For browny bonus points, I've looked at other proxy services like Pomerium, Envoy, and Kong, but none have exactly what I need, mainly the OAuth2 introspection authenticator. Kong has a similar one, but it bugs out. None of the other competitors offer this without writing custom http filters.