request could not be authorized",
+    "error_description": "The requested OAuth 2.0 client does not exist or you provided incorrect credentials."
+  },
+  "status": 401
+}

client/.snapshots/TestHandler-case=selfservice_with_incorrect_or_missing_auth-endpoint=selfservice-method=PUT-with_a_different_client_auth.json

@@ -0,0 +1,7 @@
+{
+  "body": {
+    "error": "The request could not be authorized",
+    "error_description": "The requested OAuth 2.0 client does not exist or you provided incorrect credentials."
+  },
+  "status": 401
+}

client/.snapshots/TestHandler-case=selfservice_with_incorrect_or_missing_auth-endpoint=selfservice-method=PUT-without_auth.json

@@ -0,0 +1,7 @@
+{
+  "body": {
+    "error": "The request could not be authorized",
+    "error_description": "The requested OAuth 2.0 client does not exist or you provided incorrect credentials."
+  },
+  "status": 401
+}

client/.snapshots/TestHandler-case=selfservice_with_incorrect_or_missing_auth-endpoint=selfservice-method=PUT-without_incorrect_auth.json

@@ -0,0 +1,7 @@
+{
+  "body": {
+    "error": "The request could not be authorized",
+    "error_description": "The requested OAuth 2.0 client does not exist or you provided incorrect credentials."
+  },
+  "status": 401
+}