Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

```log:
  level: debug
  format: json

serve:
  proxy:
    cors:
      enabled: true
      allowed_origins:
        - "*"
      allowed_methods:
        - POST
        - GET
        - PUT
        - PATCH
        - DELETE
      allowed_headers:
        - Authorization
        - Content-Type
      exposed_headers:
        - Content-Type
      allow_credentials: true
      debug: true

errors:
  fallback:
    - json
  handlers:
    json:
      enabled: true
      config:
        verbose: true

authenticators:
  anonymous:
    enabled: true
    config:
      subject: guest

  unauthorized:
    enabled: true

  noop:
    enabled: true

authorizers:
  allow:
    enabled: true

access_rules:
  repositories:
    - file:///etc/config/oathkeeper/oathkeeper_rules.yml

mutators:
  noop:
    enabled: true

  id_token:
    enabled: true
    config:
      issuer_url: <http://localhost:4455/>
      jwks_url: file:///etc/config/oathkeeper/jwks.json
      claims: '{"sub": "{{ print .Subject }}" }'```