Hi, how to generate token with an
# spicedbz
zhangbo.yang
07/02/2024, 7:04 AMHi, how to generate token with an instance?
v
vroldanbet
07/02/2024, 8:40 AMwhat instance are you talking to? your own spicedb? authzed serverless? authzed dedicated?
z
zhangbo.yang
07/02/2024, 8:40 AMMy own spicedb created by docker
zhangbo.yang
07/02/2024, 8:41 AMI generated token by this way:
Copy code
docker run --name spicedb -p 50051:50051 quay.io/authzed/spicedb serve --grpc-preshared-key "somerandomkeyhere"
printf "sdbst_h256_%s\n" $(echo -n somerandomkeyhere | sha256sum | cut -d' ' -f1)v
vroldanbet
07/02/2024, 8:43 AMwell your preshared-key is somerandomkeyhere, so that's what you have to pass via the gRPC API
z
zhangbo.yang
07/02/2024, 8:43 AMzhangbo.yang
07/02/2024, 8:44 AMWait, what you mean that I don't need to execute
printf "sdbst_h256_%s\n" $(echo -n somerandomkeyhere | sha256sum | cut -d' ' -f1)v
vroldanbet
07/02/2024, 8:45 AMno, you don't have to that. That's for an entirely different feature in our commercial products. I'll take that as feedback.
vroldanbet
07/02/2024, 8:45 AMall you have to do is use the same preshared key you specified in your docker instnace
vroldanbet
07/02/2024, 8:45 AMso where you have
bearer_token_credentialsvroldanbet
07/02/2024, 8:47 AMalso you cannot use
bearer_token_credentialslocalhostz
zhangbo.yang
07/02/2024, 8:49 AMok, wait a minute, I'm trying
zhangbo.yang
07/02/2024, 8:59 AM Copy code
client = Client(
"xxx:50051",
insecure_bearer_token_credentials("blabla")
) Copy code
grpc._channel._InactiveRpcError: <_InactiveRpcError of RPC that terminated with:
status = StatusCode.UNAVAILABLE
details = "failed to connect to all addresses; last error: UNKNOWN: ipv4:10.124.106.121:50051: Endpoint is neither UDS or TCP loopback address."
debug_error_string = "UNKNOWN:Error received from peer {created_time:"2024-07-02T08:58:14.0618968+00:00", grpc_status:14, grpc_message:"failed to connect to all addresses; last error: UNKNOWN: ipv4:10.124.106.121:50051: Endpoint is neither UDS or TCP loopback address."}"
>zhangbo.yang
07/02/2024, 9:00 AMbearer_token_credentialszhangbo.yang
07/02/2024, 9:00 AMbut if i use codes in https://gist.github.com/jakedt/100d75048c7ebefdf2fb666de58cda9b
zhangbo.yang
07/02/2024, 9:01 AMit will cause another problem:
Copy code
grpc._channel._InactiveRpcError: <_InactiveRpcError of RPC that terminated with:
status = StatusCode.PERMISSION_DENIED
details = "invalid preshared key: invalid token"
debug_error_string = "UNKNOWN:Error received from peer ipv4:10.124.106.121:50051 {grpc_message:"invalid preshared key: invalid token", grpc_status:7, created_time:"2024-07-02T09:01:20.2423698+00:00"}"
>zhangbo.yang
07/02/2024, 9:04 AMI will try java sdk, not sure whether there's bug in python
v
vroldanbet
07/02/2024, 9:59 AMare you calling to a spicedb on localhost, or somewhere that is not localhost (e.g. docker network?)
vroldanbet
07/02/2024, 9:59 AMthat's a known bug on python gRPC, and the workaround for now is the gist, yeah
116 Views