Hi Guys , I'm using oathkeeper for authentications , while hiting api through postman without cookies, getting the this response on terminal,
{"audience":"application","error":{"debug":"","message":"Access credentials are invalid","reason":"","status":"Unauthorized","status_code":401},"granted":false,"http_host":"192.168.0.43:4456","http_method":"GET","http_url":"http://192.168.0.43:4456/api/house-pionter/graphql","http_user_agent":"PostmanRuntime/7.29.2","level":"info","msg":"Access request denied","service_name":"ORY Oathkeeper","service_version":"v0.38.25-beta.1","time":"2022-09-09T095900Z"}
oathkeeper_1 | {"code":401,"debug":"","details":{},"error":"Access credentials are invalid","level":"error","msg":"An error occurred while handling a request","reason":"","request-id":"","status":401,"time":"2022-09-09T095900Z","writer":"JSON"}
but the problem is request is passing to the backend and getting 200 responses.,
access rule define :
- id: "ory
ms identitiesprotected"
match:
url: "*
http://192.168.0.40:4456/api/house-pionter*<**>"
methods:
- GET
- POST
- PUT
- DELETE
- PATCH
authenticators:
- handler: cookie_session
authorizer:
handler: remote_json
mutators:
- handler: id_token
errors:
- handler: redirect
config:
to:
http://192.168.0.43:8000/forbidden
and in oathkeeper
authenticators:
anonymous:
enabled: true
config:
subject: guest
cookie_session:
enabled: true
config:
check_session_url:
http://kratos:4433/sessions/whoami
preserve_path: true
extra_from: "@this"
subject_from: "identity.id"
only:
- ory_kratos_session
please, anyone, help to come out from this issue?