Configure Oathkeeper Kratos and Hydra

[DZhurybida]

Is it possible to have more than one bearer_token authenticator?

I want to use Hydra and Kratos API flow, and they both use the Authentication header.

Some context: I want to use Hydra for Oath2, and Kratos API flow for e2e tests of API to create test users.

[Benehiko]

Hi @DZhuribeda

I believe this question is similar to this one #733

Just let me know if you require more assistance :)

[DZhurybida]

Hi, @Benehiko

Sorry for the late response, as I understand, I should be able to do something like that:

# Some Access Rule: access-rule-1.yaml
id: access-rule-1
# match: ...
# upstream: ...
authenticators:
# default config will be used to 
  - handler: bearer_token
# override config
  - handler: bearer_token
    config:
      check_session_url: https://some-non-default

Can you confirm that I correctly understand?

[Benehiko]

yes, inside your access rules you specify the override config.
The global defaults would be in your oathkeeper config.

[DZhurybida]

Ok, that you, I'lll try that

[vinckr]

Hey @DZhuribeda ,
Just checking if your problem was since resolved, have you had the change to try the suggestion out?
I will mark this as answered for now, but feel free to come back to the discussion any time.