Ory Oathkeeper Hello world

delegate authentication to the API Gateway level using Kratos and Oathkeeper

Ory Oathkeeper Hello world
Ory Oathkeeper Hello world
Architecture of Authentication
Architecture of Authentication
Ory Oathkeeper Hello world

ory hydra plus oathkeeper

text
Run the Oathkeeper server mounting the configuration and rules file.    client-credentials: enable
only the oauth2_client_credentials authenticator        It seems the default
oauth2_client_credentials scope_strategy is exact    token-introspection: enable only the
oauth2_introspection authenticatorBoth authenticators are enabled in the main config but
I'm experimenting using them one at a time enabling the desired rule$ docker run --rm \  --network hydra-oathkeeper \  --name oathkeeper-server \  -p 4455:4455 \  -p 4456:4456 \  -v $(pwd)/oathkeeper-config.yaml:/oathkeeper-config.yaml \  -v $(pwd)/AUTHENTICATOR_PER_RULE_FOLDER/rules.json:/rules.json \  oryd/oathkeeper:v0.38 \  --config /oathkeeper-config.yaml \  serve

Zero trust Network architecture

json
{
  "authenticators": [
    {
      "handler": "oauth2_client_credentials",
      "config": {
        "required_scope": [
          "dialogs"
        ]
      }
    }
  ]
}
text
Oathkeeper  client-credentials