Hey everyone, I’m using Oathkeeper + Kratos to protect services and populate upstream requests with customer details using the hydrator and header mutator, which works great! Now, I need to extend this setup to enable API access for customers via Hydra using the client_credentials flow. My plan is to validate tokens with Hydra’s /admin/oauth2/introspect and retrieve client metadata from /admin/clients/{id} to populate requests. Does this approach make sense? I’m unsure if it can be done directly with Oathkeeper and Hydra since the hydrator uses POST requests, while Hydra’s client details endpoint requires GET. The formats don’t seem to align perfectly, and I wonder if I’ve missed something in the documentation.

could you use the token hook to set your data? that way oathkeeper remains ignorant 🤷