Hacker News new | ask | show | jobs
by zvolsky 36 days ago
Hey, Grant here - I wrote most of the 2.0 migration code together with Aeneas. Thank you for the writeup team Cloudflare!

> After investigation, we discovered that there was an issue in one of the Hydra migrations that corrupted the state of certain valid OAuth sessions, which resulted in the migration marking them as invalid.

Was this one of the open source migration files? While I'm no longer involved in the project, I'd be curious to know if it's been addressed upstream.