How to write database adapter for specific database?

[ahmed-yasen-va]

I want to make hydra support the aerospike database but I couldn't find any documentation for writing a database adapter.

[aeneasr]

We no longer support custom adapters due to the complexity involved. Writing your own adapter is a bad idea:

This topic has come up time and time again, the original plugin interface was written to support a certain use case we no longer support.

Writing your own database adapter is a very bad idea and serious security issue because:

1. Our internal interfaces change often, at least with every schema change. Writing your own adapter means in 99.9% of the cases that you will stay with the version your adapter works for. This is, for obvious reasons, terrible.
2. The SQL datastore supports advanced logic such as ON CASCADE statements that are necessary to implement certain security-related workflows such as properly removing a chain of tokens when one of them is being revoked or a client is deleted or consent is withdrawn. We obviously have some tests for that in place internally, but not all of them are exposed and they also change depending on internal schedules.

Most "we want to roll our own adapter" boil down to statements such as: "well we use (insert k/v, document datastore here) and we don't want to operate another system". If that's the reason you want to implement a new datastore - don't. It's riskier, more work, and more longterm maintenance to keep everything up to date than it is to just spin up a Google Cloud SQL or Amazon RDS instance, and way, way more secure.

ORY Hydra is a piece of software that needs a proper SQL datastore with consistency guarantees. Neither a k/v nor a document store can acomodate that. Unless you're trying to add something like MariaDB or some other SQL language (hopefully not Oracle) it's an absolute no-no anyways!

In conclusion, we will not change this and will most likely deprecate plugins alltogether at some point.

[aeneasr]

A fork is an option, but honestly, writing your own DBAL for ORY Hydra is an extremely bad idea. I have explained why in this issue comment: #1627 (comment)

[isra270]

thank you @aeneasr for clarify.

[ahmed-yasen-va]

Thanks for your answer, but I have to build a custom db adapter, so If there is a way please tell us how.
@aeneasr
@zepatrik

[aeneasr]

No there is not and never will be.

[isra270]

@aeneasr can you recommend authorization server support Aerospike to use it instead of build own Adapter in hydra authorization server?