Hi guys! SpiceDB #spicedb

Hi guys!

Toi

06/01/2025, 5:09 AM

Hi guys! I'm trying to implement the node grpc client but I'm receiving

"Error: 12 UNIMPLEMENTED: Received http STATUS CODE 404"

From the traces, I'm hitting

/authzed.api.v1.PermissionService/CheckPermission

, which seems correct. Any ideas what could it be? I'm hosting my own spicedb instance. The grpc port is 50051, right?

Toi

06/02/2025, 1:08 PM

@Joey , yes! I'm using authzed-node client

Toi

06/02/2025, 1:09 PM

This is the span of the request. I'm running spicedb in a kubernetes cluster under the namespace

foundations

https://cdn.discordapp.com/attachments/1378601448484372540/1379084559362162708/Screenshot_2025-06-02_at_10.08.40.png?ex=683ef415&is=683da295&hm=68c72004c58af9385675827bec619fb78d7b8f1961e24115539b4af7d28329f4&

Joey

06/02/2025, 2:57 PM

sounds like you might be hitting the wrong port

Joey

06/02/2025, 2:57 PM

I'd verify with the

zed

command line

Toi

06/02/2025, 3:01 PM

Which command can I use to verify that?

Joey

06/02/2025, 3:03 PM

any

zed

permissions command should work

Toi

06/02/2025, 3:10 PM

The grpc api default port is 50051, correct?

Joey

06/02/2025, 3:21 PM

yes

Joey

06/02/2025, 3:21 PM

but the operator exports on its own endpoint

Toi

06/02/2025, 3:29 PM

We are not using the operator currently

Joey

06/02/2025, 3:50 PM

how are you running SpiceDB?

Toi

06/02/2025, 5:29 PM

We run the spicedb image

Toi

06/02/2025, 5:29 PM

Btw, we just tried the cli and it worked. The port is correct

Toi

06/02/2025, 5:30 PM

Is there another config in the node client that we should be aware of? I'm currently using the plaintext flag:

Copy code

this.client = v1.NewClient(
      serverToken,
      serverUrl,
      v1.ClientSecurity.INSECURE_PLAINTEXT_CREDENTIALS,
    );

Toi

06/02/2025, 5:40 PM

If the following command works:

Copy code

zed schema read --endpoint spicedb.foundations:50051 --token my-secret-token

Then the

serverUrl

to be used on the node client should also be

spicedb.foundations:50051

, correct?

Toi

06/02/2025, 5:48 PM

On the span that I sent, it says

gateway

. This means the REST gateway that is also served, right? Cause it seems that I'm hitting the REST port (80), even though on the span says 50051

Joey

06/02/2025, 9:13 PM

REST gateway has its own port

Joey

06/02/2025, 9:13 PM

and should not be used unless you cannot use gRPC for some reason

Toi

06/02/2025, 9:33 PM

Yeah, we are transitioning to grpc. That's why I've beem trying out the node-client. However I'm getting this

"Error: 12 UNIMPLEMENTED: Received http STATUS CODE 404"

Toi

06/02/2025, 9:33 PM

I just tested locally and it seems to work fine...

Toi

06/02/2025, 9:36 PM

We tested running the zed client with SSH and it also worked. We managed to reproduce the error message when using the zed client against the REST gateway port

Toi

06/02/2025, 9:43 PM

So it seems that the node client (when running inside kubernetes) is hitting the rest port for some reason

Toi

06/02/2025, 9:46 PM

I got this log also:

Copy code

[2025-06-02T17:48:58.947Z] "POST /authzed.api.v1.PermissionsService/CheckPermission HTTP/1.1" 404 - "-" 0 0 "grpc-node-js/1.13.4"

Joey

06/02/2025, 10:25 PM

> when using the zed client against the REST gateway port

Joey

06/02/2025, 10:25 PM

you can't use the zed client, nor the client lib, against the REST gateway

Joey

06/02/2025, 10:25 PM

they both only speak gRPC

Toi

06/02/2025, 10:51 PM

We found out the problem. It was our virtual service mapping

Joey

06/02/2025, 11:00 PM

Previous Next