New Ory Agent Security is now live! Claim your complimentary test drive. Get Started!

Skip to main content

v26.4.14

v26.4.14​

Writing a key keeps its trust relationships​

Writing a key with PUT /admin/keys/{set}/{kid} or PUT /admin/keys/{set} deleted every trust relationship for the JWT authorization grant that used the key, even when the key didn't change. Token requests with the urn:ietf:params:oauth:grant-type:jwt-bearer grant type that relied on such a trust relationship then failed with invalid_grant. Ory Hydra Authorization now keeps these trust relationships. When you write a different key under the same key ID, its trust relationships verify assertions with the new key. A key that you leave out of PUT /admin/keys/{set} is still deleted, together with its trust relationships.