Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

When the mutator `hydrator` returns a 401, oathkeeper is propagating this error as `500 internal server error`, is this really the expected behavior?

should be `Bad gateway` probably :thinking_face:

Feels like this should be configurable. Im working with a scenario where we put mappings in this hydrator, and if the mapping is missing, we want to return a 401 since the mapping is missing rather than a 5xx code that implies something else

I suggest opening an issue and discussing it there

Alright, thanks for the quick answer :+1: