Hey guys, I want to use krakend.io API Gateway to enforce request level authorization. Krakend supports fetching the token from cookies with

cookie_key

parameter (https://www.krakend.io/docs/authorization/jwt-validation/), so I guess it must possible to make it work with Supertokens http-only cookies. Theoretically, I can pass

jwk_url

of Supertokens (https://supertokens.com/docs/passwordless/common-customizations/sessions/with-jwt/get-jwks-and-issuer) to Krakend and set

cookie_key

to

sAccessToken

to make it work. But the jwks endpoint in Supertokens is not available unless I turn on jwt in session recipe, is that right? Because I cannot fetch the jwks endpoint with my current setup where I did not enable jwt in Supertokens.

hey! Thats not possible at the moment without enabling JWT feature.

Thanks @rp_st ! I can wait 😄 Looking forward for that release:)

cool!