Login and consent challenges time out, but I haven't found a way to determine if this has happened

After being redirected to the login and consent pages, you're given a login/consent challenge. After the user has somehow authenticated himself, the login/consent session is accepted to hydra with the given login/consent challenge. However, if this takes too long (I believe it's a 10 minute ti

Is your feature request related to a problem? Please describe.

The public key-based request signing functionality added to sso_proxy in buzzfeed/sso#106 is undocumented. In particular, it's not immediately obvious how to a) generate an appropriate keypair or b) validate a signed request in an upstream service.

Describe the solution you'd like

New documenta

Describe the bug

I think this is a similar problem than what was already reported in ory/fosite#434, but elsewhere in the code. I believe all calls to url.QueryUnescape should be removed from the code. Go already escapes all query/form parameters automatically and unescaping again can just break things.

Example:

func GetRedirectURIFromRequestValues(value

Not seeing how I'd be able to do that. the step certificate create -csr seems to expect to create a new private key