Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi <@U054R6E8MCZ>

hmm, I don't have any knowledge/experience of envoy's `checkRequest`, but we do support grpc.
<https://www.ory.sh/docs/keto/reference/proto-api#table-of-contents>

it would be fairly simple to write a wrapper that does the checks though
we currently don't support it, but might later

<@U01MTU9E4CF> I would have expect that it would be an equivalent to `/decisions` ? Or maybe I’m misunderstanding something here.

<@U010UKXCPP0> Just to make sure I follow what you mean. Build a gRPC service taking in the checkRequest supported by envoy and then call the Ory http api on `/decisions`?

I found this related issue: <https://github.com/ory/oathkeeper/issues/560>

you could use Oathkeeper (decisions), or build your own pipeline of session &amp; permission checks in your gRPC service

the decision api is not available on ory network

<@U054R6E8MCZ> we have a support contract that we can use for this feature would we set up a call tomorrow to discuss? <mailto:thomas@ory.sh|thomas@ory.sh>