https://authzed.com logo
Powered by
spicedb
  • l

    luke

    03/10/2022, 5:49 PM
    sounds good. i did a quick search and found the blog post with info about setting that up. thank you!
  • j

    joombaga

    03/10/2022, 6:09 PM
    Is there any known limitation to the contents of the grpc preshared key? I tried 
    9o5Nnk93O8Am$isH%G#Fav6$7g!cdnP%W0S@E!s2Q7nU$6hrDVIR4Ss4OtTsnhue
    and was getting errors in 
    zed
    about an incorrect key, but using an alphanumeric key seemed to work. I'm using the docker image in k8s.
  • j

    joombaga

    03/10/2022, 6:14 PM
    Just tried this locally and I get the same error. Here's how I'm running spicedb: 
    SPICEDB_GRPC_PRESHARED_KEY='9o5Nnk93O8Am$isH%G#Fav6$7g!cdnP%W0S@E!s2Q7nU$6hrDVIR4Ss4OtTsnhue' SPICEDB_GRPC_NO_TLS=true SPICEDB_HTTP_NO_TLS=true spicedb serve
    and here's zed: 
    zed schema read --endpoint localhost:50051 --insecure --token '9o5Nnk93O8Am$isH%G#Fav6$7g!cdnP%W0S@E!s2Q7nU$6hrDVIR4Ss4OtTsnhue'
Error: rpc error: code = Unknown desc = invalid preshared key: invalid token
  • j

    joombaga

    03/10/2022, 6:15 PM
    But it works with 
    Y24Nfiquc5W77EgY7eQTQITmvMfy0Q2sjhNrx56UBuyPsbAY5tSdPKOeRvX4OrEw
  • j

    Jake

    03/10/2022, 6:17 PM
    I would have to look at the code, but I don’t believe we are doing any limits or transformation
  • j

    Jake

    03/10/2022, 6:17 PM
    It might be an encoding/escaping problem with the shell
  • j

    joombaga

    03/10/2022, 6:25 PM
    I considered that. The single quotes should cover all of those characters (in my shell, bash 5). But I did try base64 encoding the key and decoding it with the shell in my spiced and zed invocations, e.g. 
    SPICEDB_GRPC_PRESHARED_KEY="$(<<<"OW81Tm5rOTNPOEFtJGlzSCVHI0ZhdjYkN2chY2RuUCVXMFNARSFzMlE3blUkNmhyRFZJUjRTczRPdFRzbmh1ZQ==" base64 --decode)" SPICEDB_GRPC_NO_TLS=true SPICEDB_HTTP_NO_TLS=true spicedb serve

zed schema read --endpoint localhost:50051 --insecure --token "$(<<<"OW81Tm5rOTNPOEFtJGlzSCVHI0ZhdjYkN2chY2RuUCVXMFNARSFzMlE3blUkNmhyRFZJUjRTczRPdFRzbmh1ZQ==" base64 --decode)"
  • j

    joombaga

    03/10/2022, 6:26 PM
    Inspecting the process table then shows the correctly decoded key.
  • j

    joombaga

    03/10/2022, 6:27 PM
    ps eww 45635
  PID   TT  STAT      TIME COMMAND
45635 s011  S+     0:00.12 spicedb serve SPICEDB_HTTP_NO_TLS=true SPICEDB_GRPC_NO_TLS=true SPICEDB_GRPC_PRESHARED_KEY=9o5Nnk93O8Am$isH%G#Fav6$7g!cdnP%W0S@E!s2Q7nU$6hrDVIR4Ss4OtTsnhue ...
  • j

    Jake

    03/10/2022, 7:01 PM
    it's working for me
  • j

    Jake

    03/10/2022, 7:01 PM
    @User ^
  • j

    Jake

    03/10/2022, 7:02 PM
    are you sure that process above is the one listening on 50051?
  • j

    joombaga

    03/10/2022, 7:03 PM
    Yep. All I have to do is make the key alphanumeric and I get a schema read error (expected) instead of an invalid preshared key error.
  • j

    joombaga

    03/10/2022, 7:05 PM
    SPICEDB_GRPC_PRESHARED_KEY='Y24Nfiquc5W77EgY7eQTQITmvMfy0Q2sjhNrx56UBuyPsbAY5tSdPKOeRvX4OrEw' SPICEDB_GRPC_NO_TLS=true SPICEDB_HTTP_NO_TLS=true spicedb serve

zed schema read --endpoint localhost:50051 --insecure --token 'Y24Nfiquc5W77EgY7eQTQITmvMfy0Q2sjhNrx56UBuyPsbAY5tSdPKOeRvX4OrEw'
Error: rpc error: code = NotFound desc = No schema has been defined; please call WriteSchema to start
  • j

    Jake

    03/10/2022, 7:06 PM
    SPICEDB_GRPC_PRESHARED_KEY='9o5Nnk93O8Am$isH%G#Fav6$7g!cdnP%W0S@E!s2Q7nU$6hrDVIR4Ss4OtTsnhue' SPICEDB_GRPC_NO_TLS=true SPICEDB_HTTP_NO_TLS=true go run ./cmd/spicedb serve

zed schema read --endpoint localhost:50051 --insecure --token '9o5Nnk93O8Am$isH%G#Fav6$7g!cdnP%W0S@E!s2Q7nU$6hrDVIR4Ss4OtTsnhue'
Error: rpc error: code = NotFound desc = No schema has been defined; please call WriteSchema to start
  • j

    Jake

    03/10/2022, 7:07 PM
    only difference I see is that I'm using 
    HEAD
    , but we haven't changed the preshared key logic in ages
  • j

    Jake

    03/10/2022, 7:08 PM
    what shell are you using?
  • j

    joombaga

    03/10/2022, 7:09 PM
    bash 5.1.16 from macos homebrew
  • j

    Jake

    03/10/2022, 7:10 PM
    works for me on the built-in bash 3.2.57
  • j

    joombaga

    03/10/2022, 7:10 PM
    Yeah I don't think it's a shell issue
  • j

    Jake

    03/10/2022, 7:10 PM
    do you have a local checkout of spicedb you can use? I put in a printf to log the tokens on both sides
  • j

    Jake

    03/10/2022, 7:11 PM
    i'm sure that would clear it up right away
  • j

    joombaga

    03/10/2022, 7:11 PM
    Just pulled it, but I don't have go configured.
  • j

    joombaga

    03/10/2022, 7:12 PM
    But I can if you've got a crash course
  • j

    Jake

    03/10/2022, 7:12 PM
    i can send you a binary if you're comfortable with that and on an M1
  • j

    joombaga

    03/10/2022, 7:12 PM
    nope, x64 😦
  • j

    Jake

    03/10/2022, 7:13 PM
    crash course would just be to 
    brew install go
    , go into the project and run 
    go mod tidy
    to install all the deps, and then run my command from above
  • j

    joombaga

    03/10/2022, 7:18 PM
    + SPICEDB_GRPC_PRESHARED_KEY='9o5Nnk93O8Am$isH%G#Fav6$7g!cdnP%W0S@E!s2Q7nU$6hrDVIR4Ss4OtTsnhue' SPICEDB_GRPC_NO_TLS=true SPICEDB_HTTP_NO_TLS=true go run ./cmd/spicedb serve
# github.com/authzed/spicedb/internal/datastore/common
internal/datastore/common/sql.go:173:20: undefined: math.MaxInt
+ go version
go version go1.16.15 darwin/amd64
  • j

    Jake

    03/10/2022, 7:19 PM
    that go is ancient, you must have already had it installed
  • j

    Jake

    03/10/2022, 7:19 PM
    try 
    brew upgrade go
1...9899100...325Latest