Stating that RFC 7231 Section 4.1 does not limit HTTP method and defines it as
method = token
what are the reasons of restricting the available http methods in oathkeeper?
This kind of restrictions prevents not only custom methods, but also WebDAV methods and an application exposing a COPY or MKCOL actions cannot work with oathkeeper.
The only workaround is to call the decisions api faking the method of the request.