Traefik and Ory Oathkeeper

This example shows an example of using Ory Oathkeeper with Traefik.

Overview

Request flow:

1. Request lands on Traefik
2. Traefik uses forwardauth to forward authentication to http://oathkeeper/decision API
3. cookie_sesion authentication checks authentication and returns request back to Traefik
4. Hydrator adds an additional header to the request
5. Traefik proxies request to hello service

For more information, please refer to the Ory Oathkeeper documentation.

Develop

Ory Oathkeeper Access Rules: access-rules.yml Ory Oathkeeper Configuration: oathkeeper.yml

Prerequisites

1. Docker
2. Traefik
3. Ory Oathkeeper

Run locally

git clone [email protected]:ory/examples
cd examples/oathkeeper/07-traefik-decision
docker-compose up --build

1. Wait for a couple of seconds and open http://127.0.0.1:8080/hello.
2. Sign up for a new account.
3. Open http://127.0.0.1:8080/hello again.

Contribute

Feel free to open a discussion to provide feedback or talk about ideas, or open an issue if you want to add your example to the repository or encounter a bug. You can contribute to Ory in many ways, see the Ory Contributing Guidelines for more information.