front-proxy-opa

nerdctl compose up

curl -s http://localhost:9901/config_dump

curl -v http://localhost:8080/index.html

< HTTP/1.1 401 Unauthorized

curl -v -H 'Authorization: Bearer <ID TOKEN>' http://localhost:8080/

< HTTP/1.1 403 Forbidden

curl -v -H 'Authorization: Bearer <ID TOKEN>' http://localhost:8080/index.html

< HTTP/1.1 200 OK

Resources

• Envoy Docs
  • JWT Authentication
  • External Authorization
• Open Policy Agent Docs
  • ENVOY