fix(auth): admit Loki service JWTs #41
Loading…
Reference in a new issue
No description provided.
Delete branch "fix/loki-jwt-api"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Loki does not need browser identity headers. Use the no-op mutator so valid short-lived service JWTs can query the Loki API without an Oathkeeper template error. The repository contract proves both browser and JWT authenticators remain enabled.