Is your feature request related to a problem? Please describe.

When Hydra receives a request with a token that is no longer valid, it logs an error with what appears to be debug output:

{"debug":"Token is expired","description":"Token expired","error":"token_expired","hint":"The token expired.","level":"error","msg":"An error occurred","time":"2020-08-28T20:14:40Z"}

At high lo

Is your feature request related to a problem? Please describe.

The public key-based request signing functionality added to sso_proxy in buzzfeed/sso#106 is undocumented. In particular, it's not immediately obvious how to a) generate an appropriate keypair or b) validate a signed request in an upstream service.

Describe the solution you'd like

New documenta

If I am correct then currently no (prometheus) metrics are provided.

Was wondering what is the reason? Is there is any plan to implement them?

I know I would like to see some metrics about how many users are authenticated, how many redirected to 'login' page, for how many authentication fails etc

Not seeing how I'd be able to do that. the step certificate create -csr seems to expect to create a new private key