I've downloaded the hydra binary following the installation doc:

ory/hydra info checking GitHub for latest tag
ory/hydra info found version: 1.7.4 for v1.7.4/linux/64-bit
ory/hydra info installed ./bin/hydra

When executing hydra serve the returned help includes the following bits:

## Configuration

ORY Hydra can be configured using environment variables as well as a c

Is your feature request related to a problem? Please describe.

The public key-based request signing functionality added to sso_proxy in buzzfeed/sso#106 is undocumented. In particular, it's not immediately obvious how to a) generate an appropriate keypair or b) validate a signed request in an upstream service.

Describe the solution you'd like

New documenta

Describe the bug

I think this is a similar problem than what was already reported in ory/fosite#434, but elsewhere in the code. I believe all calls to url.QueryUnescape should be removed from the code. Go already escapes all query/form parameters automatically and unescaping again can just break things.

Example:

func GetRedirectURIFromRequestValues(value

Not seeing how I'd be able to do that. the step certificate create -csr seems to expect to create a new private key