Error Testing sample JWT validation authenticator

ORY Oathkeeper
#1

Im using the config in the docs : https://www.ory.sh/oathkeeper/docs/pipeline/authn to setup a simple JWT validator but it is giving the error ?

‘The matched rule uses a feature which is not enabled in the server configuration’

Note I have added spaces in the config below in the URLs as i cannot add URLs to this post as a new user.

The server config section for jwt is ;

jwt:
# Set enabled to true if the authenticator should be enabled and false to disable the authenticator.
enabled: true

config:
  jwks_urls:
    - http ://x.x.x.x:8080/auth/realms/Developer/protocol/openid-connect/certs
  scope_strategy: none
  required_scope:
    - profile
    - email
  target_audience:
    - account 
  trusted_issuers:
    - http ://x.x.x.x:8080/auth/realms/Developer
  allowed_algorithms:
    - RS256
  token_from:
    header: Authorization
    # or
    # query_parameter: auth-token
    # or
    # cookie: auth-token

And the simple rule is ;

{
“id”: “standard-jwt”,
“upstream”: {
“url”: “https ://httpbin.org/anything/header”
},
“match”: {
“url”: “http ://<127.0.0.1|localhost>:4455/auth/jwt”,
“methods”: [
“GET”
]
},
“authenticators”: [{
“handler”: “jwt”,
“config”: {
“required_scope”: [“profile”],
“target_audience”: [“account”],
“trusted_issuers”: [“http ://x.x.x.x:8080/auth/realms/Developer”]
}
}],
“authorizer”: { “handler”: “allow” },
“mutators”: [{ “handler”: “noop” }]
}

–
Seems so simple - how can I get more info from oathkeeper on the issue ?

#2

It was a simple config change - the scope strategy had been set default none …

Corrected by

scope_strategy: exact

Now the rule works

#3

Glad you were able to figure it out! If you have any ideas how to improve the docs there please make suggestions :slight_smile: