Ory Oathkeeper Hello world
delegate authentication to the API Gateway level using Kratos and Oathkeeper




ory hydra plus oathkeeper
text
Run the Oathkeeper server mounting the configuration and rules file. client-credentials: enable
only the oauth2_client_credentials authenticator It seems the default
oauth2_client_credentials scope_strategy is exact token-introspection: enable only the
oauth2_introspection authenticatorBoth authenticators are enabled in the main config but
I'm experimenting using them one at a time enabling the desired rule$ docker run --rm \ --network hydra-oathkeeper \ --name oathkeeper-server \ -p 4455:4455 \ -p 4456:4456 \ -v $(pwd)/oathkeeper-config.yaml:/oathkeeper-config.yaml \ -v $(pwd)/AUTHENTICATOR_PER_RULE_FOLDER/rules.json:/rules.json \ oryd/oathkeeper:v0.38 \ --config /oathkeeper-config.yaml \ serveZero trust Network architecture
json
{
"authenticators": [
{
"handler": "oauth2_client_credentials",
"config": {
"required_scope": [
"dialogs"
]
}
}
]
}text
Oathkeeper client-credentials