Not sure where is best to ask this but I need some go tmpl h Ory Community #talk-oathkeeper

Not sure where is best to ask this - but I need so...

thousands-church-11419

02/09/2022, 4:27 PM

Not sure where is best to ask this - but I need some go tmpl help 😆 - I have two handlers in my ory config,

jwt

and

bearer_token

they both contain the same information, but in different places, given this example payload: https://gist.github.com/edude03/c6510914943a7542d71e46dd3cd5037e 1. How do I get the email address?

{{ .Extra.email or .Extra.identity.email }}

? 2. For the kratos payload, is there a nice way to get the email verified?

magnificent-energy-493

02/09/2022, 5:47 PM

2. Do I understand correctly: You want to have the email verified in Kratos without the user going through the flow?

thousands-church-11419

02/09/2022, 5:48 PM

No not at all 😆 well kind of. Firebase users have a JWT, and firebase has validated their email already in this case

thousands-church-11419

02/09/2022, 5:48 PM

Nothing to do with kratos

thousands-church-11419

02/09/2022, 5:48 PM

Or stepping back a bit - we already use oathkeeper to validate JWTs from firebase, and now we’re also going to accept kratos session tokens

thousands-church-11419

02/09/2022, 5:49 PM

Actually, REALLY what I want is two pipelines, a jwt pipeline and and kratos token pipeline, but oathkeeper doesn’t support that

thousands-church-11419

02/09/2022, 5:50 PM

Because, our apps expect a jwt, the firebase jwt already works, but the kratos token we need to use the bearer_token/id_token combo to get a JWT

magnificent-energy-493

02/10/2022, 9:04 AM

Could you use two oathkeeper instances to model two pipelines?

thousands-church-11419

02/19/2022, 7:51 PM

I ended up doing this yah

👍 1

6 Views