Ory Oathkeeper regex doesn't work when trying to match full URLs.

[KieronWiltshire]

When trying to use full regex like the one provided below, the response is 404 "does not match any rules."

[
    {
      "id": "account:protected",
      "upstream": {
        "preserve_host": true,
        "url": "http://host.docker.internal:80",
        "strip_path": "/api/account"
      },
      "match": {
        "url": "<(http|https):\/\/([w-]+(.[w-]+)*|[d.]+)(:d+)?\/api\/account(/.*|\\?.*)?>",
        "methods": ["GET", "POST" ,"PUT", "DELETE", "PATCH"]
      },
      "authenticators": [{
        "handler": "cookie_session"
      }, {
        "handler": "oauth2_introspection"
      }, {
        "handler": "anonymous"
      }],
      "authorizer": {
        "handler": "allow"
      },
      "mutators": [{
        "handler": "id_token"
      }],
      "errors": [{
        "handler": "json"
      }]
    }
  ]

However, changing the regex rule to something like http://localhost:4455<\/api\/account(/.*|\\?.*)?> sort of works... well Oathkeeper says it works, but I still get the same response. Here are the logs:

2023-04-16 22:19:17 time=2023-04-16T21:19:17Z level=info msg=started handling request http_request=map[headers:map[accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding:gzip, deflate, br accept-language:en-GB,en-US;q=0.9,en;q=0.8 cache-control:max-age=0 connection:keep-alive sec-ch-ua:"Chromium";v="112", "Google Chrome";v="112", "Not:A-Brand";v="99" sec-ch-ua-mobile:?0 sec-ch-ua-platform:"Windows" sec-fetch-dest:document sec-fetch-mode:navigate sec-fetch-site:none sec-fetch-user:?1 upgrade-insecure-requests:1 user-agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36] host:localhost:4455 method:GET path:/api/account query:<nil> remote:172.26.0.1:36986 scheme:http]
2023-04-16 22:19:18 time=2023-04-16T21:19:18Z level=info msg=started handling request http_request=map[headers:map[accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding:gzip, deflate, br accept-language:en-GB,en-US;q=0.9,en;q=0.8 authorization:Value is sensitive and has been redacted. To see the value set config key "log.leak_sensitive_values = true" or environment variable "LOG_LEAK_SENSITIVE_VALUES=true". cache-control:max-age=0 connection:close content-length:0 sec-ch-ua:"Chromium";v="112", "Google Chrome";v="112", "Not:A-Brand";v="99" sec-ch-ua-mobile:?0 sec-ch-ua-platform:"Windows" sec-fetch-dest:document sec-fetch-mode:navigate sec-fetch-site:none sec-fetch-user:?1 upgrade-insecure-requests:1 user-agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 x-forwarded-for:172.26.0.1] host:localhost:4455 method:GET path:/ query:<nil> remote:172.26.0.1:36990 scheme:http]
2023-04-16 22:19:18 time=2023-04-16T21:19:18Z level=warning msg=Access request denied audience=application error=map[debug: message:Requested url does not match any rules reason: status:Not Found status_code:404] granted=false http_host=localhost:4455 http_method=GET http_url=http://localhost:4455/ http_user_agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 service_name=ORY Oathkeeper service_version=v0.40.2
2023-04-16 22:19:18 time=2023-04-16T21:19:18Z level=info msg=An error occurred while handling a request audience=application error=map[debug: message:Requested url does not match any rules reason: status:Not Found status_code:404] http_request=map[headers:map[accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding:gzip, deflate, br accept-language:en-GB,en-US;q=0.9,en;q=0.8 authorization:Value is sensitive and has been redacted. To see the value set config key "log.leak_sensitive_values = true" or environment variable "LOG_LEAK_SENSITIVE_VALUES=true". cache-control:max-age=0 content-length:0 sec-ch-ua:"Chromium";v="112", "Google Chrome";v="112", "Not:A-Brand";v="99" sec-ch-ua-mobile:?0 sec-ch-ua-platform:"Windows" sec-fetch-dest:document sec-fetch-mode:navigate sec-fetch-site:none sec-fetch-user:?1 upgrade-insecure-requests:1 user-agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 x-forwarded-for:172.26.0.1, 172.26.0.1] host:localhost:4455 method:GET path:/ query:<nil> remote:172.26.0.1:36990 scheme:http] http_response=map[status_code:404] service_name=ORY Oathkeeper service_version=v0.40.2
2023-04-16 22:19:18 time=2023-04-16T21:19:18Z level=info msg=completed handling request http_request=map[headers:map[accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding:gzip, deflate, br accept-language:en-GB,en-US;q=0.9,en;q=0.8 authorization:Value is sensitive and has been redacted. To see the value set config key "log.leak_sensitive_values = true" or environment variable "LOG_LEAK_SENSITIVE_VALUES=true". cache-control:max-age=0 connection:close content-length:0 sec-ch-ua:"Chromium";v="112", "Google Chrome";v="112", "Not:A-Brand";v="99" sec-ch-ua-mobile:?0 sec-ch-ua-platform:"Windows" sec-fetch-dest:document sec-fetch-mode:navigate sec-fetch-site:none sec-fetch-user:?1 upgrade-insecure-requests:1 user-agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 x-forwarded-for:172.26.0.1] host:localhost:4455 method:GET path:/ query:<nil> remote:172.26.0.1:36990 scheme:http] http_response=map[headers:map[content-type:application/json] size:95 status:404 text_status:Not Found took:992.413µs]
2023-04-16 22:19:18 time=2023-04-16T21:19:18Z level=info msg=Access request granted audience=application granted=true http_host=localhost:4455 http_method=GET http_url=http://host.docker.internal:80 http_user_agent=Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36 service_name=ORY Oathkeeper service_version=v0.40.2 subject=guest
2023-04-16 22:19:18 time=2023-04-16T21:19:18Z level=info msg=completed handling request http_request=map[headers:map[accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7 accept-encoding:gzip, deflate, br accept-language:en-GB,en-US;q=0.9,en;q=0.8 cache-control:max-age=0 connection:keep-alive sec-ch-ua:"Chromium";v="112", "Google Chrome";v="112", "Not:A-Brand";v="99" sec-ch-ua-mobile:?0 sec-ch-ua-platform:"Windows" sec-fetch-dest:document sec-fetch-mode:navigate sec-fetch-site:none sec-fetch-user:?1 upgrade-insecure-requests:1 user-agent:Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36] host:localhost:4455 method:GET path:/api/account query:<nil> remote:172.26.0.1:36986 scheme:http] http_response=map[headers:map[content-length:95 content-type:application/json date:Sun, 16 Apr 2023 21:19:18 GMT] size:95 status:404 text_status:Not Found took:339.500784ms]

Here is the response I get for both instances:

{"error":{"code":404,"status":"Not Found","message":"Requested url does not match any rules"}}