Ory Oathkeeper

A cloud native Identity & Access Proxy / API (IAP) and Access Control Decision API that authenticates, authorizes, and mutates incoming HTTP(s) requests. Inspired by the BeyondCorp / Zero Trust white paper. Written in Go. (by ory)

Ory Oathkeeper Alternatives

Similar projects and alternatives to Ory Oathkeeper

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a better Ory Oathkeeper alternative or higher similarity.

Ory Oathkeeper reviews and mentions

Posts with mentions or reviews of Ory Oathkeeper. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-03-16.
  • Launch HN: PropelAuth (YC W22) – End-to-end auth service for B2B products
    2 projects | news.ycombinator.com | 16 Mar 2022
  • oathkeeper alternatives - emissary, envoy, and Nginx
    4 projects | 18 Jan 2022
  • Launch YC S21: Meet the Batch, Thread #4
    3 projects | news.ycombinator.com | 5 Aug 2021
  • The reason okta spent $6.5B Auth0
    3 projects | news.ycombinator.com | 5 Mar 2021
    Hydra feels mature. I think it's their longest-developed product so far. Besides breaking changes during big upgrades(v0 -> v1beta -> v1), everything has been painless:

    - It runs anywhere with or without containers

    - API makes sense, good SDKs are available in all my used languages

    - RAM usage is surprisingly low compared to usage and has been great for resource-constrained environments

    - Stateless means horizontal scaling is as easy as `replicas++`

    - Sub-millisecond response times for some calls, much faster than our previous setup

    With Hydra, I know it's the client's fault when OAuth calls fail and not just a buggy server implementation. This is reinforced in dev mode with great errors like:

    - The authorization code has already been used

    - The request is missing the response_type parameter

    - Parameter "nonce" must be set when using the implicit flow

    - Redirect URL "https://example.com/callback" does not match

    On the flipside, Oathkeeper is not a mature product and has not yet reached v1. There are breaking changes planned [1]. It lacks support for at least one popular usecase (mine) out of the box [2]. Rules can be hard to create and debug. I wouldn't recommend Oathkeeper in its current state unless you're ready to dive in and fix things yourself. Once configured it sticks with the Ory trend: fast, lean, and stable.

    Depending on your usecase, Oathkeeper could be swapped out with any IAP like Pomerium or just with your reverse proxy's auth request support + some small custom shim.

    I haven't tried Keto (access control) or Kratos (user management) yet. Kratos is on my todo list.

    [1] https://github.com/ory/oathkeeper/issues/441

  • A note from our sponsor - SaaSHub
    www.saashub.com | 25 Apr 2024
    SaaSHub helps you find the best software and product alternatives Learn more →

Stats

Basic Ory Oathkeeper repo stats
4
3,164
7.1
10 days ago

Sponsored
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com