PHPackages tikivn/hydra-keto - PHPackages - PHPackages [Skip to content](#main-content)[PHPackages](/)[Directory](/)[Categories](/categories)[Trending](/trending)[Leaderboard](/leaderboard)[Changelog](/changelog)[Analyze](/analyze)[Collections](/collections)[Log in](/login)[Sign up](/register) 1. [Directory](/) 2. / 3. [Security](/categories/security) 4. / 5. tikivn/hydra-keto ActiveLibrary[Security](/categories/security) tikivn/hydra-keto ================= 063Go Since Oct 25Pushed 7y ago4 watchersCompare [ Source](https://github.com/tikivn/keto)[ Packagist](https://packagist.org/packages/tikivn/hydra-keto)[ RSS](/packages/tikivn-hydra-keto/feed)WikiDiscussions master Synced today READMEChangelogDependenciesVersions (1)Used By (0) [![ORY Keto - Open Source & Cloud Native Access Control Server](./docs/images/banner_keto.png)](./docs/images/banner_keto.png) ============================================================================================================================== [](#) #### [Chat](https://discord.gg/PAMQWkr) | [Forums](https://community.ory.am/) | [Newsletter](http://eepurl.com/di390P) [Guide](https://www.ory.sh/docs/guides/master/keto/) | [API Docs](https://www.ory.sh/docs/api/keto?version=master) | [Code Docs](https://godoc.org/github.com/ory/keto) [Support this project!](https://opencollective.com/ory) [](#--------chat-----forums-----newsletter----guide-----api-docs-----code-docs----support-this-project) This service is a policy decision point. It uses a set of access control policies, similar to [AWS IAM Policies](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html), in order to determine whether a subject, for example user, application, service, car, etc., is authorized to perform a certain action on a resource. [![Build Status](https://camo.githubusercontent.com/a8b792f0e53ee16b2cb7f9cd7bc53b3c054bf8fa691906443cecd73eb29520e2/68747470733a2f2f636972636c6563692e636f6d2f67682f6f72792f6b65746f2f747265652f6d61737465722e7376673f7374796c653d736869656c64)](https://circleci.com/gh/ory/keto/tree/master) [![Coverage Status](https://camo.githubusercontent.com/07bc95eb7c00e662b0b292a14e5ade6499d7ccfdb50b85a626b81abd65c5d244/68747470733a2f2f636f766572616c6c732e696f2f7265706f732f6f72792f6b65746f2f62616467652e7376673f6272616e63683d6d617374657226736572766963653d676974687562)](https://coveralls.io/github/ory/keto?branch=master) [![Go Report Card](https://camo.githubusercontent.com/893999b16f49064f93cceabf6fd5d0c7f1af219ce7347d1549e41833ce79e0ef/68747470733a2f2f676f7265706f7274636172642e636f6d2f62616467652f6769746875622e636f6d2f6f72792f6b65746f)](https://goreportcard.com/report/github.com/ory/keto) --- - [Introduction](#introduction) - [Installation](#installation) - [1. Download binaries](#1-download-binaries) - [2. Using Docker](#2-using-docker) - [Building from source](#building-from-source) - [Ecosystem](#ecosystem) - [ORY Security Console: Administrative User Interface](#ory-security-console-administrative-user-interface) - [ORY Hydra: OAuth2 & OpenID Connect Server](#ory-hydra-oauth2--openid-connect-server) - [ORY Oathkeeper: Identity & Access Proxy](#ory-oathkeeper-identity--access-proxy) - [Examples](#examples) - [Security](#security) - [Disclosing vulnerabilities](#disclosing-vulnerabilities) - [Telemetry](#telemetry) - [Guide](#guide) - [HTTP API documentation](#http-api-documentation) - [Upgrading and Changelog](#upgrading-and-changelog) - [Command line documentation](#command-line-documentation) - [Backers](#backers) - [Sponsors](#sponsors) Introduction ------------ [](#introduction) ORY Keto models Access Control Lists, Role Based Access Control, and fine-grained permission sets. This server implementation uses [ORY Ladon](https://github.com/ory/ladon) as the decision engine. ORY Keto resolves credentials using various authentication mechanisms: - OAuth 2.0 Access Tokens using the OAuth 2.0 Introspection standard. - Plaintext when you already know the user ID. - JSON Web Tokens (coming soon). - SAML (coming soon). ### Installation [](#installation) There are various ways of installing ORY keto on your system. #### 1. Download binaries [](#1-download-binaries) The client and server **binaries are downloadable at [releases](https://github.com/ory/keto/releases)**. There is no installer yet available. Add the ORY keto binary to the PATH environment variable or add the binary to a location already in your path (`/usr/bin`, ...). If these download instructions are unclear, ask for clarification in our [chat channel](https://www.ory.sh/chat). We are happy to help. #### 2. Using Docker [](#2-using-docker) **Starting the host** is easiest with Docker. The host process handles HTTP requests and is backed by a database. Read how to install docker on [Linux](https://docs.docker.com/linux/), [OSX](https://docs.docker.com/mac/) or [Windows](https://docs.docker.com/windows/). ORY keto is available on [Docker Hub](https://hub.docker.com/r/oryd/keto/). When using ORY keto without a database, restarting, scaling or stopping the container will **lose all data**: ``` $ docker run -e "DATABASE_URL=memory" -d --name my-keto -p 4466:4466 oryd/keto ec91228cb105db315553499c81918258f52cee9636ea2a4821bdb8226872f54b ``` #### Building from source [](#building-from-source) If you wish to compile ORY keto, install and set up [Go 1.10+](https://golang.org/) and add `$GOPATH/bin`to your `$PATH` as well as [golang/dep](http://github.com/golang/dep). The following commands check out the latest ORY keto's release tag, compile it and set up flags so that `keto version`works as expected. Please note that this will only work with a linux shell like bash or sh. ``` go get -d -u github.com/ory/keto cd $(go env GOPATH)/src/github.com/ory/keto keto_LATEST=$(git describe --abbrev=0 --tags) git checkout $keto_LATEST dep ensure -vendor-only go install \ -ldflags "-X github.com/ory/keto/cmd.Version=$keto_LATEST -X github.com/ory/keto/cmd.BuildTime=`TZ=UTC date -u '+%Y-%m-%dT%H:%M:%SZ'` -X github.com/ory/keto/cmd.GitHash=`git rev-parse HEAD`" \ github.com/ory/keto git checkout master keto help ``` Ecosystem --------- [](#ecosystem) [ ![ORY Security Console](docs/images/sec-console.png)](https://console.ory.sh/)### ORY Security Console: Administrative User Interface [](#ory-security-console-administrative-user-interface) The [ORY Security Console](https://console.ory.sh/) is a visual admin interface for ORY Hydra, ORY Oathkeeper, and ORY Keto. ### ORY Hydra: OAuth2 & OpenID Connect Server [](#ory-hydra-oauth2--openid-connect-server) [ORY Hydra](https://github.com/ory/hydra) ORY Hydra is a hardened OAuth2 and OpenID Connect server optimized for low-latency, high throughput, and low resource consumption. ORY Hydra is not an identity provider, which would include user sign up, user log in, password reset flow. Hydra but connects to your existing identity provider through a consent app. ### ORY Oathkeeper: Identity & Access Proxy [](#ory-oathkeeper-identity--access-proxy) [ORY Oathkeeper](https://github.com/ory/oathkeeper) is a BeyondCorp/Zero Trust Identity & Access Proxy (IAP) built on top of OAuth2 and ORY Hydra. ### Examples [](#examples) The [ory/examples](https://github.com/ory/examples) repository contains numerous examples of setting up this project and combining it with other services from the ORY Ecosystem. Security -------- [](#security) ### Disclosing vulnerabilities [](#disclosing-vulnerabilities) If you think you found a security vulnerability, please refrain from posting it publicly on the forums, the chat, or GitHub and send us an email to instead. Telemetry --------- [](#telemetry) Our services collect summarized, anonymized data which can optionally be turned off. Click [here](https://www.ory.sh/docs/guides/master/telemetry/) to learn more. ### Guide [](#guide) The Guide is available [here](https://www.ory.sh/docs/guides/master/keto/). ### HTTP API documentation [](#http-api-documentation) The HTTP API is documented [here](https://www.ory.sh/docs/api/keto?version=master). ### Upgrading and Changelog [](#upgrading-and-changelog) New releases might introduce breaking changes. To help you identify and incorporate those changes, we document these changes in [UPGRADE.md](./UPGRADE.md) and [CHANGELOG.md](./CHANGELOG.md). ### Command line documentation [](#command-line-documentation) Run `keto -h` or `keto help`. Backers ------- [](#backers) Thank you to all our backers! 🙏 \[[Become a backer](https://opencollective.com/ory#backer)\] [![](https://camo.githubusercontent.com/736dd7a8f4d2d2b3ec08f9839fb6a1316ae630dddd307787be9f1afda6bcccc0/68747470733a2f2f6f70656e636f6c6c6563746976652e636f6d2f6f72792f6261636b6572732e7376673f77696474683d383930)](https://opencollective.com/ory#backers) We would also like to thank (past & current) supporters (in alphabetical order) on [Patreon](https://www.patreon.com/_ory): Alexander Alimovs, Chancy Kennedy, Drozzy, Oz Haven, TheCrealm Sponsors -------- [](#sponsors) Sponsors support this project. The sponsor's logo or brand will show up here with a link to the website. \[[Become a sponsor](https://opencollective.com/ory#sponsor)\] [![](https://camo.githubusercontent.com/19928a45837b051e70a3d81719cb48d2a953a9221bc1072eab85fc6a0e66fe73/68747470733a2f2f6f70656e636f6c6c6563746976652e636f6d2f6f72792f73706f6e736f722f302f6176617461722e737667)](https://opencollective.com/ory/sponsor/0/website)[![](https://camo.githubusercontent.com/733f7aedca2397504f57fff9423aa43089b5e414fd45ed53a952d1cbbe3ef706/68747470733a2f2f6f70656e636f6c6c6563746976652e636f6d2f6f72792f73706f6e736f722f312f6176617461722e737667)](https://opencollective.com/ory/sponsor/1/website)[![](https://camo.githubusercontent.com/8aa916e0aee58f4d39d1c5dd489fe142b9b0315b3c9bbefee07a731b4d107e30/68747470733a2f2f6f70656e636f6c6c6563746976652e636f6d2f6f72792f73706f6e736f722f322f6176617461722e737667)](https://opencollective.com/ory/sponsor/2/website)[![](https://camo.githubusercontent.com/764df6eba4691261c27e64cc12e7894707cc8dc91abe4d9965e2744b39957186/68747470733a2f2f6f70656e636f6c6c6563746976652e636f6d2f6f72792f73706f6e736f722f332f6176617461722e737667)](https://opencollective.com/ory/sponsor/3/website)[![](https://camo.githubusercontent.com/5326281c3584fc9c5701e5b514bfabcc0bcc2c89de503147a957685d4de3d52f/68747470733a2f2f6f70656e636f6c6c6563746976652e636f6d2f6f72792f73706f6e736f722f342f6176617461722e737667)](https://opencollective.com/ory/sponsor/4/website)[![](https://camo.githubusercontent.com/6ab7532f209ce05a61bcf26f6e6950f903236a35995e931dfede6becdb61fdb4/68747470733a2f2f6f70656e636f6c6c6563746976652e636f6d2f6f72792f73706f6e736f722f352f6176617461722e737667)](https://opencollective.com/ory/sponsor/5/website)[![](https://camo.githubusercontent.com/744fce5d89156de660ddf444a31d3d734abacbd513d4dbf305c2c3ccb667a8a9/68747470733a2f2f6f70656e636f6c6c6563746976652e636f6d2f6f72792f73706f6e736f722f362f6176617461722e737667)](https://opencollective.com/ory/sponsor/6/website)[![](https://camo.githubusercontent.com/f5b99a7f2074f1083d9e7e9c6635d8e996f4d6fdf25b21a2d7320634163fe434/68747470733a2f2f6f70656e636f6c6c6563746976652e636f6d2f6f72792f73706f6e736f722f372f6176617461722e737667)](https://opencollective.com/ory/sponsor/7/website)[![](https://camo.githubusercontent.com/5df3420392d39f333e8430c605bf4389c349992bf5bf5c71691e6d55cabd5612/68747470733a2f2f6f70656e636f6c6c6563746976652e636f6d2f6f72792f73706f6e736f722f382f6176617461722e737667)](https://opencollective.com/ory/sponsor/8/website)[![](https://camo.githubusercontent.com/476e6e95afb1e2f3cc8db17079041abab55533e50dfe20b30fd78d916b9a06b2/68747470733a2f2f6f70656e636f6c6c6563746976652e636f6d2f6f72792f73706f6e736f722f392f6176617461722e737667)](https://opencollective.com/ory/sponsor/9/website) A special thanks goes out to **Wayne Robinson** for supporting this ecosystem with $200 every month since Oktober 2016 [on Patreon](https://www.patreon.com/_ory). ### Health Score 21 — LowBetter than 19% of packages Maintenance20 Infrequent updates — may be unmaintained Popularity8 Limited adoption so far Community15 Small or concentrated contributor base Maturity39 Early-stage or recently created project Bus Factor1 Top contributor holds 55.2% of commits — single point of failure How is this calculated?**Maintenance (25%)** — Last commit recency, latest release date, and issue-to-star ratio. Uses a 2-year decay window. **Popularity (30%)** — Total and monthly downloads, GitHub stars, and forks. Logarithmic scaling prevents top-heavy scores. **Community (15%)** — Contributors, dependents, forks, watchers, and maintainers. Measures real ecosystem engagement. **Maturity (30%)** — Project age, version count, PHP version support, and release stability. ### Community Maintainers ![](https://avatars.githubusercontent.com/u/8171056?v=4)[Hòa Nguyễn](/maintainers/hoanguyenmanh)[@hoanguyenmanh](https://github.com/hoanguyenmanh) --- Top Contributors [![arekkas](https://avatars.githubusercontent.com/u/45354970?v=4)](https://github.com/arekkas "arekkas (16 commits)")[![aeneasr](https://avatars.githubusercontent.com/u/3372410?v=4)](https://github.com/aeneasr "aeneasr (7 commits)")[![RomanMinkin](https://avatars.githubusercontent.com/u/1850909?v=4)](https://github.com/RomanMinkin "RomanMinkin (2 commits)")[![fredbi](https://avatars.githubusercontent.com/u/14262513?v=4)](https://github.com/fredbi "fredbi (1 commits)")[![sadysnaat](https://avatars.githubusercontent.com/u/13624472?v=4)](https://github.com/sadysnaat "sadysnaat (1 commits)")[![tacurran](https://avatars.githubusercontent.com/u/2030403?v=4)](https://github.com/tacurran "tacurran (1 commits)")[![zepatrik](https://avatars.githubusercontent.com/u/5354445?v=4)](https://github.com/zepatrik "zepatrik (1 commits)") ### Embed Badge ![Health badge](/badges/tikivn-hydra-keto/health.svg) ``` [![Health](https://phpackages.com/badges/tikivn-hydra-keto/health.svg)](https://phpackages.com/packages/tikivn-hydra-keto) ``` ### Alternatives [defuse/php-encryption Secure PHP Encryption Library 3.9k162.4M214](/packages/defuse-php-encryption)[roave/security-advisories Prevents installation of composer packages with known security vulnerabilities: no API, simply require it 2.9k97.3M6.4k](/packages/roave-security-advisories)[mews/purifier Laravel 5/6/7/8/9/10 HtmlPurifier Package 2.0k16.7M113](/packages/mews-purifier)[robrichards/xmlseclibs A PHP library for XML Security 41278.1M118](/packages/robrichards-xmlseclibs)[bjeavons/zxcvbn-php Realistic password strength estimation PHP library based on Zxcvbn JS 86917.5M63](/packages/bjeavons-zxcvbn-php)[enlightn/security-checker A PHP dependency vulnerabilities scanner based on the Security Advisories Database. 33732.2M110](/packages/enlightn-security-checker) PHPackages © 2026 [Directory](/)[Categories](/categories)[Trending](/trending)[Changelog](/changelog)[Analyze](/analyze)