Ory proxy breaks API key / personal access tokens in privileged calls (e.g. identity management)

[aeneasr]

Preflight checklist

• I could not find a solution in the existing issues, docs, nor discussions.
• I agree to follow this project's Code of Conduct.
• I have read and am following this repository's Contribution Guidelines.
• This issue affects my Ory Network project.
• I have joined the Ory Community Slack.
• I am signed up to the Ory Security Patch Newsletter.

Describe the bug

See #296 (comment)

[tilschuenemann]

I've tested this running both ory proxy http://localhost:3000/ $ORY_SDK_URL and ory proxy http://localhost:3000/ --dev after updating the CLI to the newest version, curl http://localhost:4000/.ory/admin/identities -H "Authorization:Bearer $ORY_API_KEY" returns all identities for both cases therefore I think this issue got fixed by the tunnel fix as well.

[aeneasr]

Awesome! :)