Is there any way to make Keto display the requested relation tuples received via HTTP POST?

what do you mean by display? you can GET them again

I'm sorry, I meant logging the requested relation tuples. I'm trying to debug the problem I posted in #oathkeeper but I don't know yet how to find out which relation tuple Oathkeeper sends to Keto as part of the authorization request. When setting

log_level=debug

and

leak_sensitive_information=true

in the global Keto config it only tells me the authorization is forbidden but not based on which checked relation tuple.

ah I see... it should log it when using the GET check API, because then the params are in the URL query

Yep! Since

remote_json

seems to only support HTTP POST I dont think theres any other way but to directly capture network traffic. And that seems inconvenient