Improved Resource Owner Password Credentials Grant

The Resource Owner Password Credentials (ROPC) grant now includes the Ory Identity ID in the sub claim, while the ext.username claim stores the username (if available). This enhancement ensures improved traceability and a more accurate mapping of identity data in the token structure. Additionally, token hooks now execute during both initial and refresh token issuance for ROPC flows, enabling further customization of token claims in the JWT strategy and during introspection. Read more in our documentation.