Hey, I ran into an issue where the Oathkeeper decisions API endpoint discards the query string completely from

X-Forwarded-Uri

, resulting in authenticators relying on

token_from.query_parameter

not working. I have created an issue and a pull request with a fix. https://github.com/ory/oathkeeper/issues/1264 https://github.com/ory/oathkeeper/pull/1265

thanks, actually, we have some conflicting changes just coming up, but we'll take a look a bit later