How can I have a hydrator change the path of the r...
# talk-oathkeeperw
white-cartoon-58880
06/28/2023, 5:09 PMHow can I have a hydrator change the path of the request dynamically ?
Is that possible ?
i
icy-manchester-83109
06/29/2023, 3:50 PMCan you give an example about what you would like to achieve?
w
white-cartoon-58880
06/29/2023, 7:24 PMim want to use oathkeeper as proxy for https://www.metabase.com/docs/latest/embedding/signed-embedding
And that requires you to put a signed JWT in the path.
But I dont want client to have the key to sign JWT itself, but client do have kratos session, which is a nice usecase for oathkeeper
i
icy-manchester-83109
06/29/2023, 8:19 PMThis is not possible with a hydrator. None of the pipeline handler modify the request url. The only area where that happens in the
upstreamicy-manchester-83109
06/29/2023, 8:21 PMIMHO, this is a very bad idea putting a jwt into a path.
1. a JWT may contain sensitive information, which will appear in any audit logs
2. if a JWT is used for authentication purposes, it will leak for the same reasons as well and depending on its ttl, may be misused.
icy-manchester-83109
06/29/2023, 9:04 PMRegardless of my opinion, there is currently no way achieving that with oathkeeper.
w
white-cartoon-58880
06/30/2023, 6:20 AMYeah, its weird choice by metabase, its not my choice, but thanks for answers!🙌
white-cartoon-58880
06/30/2023, 6:21 AMWill make a custom proxy then, maybe use decision endpoin
3 Views