I just noticed, that some documentation and quickstart files are not up to date regarding the configuration of

kratos-selfservice-ui-node

. From what I have found, all the specific oathkeeper/JWT related features have been removed from

kratos-selfservice-ui-node

in v0.8. What I think should be changed: • Still some references to now unused environment variables (

BASE_PATH

,

SECURITY_MODE

,

JWKS_URL

) in

README.md

,

quickstart-standalone.yml

,

quickstart-oathkeeper.yml

and maybe other documentation. • The Zero Trust with IAP Proxy guide describes the ID Token Mutator, which actually is not used by the

SecureApp

. While a description is probably useful as this is a common use case, I would clarify that this is not used by the actual sample implementation of

SecureApp

. I'm happy to help fixing this stuff and just wanted to check if it is best just to create pull requests in all the affected repos (

ory/kratos

,

ory/kratos-selfservice-ui-node

,

ory/docs

) or if you maybe have some plans regarding the JWT feature in the node.js example?

Hello Daniel, thanks for looking into that. The node example is probably our oldest and could certainly take an update! If you have the bandwidth for it, opening a PR would be great. I don’t think we will add the oathkeeper functionality again soon, just to be sure @high-optician-2097 can you confirm this?

Nice find - yes it makes sense to update these sections 🙂 And PRs are very welcomed!

Hello guys I want to ask regarding this thread. So the documentation said there will be an Authorization bearer token if I follow the step of this doc is not true? Since i have follow the docs but can find any authorization token in my HTTP header