From bd7c7c1114ca1aca063c92cafe90b685c1ec3108 Mon Sep 17 00:00:00 2001 From: ory-bot <60093411+ory-bot@users.noreply.github.com> Date: Wed, 25 Mar 2026 14:41:56 +0000 Subject: [PATCH] chore(docs): update OEL image tag --- .../self-hosted/oel/keto/changelog/v26.2.1.md | 1 + .../oel/kratos/changelog/v26.2.1.md | 23 +++++++++++++++++++ .../oel/oathkeeper/changelog/v26.2.1.md | 1 + .../oel/oauth2/changelog/v26.2.1.md | 7 ++++++ docs/self-hosted/oel/oel-hydra-image-tags.md | 1 + docs/self-hosted/oel/oel-keto-image-tags.md | 1 + docs/self-hosted/oel/oel-kratos-image-tags.md | 1 + .../oel/oel-oathkeeper-image-tags.md | 1 + docs/self-hosted/oel/oel-polis-image-tags.md | 1 + .../oel/polis/changelog/v26.2.1.md | 1 + 10 files changed, 38 insertions(+) create mode 100644 docs/self-hosted/oel/keto/changelog/v26.2.1.md create mode 100644 docs/self-hosted/oel/kratos/changelog/v26.2.1.md create mode 100644 docs/self-hosted/oel/oathkeeper/changelog/v26.2.1.md create mode 100644 docs/self-hosted/oel/oauth2/changelog/v26.2.1.md create mode 100644 docs/self-hosted/oel/polis/changelog/v26.2.1.md diff --git a/docs/self-hosted/oel/keto/changelog/v26.2.1.md b/docs/self-hosted/oel/keto/changelog/v26.2.1.md new file mode 100644 index 000000000..05ef7fbef --- /dev/null +++ b/docs/self-hosted/oel/keto/changelog/v26.2.1.md @@ -0,0 +1 @@ +No changelog entries found for keto/oel in versions v26.2.1 diff --git a/docs/self-hosted/oel/kratos/changelog/v26.2.1.md b/docs/self-hosted/oel/kratos/changelog/v26.2.1.md new file mode 100644 index 000000000..0f077f58d --- /dev/null +++ b/docs/self-hosted/oel/kratos/changelog/v26.2.1.md @@ -0,0 +1,23 @@ +## v26.2.1 + +### Fix identity disabled error handling during self-service flows + +Previously, when attempting to recover or login as an identity that had been disabled (state set to "inactive"), Ory Kratos would +return a generic unauthorized error for API and SPA clients. + +Instead, Ory Kratos now adds a newly introduced UI message (with ID 4010011) to the flow's UI messages indicating the identity is +disabled. + +#### Breaking changes + +For API and SPA clients, the error response when interacting with recovery and login flows for disabled identities has been +changed from a generic unauthorized error to a specific error indicating that the identity is disabled. This allows clients to +handle this case more gracefully. + +Upgrade instructions: + +- If your application already handles "invalid credentials", and other similar errors, no change will be required. + +- If your application specifically checks for the previous generic unauthorized error during recovery or login flows, you will + need to update your error handling logic to check for the new specific "identity disabled" error message in the UI messages of + the respective flow objects. diff --git a/docs/self-hosted/oel/oathkeeper/changelog/v26.2.1.md b/docs/self-hosted/oel/oathkeeper/changelog/v26.2.1.md new file mode 100644 index 000000000..d5cd4fc06 --- /dev/null +++ b/docs/self-hosted/oel/oathkeeper/changelog/v26.2.1.md @@ -0,0 +1 @@ +No changelog entries found for oathkeeper/oel in versions v26.2.1 diff --git a/docs/self-hosted/oel/oauth2/changelog/v26.2.1.md b/docs/self-hosted/oel/oauth2/changelog/v26.2.1.md new file mode 100644 index 000000000..878526c2b --- /dev/null +++ b/docs/self-hosted/oel/oauth2/changelog/v26.2.1.md @@ -0,0 +1,7 @@ +## v26.2.1 + +### Accept custom domain issuer as valid audience in JWT Bearer Grant + +When using a custom domain (CNAME) as the OAuth2 issuer URL, Hydra now accepts the issuer-derived token URL as a valid audience in +JWT Bearer Grant assertions. Previously, only the internal public URL was accepted, causing JWT Bearer Grant requests to fail when +clients set the audience to the custom domain token endpoint. diff --git a/docs/self-hosted/oel/oel-hydra-image-tags.md b/docs/self-hosted/oel/oel-hydra-image-tags.md index 42e9466c6..1cccad8cd 100644 --- a/docs/self-hosted/oel/oel-hydra-image-tags.md +++ b/docs/self-hosted/oel/oel-hydra-image-tags.md @@ -1,5 +1,6 @@ | Image Tag | Release Date | | ---------------------------------------- | ------------ | +| 26.2.1 | 2026-03-25 | | 26.2.0 | 2026-03-20 | | 26.1.18 | 2026-03-13 | | 26.1.17 | 2026-03-11 | diff --git a/docs/self-hosted/oel/oel-keto-image-tags.md b/docs/self-hosted/oel/oel-keto-image-tags.md index cf6c94210..3d5617f02 100644 --- a/docs/self-hosted/oel/oel-keto-image-tags.md +++ b/docs/self-hosted/oel/oel-keto-image-tags.md @@ -1,5 +1,6 @@ | Image Tag | Release Date | | ---------------------------------------- | ------------ | +| 26.2.1 | 2026-03-25 | | 26.2.0 | 2026-03-20 | | 26.1.18 | 2026-03-13 | | 26.1.17 | 2026-03-11 | diff --git a/docs/self-hosted/oel/oel-kratos-image-tags.md b/docs/self-hosted/oel/oel-kratos-image-tags.md index 6916d3058..e4ce354f6 100644 --- a/docs/self-hosted/oel/oel-kratos-image-tags.md +++ b/docs/self-hosted/oel/oel-kratos-image-tags.md @@ -1,5 +1,6 @@ | Image Tag | Release Date | | ---------------------------------------- | ------------ | +| 26.2.1 | 2026-03-25 | | 26.2.0 | 2026-03-20 | | 26.1.18 | 2026-03-13 | | 26.1.17 | 2026-03-11 | diff --git a/docs/self-hosted/oel/oel-oathkeeper-image-tags.md b/docs/self-hosted/oel/oel-oathkeeper-image-tags.md index 6a80f84f3..5a4fcc432 100644 --- a/docs/self-hosted/oel/oel-oathkeeper-image-tags.md +++ b/docs/self-hosted/oel/oel-oathkeeper-image-tags.md @@ -1,5 +1,6 @@ | Image Tag | Release Date | | ---------------------------------------- | ------------ | +| 26.2.1 | 2026-03-25 | | 26.2.0 | 2026-03-20 | | 26.1.18 | 2026-03-13 | | 26.1.17 | 2026-03-11 | diff --git a/docs/self-hosted/oel/oel-polis-image-tags.md b/docs/self-hosted/oel/oel-polis-image-tags.md index 9cb79f028..de4f6ca74 100644 --- a/docs/self-hosted/oel/oel-polis-image-tags.md +++ b/docs/self-hosted/oel/oel-polis-image-tags.md @@ -1,5 +1,6 @@ | Image Tag | Release Date | | ---------------------------------------- | ------------ | +| 26.2.1 | 2026-03-25 | | 26.2.0 | 2026-03-20 | | 26.1.18 | 2026-03-13 | | 26.1.17 | 2026-03-11 | diff --git a/docs/self-hosted/oel/polis/changelog/v26.2.1.md b/docs/self-hosted/oel/polis/changelog/v26.2.1.md new file mode 100644 index 000000000..51fdf63f0 --- /dev/null +++ b/docs/self-hosted/oel/polis/changelog/v26.2.1.md @@ -0,0 +1 @@ +No changelog entries found for polis/oel in versions v26.2.1