Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Repo info
Activity
  • 16:20
    imsdu edited #2992
  • 16:14
    imsdu edited #2992
  • 16:13
    imsdu milestoned #2994
  • 16:13
    imsdu assigned #2994
  • 16:13
    imsdu labeled #2994
  • 16:13
    imsdu labeled #2994
  • 16:13
    imsdu opened #2994
  • 16:08
    imsdu edited #2993
  • 16:08
    imsdu labeled #2993
  • 16:08
    imsdu assigned #2993
  • 16:08
    imsdu labeled #2993
  • 16:08
    imsdu opened #2993
  • 16:03
    imsdu synchronize #2992
  • 11:00

    dhaneshnm on main

    Add support to the AccessContro… (compare)

  • 11:00

    dhaneshnm on 2926-add-support-for-multiple-paths-to-access-control-component

    (compare)

  • 11:00
    dhaneshnm closed #369
  • 10:51
    codecov-commenter commented #369
  • 10:49
    dhaneshnm synchronize #369
  • 10:49

    dhaneshnm on 2926-add-support-for-multiple-paths-to-access-control-component

    Support removing tag from resou… Merge branch 'main' into 2926-a… (compare)

  • 10:33

    dhaneshnm on 2934-delete-tag-on-resource

    (compare)

Didac
@umbreak
@mukulajoshi_twitter what version of keycloak, nexus-delta and nexus-web have you installed?
Kenneth Pirman
@kenjinp
@mukulajoshi_twitter perhaps you can try to remove the elements in localStorage by going to the browser inspector / Storage and removing any of the items there
also make sure you run the webapp with all caps ENV vars API_ENDPOINT=https://somehost/v1 (I guess you already did)
mukul ashok joshi
@mukulajoshi_twitter
@umbreak these are details: Keycloak is version 12.0.1, Nexus Delta is Release version 1.4.2 (downloaded the tar and extracted the same for build with sbt dist), Nexus-Web downloaded as git clone with branch 1.4.2 (-b v1.4.2 --single-branch). Had to do the git clone for Nexus-Web since the yarn build was looking for .git when i tried the build with the tar extract of the Nexus-Web Release 1.4.2
mukul ashok joshi
@mukulajoshi_twitter
@umbreak these are the details: starting the Nexus-Web like this "CLIENT_ID=nexus-web API_ENDPOINT=http://127.0.0.1:8080/v1 node dist/server.js > startup.log 2>&1 &". Also getting these errors in the delta log: "2021-01-15 19:23:34 ERROR c.e.b.nexus.delta.routes.ServiceInfo - Error while attempting to query for Blazegraph service description
ch.epfl.bluebrain.nexus.commons.http.UnexpectedUnsuccessfulHttpResponse: Received an unexpected http response while communicating with an external service" and
"2021-01-15 19:23:49 ERROR I.e.b.n.s.c.t.ServiceDescription] - Unexpected response for Storage call. Request: 'HttpMethod(GET) http://localhost:8084'akka.stream.StreamTcpException: Tcp command [Connect(localhost:8084,None,List(),Some(10 seconds),true)] failed because of java.net.ConnectException: Connection refused". I do not have the storage service running. Will check the localStorage stuff. Thanks
mukul ashok joshi
@mukulajoshi_twitter
@umbreak there are no key/value pairs in the Chrome Browser DevTools Inspector - Application/Local Storage
Also see these errors: * "2021-01-15 20:47:21 INFO akka.actor.ActorSystemImpl - Request timeout encountered for request [GET /version Strict(0 bytes)]
2021-01-15 20:48:36 WARN c.d.o.d.a.c.a.PlainTextAuthProviderBase - [s0] /127.0.0.1:9042 did not send an authentication challenge; This is suspicious because the driver expects authentication"
Didac
@umbreak
the version endpoint is not working because the storage service is probably not up and running, whcih does not matter for your deployment. So that one you can ignore
Didac
@umbreak
I’m not sure on the Nexus-Web side of things. The API seems to at least return the right realms
Kenneth Pirman
@kenjinp
I'm having trouble with that part, as far as I can see as long as the realms returns _results > 0, and if none of them are service accounts, then it should render them in the dropdown
Didac
@umbreak
@kenjinp if there is just one entry it will display a dropdown or one will just need to click on login?
Kenneth Pirman
@kenjinp
I think it will still display a dropdown. Is it possible that __results will not be an array if there's only one item?
Didac
@umbreak
@kenjinp his response from realms endpoint it this:
{
  "@context": [
    "https://bluebrain.github.io/nexus/contexts/resource.json",
    "https://bluebrain.github.io/nexus/contexts/iam.json",
    "https://bluebrain.github.io/nexus/contexts/search.json"
  ],
  "_total": 1,
  "_results": [
    {
      "@id": "http://127.0.0.1:8080/v1/realms/keycloak",
      "@type": "Realm",
      "name": "Nexus Keycloak",
      "openIdConfig": "http://127.0.0.1:8180/auth/realms/blue-brain-nexus/.well-known/openid-configuration",
      "_label": "keycloak",
      "_grantTypes": [
        "password",
        "clientCredentials",
        "refreshToken",
        "authorizationCode",
        "implicit"
      ],
      "_issuer": "http://127.0.0.1:8180/auth/realms/blue-brain-nexus",
      "_authorizationEndpoint": "http://127.0.0.1:8180/auth/realms/blue-brain-nexus/protocol/openid-connect/auth",
      "_tokenEndpoint": "http://127.0.0.1:8180/auth/realms/blue-brain-nexus/protocol/openid-connect/token",
      "_userInfoEndpoint": "http://127.0.0.1:8180/auth/realms/blue-brain-nexus/protocol/openid-connect/userinfo",
      "_revocationEndpoint": "http://127.0.0.1:8180/auth/realms/blue-brain-nexus/protocol/openid-connect/revoke",
      "_endSessionEndpoint": "http://127.0.0.1:8180/auth/realms/blue-brain-nexus/protocol/openid-connect/logout",
      "_rev": 1,
      "_deprecated": false,
      "_createdAt": "2021-01-13T13:51:05.704Z",
      "_createdBy": "http://127.0.0.1:8080/v1/anonymous",
      "_updatedAt": "2021-01-13T13:51:05.704Z",
      "_updatedBy": "http://127.0.0.1:8080/v1/anonymous"
    }
  ]
}
Kenneth Pirman
@kenjinp
Ah thanks. Yeah this looks good to me
Another possibility is by installing the chrome redux devtools and trying to see the state that the app has https://chrome.google.com/webstore/detail/redux-devtools/lmhkpmbekcpmknklioeibfkpmmfibljd
image.png
if everything is working as intended the auth state tree should have some happy realms there
mukul ashok joshi
@mukulajoshi_twitter
@umbreak @kenjinp thanks. Will check with the Redux Devtools
Kenneth Pirman
@kenjinp
If i dispatch the action manually with your payload, I get a nice dropdown
image.png
Didac
@umbreak
@kenjinp it might be something about the Nexus-Web version he is using, or the way he is running it?
Kenneth Pirman
@kenjinp
I'll try again with the release he's using
mukul ashok joshi
@mukulajoshi_twitter
@kenjinp yes, but clicking that does not result in showing the Identity Provider login button in the main section
Didac
@umbreak
ah ok. So the nexus web shows the dropdown, but clicking on it does not result on anything?
Kenneth Pirman
@kenjinp
it should make a GET request to the url in the openIdConfig property of the realm "http://127.0.0.1:8180/auth/realms/blue-brain-nexus/.well-known/openid-configuration" and then do some redirects and so on to get the user logged in
mukul ashok joshi
@mukulajoshi_twitter
Also tried with the latest Nexus-Web code base, but same result. Could be that there is something wrong with the Keycloak configuration. Will recheck the same
mukul ashok joshi
@mukulajoshi_twitter
One thing to note on the Sandbox environment, is that even though there are 3 realms returned, the login button gives option for only 2 (Github, Orcid) of the realms. The "Service Accounts" realm related Identity Provider is not available for login
mukul ashok joshi
@mukulajoshi_twitter
In the Sandbox environment, when i click the "login" in the header section, it triggers this URL: /login?destination=web%2F. So when i manually put this URL in my local Nexus-Web, am able to see the "Log in" button in the main section. There is still some redirect_uri issue, which is probably something to be configured in Keycloak. So that leaves us with the question as to why /login URL is not generated on clicking "login" in the header section
mukul ashok joshi
@mukulajoshi_twitter
@umbreak @kenjinp After fixing the redirect_uri error, there was another error related to unauthorized client/implicit flow disabled, which was also resolved. Now am able to see the "Admin" link. Not sure that i completely understand the authentication/authorization flow, but seems to be working now (though the "login" in header not working remains unresolved as yet). Will now try to setup the Org/Proj/Schemas with the Admin. Thanks
Kenneth Pirman
@kenjinp
great, I'm wondering after loging in the way you mentioned, do you see your user name in the header?
mukul ashok joshi
@mukulajoshi_twitter
@kenjinp good observation, no i do not see the User name in the Header. I was kind of going to mention that, but i thought let me check some of the functionality. Also probably everything is still getting created with the Anonymous user as the ACL for the project (for example) only shows Anonymous user and createdBy is also Anonymous user
Bogdan Roman
@bogdanromanx
@/all Due to the low activity of this channel we decided to move to Github Discussions instead; please post any questions or ask for help there: https://github.com/BlueBrain/nexus/discussions
Venkatesh Meruva
@meruvavenkatesh
image.png
Hi All,
I have integrated the keycloak with nexus and users not able to sync in nexus.
Please guide me on the same.
Didac
@umbreak
@meruvavenkatesh please report your issues to: https://github.com/BlueBrain/nexus/discussions
Venkatesh Meruva
@meruvavenkatesh
Hi @umbreak Thanks and I will do that
chance2021
@chance2021
Hi, does anyone know where I can find the instruction for integrating Keycloak with BlueBrain Nexus? I cannot find anything in the official website, as well as all over other google sites..
chance2021
@chance2021

Hi, I am trying to register a realm in Nexus delta but got below error. Any idea what may be the issue?

curl -XPUT \
  -H "Content-Type: application/json" \
  "http://<NexusDeltaIP>:80/v1/realms/<realmName>" \
  -d '{
        "name":"<realmName>",
        "openIdConfig":"http://<Keycloak IP>:8080/auth/realms/<realmName>/.well-known/openid-configuration",
        "logo":"http://localhost:8080/logo.png"
      }'

Error

{"@context":"https://bluebrain.github.io/nexus/contexts/error.json","@type":"UnsuccessfulOpenIdConfigResponse","reason":"Failed to retrieve the openid config document 'http://10.3.7.223:8080/auth/realms/vre/.well-known/openid-configuration'."}
VRE
@virtualresearchenvironment
Hi, does BBN has limits on how many Schemas can be created within a Project? I didn't find related spec in the documentation.
chance2021
@chance2021
Hi, I would like to change the base url for nexus from root / to /nexus in the deployment. Just wondering how I can achieve this? Any guide will be much appreciated!
mukul ashok joshi
@mukulajoshi_twitter
@chance2021 apologies for the late reply. You can get started from here: https://www.keycloak.org/docs/latest/authorization_services/ and then specifically look at the examples related to https://github.com/keycloak/keycloak-quickstarts which has app called app-authz-jee-vanilla. You also need to check how you have deployed Keycloak whether it is on Wildfly as the JEE app is related to that. Will send more details subsequently. Thanks
chance2021
@chance2021
@mukulajoshi_twitter Thanks for the reply!! Sure, I will try later and let you know how it works. Thanks again! BTW, have you had experience on changing the base url for the nexus? I would like to have the nexus to be access in a relative url, like example.com/nexus. I managed to change the nexus web by updating some environment variable, but I cannot find a way to change the base url for nexus delta..
Didac
@umbreak
@virtualresearchenvironment there are no limitations on the number of schemas per project
Didac
@umbreak
@chance2021 I've replied to your question on Nexus discussions: https://github.com/BlueBrain/nexus/discussions/2736
chance2021
@chance2021
Thanks for the reply @umbreak @bogdanromanx !! I have added the suggested setting (-Dapp.http.base-uri=http://localhost:8080/nexus/v1) in delta.yaml file (as I am using k8s as deployment) and I also changed the ingress path (path: /nexus/v1) in the same file. However, when I was trying to create a realm after the change deployed, it throws me below error... I was able to create a realm without any issue before this update. Any idea what maybe the issue? Also, should I update BASE_PATH in web.yaml for nexus-web as well? Thanks
$ curl -XPUT   -H "Content-Type: application/json"   "http://<K8s Ingress Nginx IP>/nexus/v1/realms/vre"   -d '{
        "name":"vre",
        "openIdConfig":"http://<KEYCLOAK IP>/auth/realms/vre/.well-known/openid-configuration",
        "logo":"http://localhost:8080/logo.png"
      }'


{"@context":"https://bluebrain.github.io/nexus/contexts/error.json","@type":"ResourceNotFound","reason":"The requested resource does not exist."}
Bogdan Roman
@bogdanromanx
@chance2021 , thanks for posting the questions on GitHub Discussions, we’re going to continue to reply there. ;)
chance2021
@chance2021
Sure, just replied with further question! Thanks so much!! @bogdanromanx
QXgu
@QXgu
Hi, does anyone know why no resources were found after creating the SearchConfig resources in the project? I have created the SearchConfig with the view that can query the resources in the query editor. However, the Search page kept showing no data. I also found that after filling in the fields property, the table columns still remain the same as the default one. Here is how I set up the SearchConfig resource:
{
  "@id": "SearchConfig",
  "@type": [
    "https://bluebrain.github.io/nexus/vocabulary/SearchConfig"
  ],
  "description": "global dataset search",
  "label": "SearchConfig",
  "fields": [
    {
      "dataIndex": "@type",
      "displayIndex": 0,
      "key": "@type",
      "sortable": true,
      "title": "Type1"
    }
  ],
  "view": "http://my_environment_deploy/nexus/v1/views/organization/project/http%3A%2F%2F10.3.7.220%2Fnexus%2Fv1%2Fresources%2FVRE_testing%2FVREDatasets%2FAggragateES/"
}
QXgu
@QXgu

Hi, I have a question about creating the project in the BBN fusion. We got the warning message shown below after creating the project but the project can be created successfully. Why we got that kind of warning message? Will that cause any problems for using the project? We met the problem that we can not find any data on the Search page while the query editor works fine. Is that possible that creating a project problem leads to the search resources not being found?

The version we used for BBN is 1.5.1

2021-09-10 19:31:32 WARN c.e.b.n.d.sdk.ProgressesStatistics - Project count not found for project ‘webapps/testproject’ 2021-09-10 19:31:32 INFO a.p.cassandra.query.EventsByTagStage - [6b2c6c59-3799-42b9-a3a4-28e953e28134]: EventsByTag query [project=webapps/testproject] starting with EC delay 4000ms: fromOffset [b165d960-126d-11ec-8080-808080808080 (2021-09-10 19:31:27:862)] toOffset [None] 2021-09-10 19:31:32 INFO a.p.cassandra.query.EventsByTagStage - [e1897a9e-2913-40b6-aaa2-9f8b9d059c67]: EventsByTag query [project=webapps/testproject] starting with EC delay 4000ms: fromOffset [b165d960-126d-11ec-8080-808080808080 (2021-09-10 19:31:27:862)] toOffset [None]

Also, I found out that when I go to the default query page and hovered on the project tag, the page becomes blank. I met the same problem in the SandBox as well. Here is the error message from the frontend:
image
image
image

We were guessing this might be the cause for the Search panel error we experienced. Please advise. Thanks