I figured out what the issue was. The request had an Authorization header in it, which wouldn’t work with the ‘allow’ authorizer. I’ve ended up filtering that path out from the traefik middleware so it isn’t checked by oathkeeper.