ory/oathkeeper

Issues

• Oathkeeper: adding additional info to oathkeeper info logs

  #1205 opened 18 days ago by DenisPnko
  0

• Authenticator: Bearer_token w. "query_parameter" selector consumes request body

  #1105 opened 18 days ago by marbergq
  2

• Configuration reference isn't displayed at ory.sh

  #1190 opened 18 days ago by renom
  1

• Option strip_path is ignored by .MatchContext.URL.Path

  #1204 opened 20 days ago by renom
  0

• insecure_skip_verify for upstream

  #1201 opened a month ago by wei840222
  0

• Oathkeeper reverse proxy continuous high memory utilization

  #1186 opened 3 months ago by DenisPnko
  1

• Oathkeeper docker-compose.yml outdated env vars

  #1164 opened 7 months ago by cerealkill
  1

• Multiple matching rules are causing 500

  #1196 opened 2 months ago by krukowskid
  0

• Multiple authorizers

  #1194 opened 2 months ago by renom
  0

• Upgrade Oathkeeper helm chart 0.41 causes 503

  #1165 opened 2 months ago by WoodyWoodsta
  9

• This request object uses unsupported signing algorithm "EdDSA"

  #1191 opened 3 months ago by taisph
  0

• upstream reference closed: github.com/GoogleContainerTools/distroless/issues/1342

  #1132 opened 3 months ago by github-actions
  1

• Allow/deny `remote(_json)` authorizers depending response content

  #1125 opened 4 months ago by David-Wobrock
  2

• Decision API is not respecting the token_from config

  #1144 opened a year ago by osbornk
  1

• Upgrade 'go-swagger/go-swagger' to avoid build error.

  #1179 opened 4 months ago by HappyHacker123
  6

• Authorizer "remote" throws exception "invalid Read on closed Body" if request body is present in request

  #1136 opened 3 months ago by denysandriyanov
  14

• Allow for easily matching rules using path prefixes

  #1089 opened 4 months ago by davidspek
  8

• Oathkeeper duplicates CORS headers

  #1100 opened 2 years ago by kamilkloch
  6

• Configure JWT authenticator not to logging sensitive data

  #1115 opened a year ago by StanislavStefanov
  3

• Oathkeeper returns a 401 "Access credentials are invalid" when exceeding Ory Network's rate limiting on /sessions/whoami endpoint

  #1167 opened 7 months ago by wewelll
  2

• Git as a repository for access rules & granularity: check against specific ingress against specific accessrule files

  #1154 opened 9 months ago by qdrddr
  2

• cookie_session authenticator does not extract subject when method is HEAD

  #1172 opened 5 months ago by DrDobbY
  0

• "any" matching option for "required_scope" in JWT authenticator

  #1129 opened a year ago by damianpietruszewski
  2

• Implement a `delegate` authenticator

  #1152 opened 10 months ago by yunier-sc
  0

• Oathkeeper does not support X-Forwarded headers properly

  #1139 opened a year ago by eratolekov
  4

• Match response body in remote_json authorizer

  #1169 opened 6 months ago by jaspeen
  0

• Oathkeeper bombards Ory Network with requests after upgrade to 40.x

  #1161 opened 8 months ago by Withel
  15

• Support distributed cache access token when introspection

  #1082 opened 8 months ago by tinhtn1508
  1

• Oathkeeper returns encoded cookie

  #1158 opened 8 months ago by c0d3rm0n
  0

• Duplicate requests using decisions endpoint via NGINX

  #1156 opened 9 months ago by karlis-vagalis
  0

• Watch rules changes on remote repositories

  #1072 opened 9 months ago by emmanuelgautier
  1

• `strip_path` strips the prefix from the final upstream request, not the initial request

  #1085 opened 2 years ago by syserr0r
  2

• None of the provided URLs returned a valid JSON Web Key Set

  #1151 opened 10 months ago by adriano-di-giovanni
  1

• Outdated OTEL dependencies prevent import

  #1148 opened a year ago by nico151999
  0

• Reference to .MatchContext.RegexpCaptureGroups doesn't render in access rules authenticator config

  #1141 opened a year ago by sunnyyip
  0

• Custom bearer token not redacted

  #1081 opened 2 years ago by SkypLabs
  1

• X-Forwarded headers missing from oauth2-client-credentials authenticator request on v.0.40.3, breaking hydra TLS termination

  #1102 opened a year ago by mathportillo
  1

• Basic Authorization header result in Unauthorized when using `anonymous` authenticator handler

  #1137 opened a year ago by sayoun
  0

• Docs wrong for `bearer_token` Subject default location

  #1130 opened a year ago by logan-hcg
  0

• Observed memory leak in v0.40.3

  #1112 opened a year ago by shoujun
  4

• Allow API key pre-authorization in oauth2_introspection authenticator

  #1126 opened a year ago by marcinfigiel
  2

• Leak sensitive secrets option not working

  #1067 opened a year ago by SkypLabs
  9

• Regex path matching isn't working.

  #1095 opened 2 years ago by KieronWiltshire
  10

• Unable to initialize Tracer.

  #1066 opened 2 years ago by KieronWiltshire
  4

• The ability to pass oauth scopes to the application layer without having to write checks on every route.

  #1088 opened 2 years ago by KieronWiltshire
  2

• Issue with Oathkeeper authenticator oauth_introspection

  #1078 opened 2 years ago by dblane-digicatapult
  1

• Your documentation doesn't work

  #1076 opened 2 years ago by oneacik
  1

• No response for reported security issue for a month

  #1071 opened 2 years ago by viters
  4

• 0.40.1 does not build on macos

  #1068 opened 2 years ago by radekg
  1

• Middleware initializes pgx/v4

  #1064 opened 2 years ago by rlorca
  1