https://www.ory.sh/ logo
#talk-oathkeeper
Title
# talk-oathkeeper
t

tall-angle-41306

04/11/2022, 10:39 AM
Question for the wider Ory community on Oathkeeper Rules. I'm curious how others are structuring your rules - Do you have generic catch-all rules, or are you having to be quite explicit in your rules for all endpoints?
h

helpful-keyboard-62948

04/11/2022, 2:48 PM
From my own experience so far, the nature of how the rules are defined sort of prevents catch-all rules in any meaningful sense. I'd love to have generic rules that are overridden by more restrictive rulesets as necessary, but I can't do that since there is a lack of prioritization and a no-conflict policy when it comes to defining endpoint matches.