ory / oathkeeper

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go.
https://www.ory.sh/?utm_source=github&utm_medium=banner&utm_campaign=hydra
Apache License 2.0
3.2k stars 349 forks source link

Implement a `delegate` authenticator #1152

Open yunier-sc opened 4 months ago

yunier-sc commented 4 months ago

Preflight checklist

Ory Network Project

No response

Describe your problem

A long debate has been around the behaviour of noop authentication since some changes were introduced in commit 6f8ab4f7d. Changing the behaviour of such an authenticator now to the previous one must be considered breaking change and therefore, hard to do.

Describe your ideal solution

A possible solution could be to implement a new authenticator called delegate that implements the old behaviour of noop. This way, we ensure systems in production don't start breaking and users interested in having the old behaviour can still use it.

Workarounds or alternatives

Non that I'm aware of 😞

Version

v0.40.6

Additional Context

No response