Unable to override default config using updated config file at $HOME/.hydra.yaml

[TVenuMadhav]

Issue:

According to [latest] documentation,

If file $HOME/.hydra.yaml exists, it will be used as a configuration file which supports ....

I would like to get more clarifications as I am not able to reproduce this feature :|

I am able to set the configurations right using -c command (-c home/ory/.hydra.yaml)[here /home/ory is $HOME] or using env variables (TTL_ACCESS_TOKEN). Just not the default case :(

---

Steps to reproduce

I am currently running a containerized instance using oryd/hydra:v1.9.0-alpine image along with postgres db container.

The configuration for ttl.access_token is set to 10h
Reference :- https://www.ory.sh/hydra/docs/reference/configuration/

Here is the docker compose file:

version: '3'
services:
    db:
        image: postgres:10.6
        ports:
            - "5432:5432"
        environment:
            POSTGRES_USER: hydrauser
            POSTGRES_DB: hydradb
            POSTGRES_PASSWORD: hydrapass

    db-migrate:
        build:
            context: .
        image: my-hydra
        links:
            - db
        depends_on:
            - db
        restart: on-failure
        environment:
            DSN: postgres://hydrauser:hydrapass@db:5432/hydradb?sslmode=disable
        command: migrate sql -ye

    auth-service:
        image: my-hydra
        ports:
            - "9000:4444"
            - "9001:4445"
        links:
            - db
        depends_on:
            - db-migrate
        restart: on-failure
        environment:
            DSN: postgres://hydrauser:hydrapass@db:5432/hydradb?sslmode=disable
            SECRETS_SYSTEM: somesecretthatislongenough
            URLS_SELF_ISSUER: <https://localhost:9000/>
            URLS_CONSENT: <http://localhost:9020/consent>
            URLS_LOGIN: <http://localhost:9020/login>
        command: serve all

Here is the custom docker file

FROM oryd/hydra:v1.9.0-alpine

# Hydra configuration
COPY hydra.yaml /home/ory/.hydra.yaml

The sample hydra configuration hydra.yaml

ttl:
   access_token: 10h

Reproduction steps — What is the expected and actual behaviour?

1. I created a hydra client using admin api

curl --location --request POST '<https://localhost:9001/clients>' \
--header 'Content-Type: application/json' \
--data-raw '{
    "client_id": "1",
    "client_secret": "1234567",
    "grant_types": [
        "client_credentials"
    ],
    "token_endpoint_auth_method": "client_secret_post",
    "owner": "lol",
    "metadata": "{}",
    "redirect_uris": []
}'

2. and, made a request to the token endpoint for the client that was created,

curl --location --request POST '<https://localhost:9000/oauth2/token>' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Accept:  application/json' \
--data-urlencode 'client_id=1' \
--data-urlencode 'client_secret=1234567' \
--data-urlencode 'grant_type=client_credentials'

Got back the response:

{
    "access_token": "6rP900Si8lvenNScE9oKzjhtZCEPtkKdVXaTKhTwL44.yiN8R9lGdahDYjirWbaxa06PzcybKbKO05UpSLGw72s",
    "expires_in": 3599,
    "scope": "",
    "token_type": "bearer"
}

3. Here the token expires_in is supposed to be 35999 (10 hours) instead of 3599 (default: 1h)

[aeneasr]

The documentation is outdated there, you need to use the --config flag to specify where to load the config from. Sorry about that, it's often hard to find all the places we need to update things when behavior changes. Would you be up for a PR?

[TVenuMadhav]

Thanks for that quick follow up!

Ill update with the PR

[vinckr]

Hey @TVenuMadhav , just following up if there was any new developments from your side.
I will mark this as answered for now, but feel free to come back to the discussion any time.
Thanks a ton 🐝