openapi: 3.2.0 info: contact: email: hi@ory.sh description: Documentation for all of Ory Oathkeeper's APIs. license: name: Apache 2.0 title: Ory Oathkeeper Decisions API version: '' tags: - name: Decisions paths: /decisions: get: description: '> This endpoint works with all HTTP Methods (GET, POST, PUT, ...) and matches every path prefixed with /decisions. This endpoint mirrors the proxy capability of ORY Oathkeeper''s proxy functionality but instead of forwarding the request to the upstream server, returns 200 (request should be allowed), 401 (unauthorized), or 403 (forbidden) status codes. This endpoint can be used to integrate with other API Proxies like Ambassador, Kong, Envoy, and many more.' operationId: decisions responses: '200': $ref: '#/components/responses/emptyResponse' '401': content: application/json: schema: $ref: '#/components/schemas/genericError' description: genericError '403': content: application/json: schema: $ref: '#/components/schemas/genericError' description: genericError '404': content: application/json: schema: $ref: '#/components/schemas/genericError' description: genericError '500': content: application/json: schema: $ref: '#/components/schemas/genericError' description: genericError summary: Access Control Decision API tags: - Decisions components: schemas: genericError: description: The standard error format properties: code: format: int64 type: integer details: items: additionalProperties: {} type: object type: array message: type: string reason: type: string request: type: string status: type: string type: object responses: emptyResponse: description: An empty response x-forwarded-proto: string x-request-id: string