106 lines
2.3 KiB
YAML
106 lines
2.3 KiB
YAML
- id: "ory:kratos:public"
|
|
upstream:
|
|
preserve_host: true
|
|
url: "http://kratos:4433"
|
|
strip_path: /.ory/kratos/public
|
|
match:
|
|
url: "http://oathkeeper:4455/.ory/kratos/public/<**>"
|
|
methods:
|
|
- GET
|
|
- POST
|
|
- PUT
|
|
- DELETE
|
|
- PATCH
|
|
authenticators:
|
|
- handler: noop
|
|
authorizer:
|
|
handler: allow
|
|
mutators:
|
|
- handler: noop
|
|
|
|
# - id: "ory:kratos-selfservice-ui-node:anonymous"
|
|
# upstream:
|
|
# preserve_host: true
|
|
# url: "http://kratos-selfservice-ui-node:4435"
|
|
# match:
|
|
# url: "http://oathkeeper:4455/<{error,recovery,verify,auth/*,**.css,**.js}{/,}>"
|
|
# methods:
|
|
# - GET
|
|
# authenticators:
|
|
# - handler: anonymous
|
|
# authorizer:
|
|
# handler: allow
|
|
# mutators:
|
|
# - handler: noop
|
|
|
|
# - id: "ory:kratos-selfservice-ui-node:protected"
|
|
# upstream:
|
|
# preserve_host: true
|
|
# url: "http://kratos-selfservice-ui-node:4435"
|
|
# match:
|
|
# url: "http://oathkeeper:4455/<{,debug,dashboard,settings}>"
|
|
# methods:
|
|
# - GET
|
|
# authenticators:
|
|
# - handler: cookie_session
|
|
# authorizer:
|
|
# handler: allow
|
|
# mutators:
|
|
# - handler: id_token
|
|
# errors:
|
|
# - handler: redirect
|
|
# config:
|
|
# to: http://127.0.0.1/auth/login
|
|
|
|
- id: "dashboard:anonymous"
|
|
upstream:
|
|
preserve_host: true
|
|
url: "http://dashboard:3000"
|
|
match:
|
|
url: "http://oathkeeper:4455/<{error,recovery,verify,auth/*,**.css,**.js}{/,}>"
|
|
methods:
|
|
- GET
|
|
authenticators:
|
|
- handler: anonymous
|
|
authorizer:
|
|
handler: allow
|
|
mutators:
|
|
- handler: noop
|
|
|
|
- id: "dashboard:protected"
|
|
upstream:
|
|
preserve_host: true
|
|
url: "http://dashboard:3000"
|
|
match:
|
|
url: "http://oathkeeper:4455/<{,uploads,downloads,payments,api,api/hello}>"
|
|
methods:
|
|
- GET
|
|
authenticators:
|
|
- handler: cookie_session
|
|
authorizer:
|
|
handler: allow
|
|
mutators:
|
|
- handler: id_token
|
|
errors:
|
|
- handler: redirect
|
|
config:
|
|
to: http://127.0.0.1/auth/login
|
|
|
|
- id: "accounts"
|
|
upstream:
|
|
preserve_host: true
|
|
url: "http://accounts:3000"
|
|
match:
|
|
url: "http://oathkeeper<{,:4455}>/<{user,user/**,track/**}>"
|
|
methods:
|
|
- GET
|
|
- POST
|
|
authenticators:
|
|
- handler: cookie_session
|
|
authorizer:
|
|
handler: allow
|
|
mutators:
|
|
- handler: id_token
|
|
errors:
|
|
- handler: json
|