Hi, maybe a dump question, but we are using Ory Kratos for User Management, I would like to secure one of our API, with Oathkeeper in NestJS, we are planning to generate access tokens to user and than they can call the mentioned API with that toke. There is any examples for these type of usage? Is this a valid usecase?

Hi Levente I guess you could try

# Global configuration file oathkeeper.yml
authenticators:
  bearer_token:
    # Set enabled to true if the authenticator should be enabled and false to disable the authenticator. Defaults to false.
    enabled: true

    config:
      check_session_url: <https://session-store-host>
      token_from:
        header: Custom-Authorization-Header
        # or
        # query_parameter: auth-token
        # or
        # cookie: auth-token

Okey, I'm confused a little bit, what'll the session store host?

See the Oathkeeper examples here as well: https://github.com/ory/examples

So session store will be Kratos..

So session store will be Kratos..

it depends 🙂 You can have the custom one as well.

Its okey, but I don't really know, what is session store in this context