New Ory Agent Security is now live! Claim your complimentary test drive. Get Started!

Skip to main content

v26.4.11

v26.4.11​

Check each login submission with a web hook​

The new selfservice.flows.login.submit.hooks trigger calls a web hook on every login submission, before Ory Kratos Identities looks up the identifier, checks a credential, sends a code, or redirects to an identity provider. Use it to ask a fraud detection service about each attempt, including the identifier step of identifier-first login. The web hook gets ctx.submission with the authentication method, the step, and, where the method has one, the submitted identifier or the chosen provider, together with the request's transient_payload. With can_interrupt: true, it can block the submission by answering with status 400 or 403 and validation messages.