Hi all! Is it possible to setup access rules such that we have the same URL for guest user (non-logged in user) and logged in user and oathkeeper can pass certain header(s) to the backend to return different data based on the header? I am using kratos for authentication if that helps

Hello. What kind of data do you expect to receive in both cases? Maybe I can help you with the configuration

Backend can decide that based on whether user is logged in or not. For example, a content will have a preview mode if user is not logged in, but if logged in, they can see the full content

Okay. Here’s the example of configuration cookie_session with header mutator. You can check presence of

X-User

on your backend

But how will it work in both cases at the same time?

Hey. I’ll try to create a sample configuration later today

That'd be awesome. Thank you

X-User: 3c9d432f-624c-466e-840e-c5500ea37da7

That’s for authenticated user. Works fine on the backend. here’s an example for unauthenticated user:

X-User: guest

configuration example

Thank you so much. That is exactly what I'm looking for I think. I will test it on our setup. Really appreciate taking time to do this.