c60cc7ca75
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped
89 lines
1.5 KiB
YAML
89 lines
1.5 KiB
YAML
log:
|
|
level: debug
|
|
format: json
|
|
|
|
serve:
|
|
proxy:
|
|
cors:
|
|
enabled: true
|
|
allowed_origins:
|
|
- "*"
|
|
allowed_methods:
|
|
- POST
|
|
- GET
|
|
- PUT
|
|
- PATCH
|
|
- DELETE
|
|
allowed_headers:
|
|
- Authorization
|
|
- Content-Type
|
|
exposed_headers:
|
|
- Content-Type
|
|
allow_credentials: true
|
|
debug: true
|
|
|
|
errors:
|
|
fallback:
|
|
- json
|
|
|
|
handlers:
|
|
redirect:
|
|
enabled: true
|
|
config:
|
|
to: http://127.0.0.1:4455/login
|
|
when:
|
|
-
|
|
error:
|
|
- unauthorized
|
|
- forbidden
|
|
request:
|
|
header:
|
|
accept:
|
|
- text/html
|
|
json:
|
|
enabled: true
|
|
config:
|
|
verbose: true
|
|
|
|
access_rules:
|
|
matching_strategy: glob
|
|
repositories:
|
|
- file:///etc/config/oathkeeper/access-rules.yml
|
|
|
|
authenticators:
|
|
anonymous:
|
|
enabled: true
|
|
config:
|
|
subject: guest
|
|
|
|
cookie_session:
|
|
enabled: true
|
|
config:
|
|
check_session_url: http://kratos:4433/sessions/whoami
|
|
preserve_path: true
|
|
extra_from: "@this"
|
|
subject_from: "identity.id"
|
|
only:
|
|
- ory_kratos_session
|
|
|
|
noop:
|
|
enabled: true
|
|
|
|
authorizers:
|
|
allow:
|
|
enabled: true
|
|
|
|
mutators:
|
|
noop:
|
|
enabled: true
|
|
|
|
id_token:
|
|
enabled: true
|
|
config:
|
|
issuer_url: http://127.0.0.1:4455/
|
|
jwks_url: file:///etc/config/oathkeeper/id_token.jwks.json
|
|
claims: |
|
|
{
|
|
"session": {{ .Extra | toJson }}
|
|
}
|