But ```api getRelationships namespace Group relation members Ory Community #talk-keto

Join Slack

Channels

announcements

ory-copilot

But ```api.getRelationships({ namespace: 'Grou...

# talk-keto

prehistoric-boots-58621

07/10/2023, 2:13 PM

But

Copy code

api.getRelationships({
    namespace: 'Group',
    relation: 'members',
    subjectId: user.id,
});

returns no results.

steep-lamp-91158

07/10/2023, 2:14 PM

Yes, you need to also use the subject set in the get/check requests

prehistoric-boots-58621

07/10/2023, 2:14 PM

why / can you provide more context

prehistoric-boots-58621

07/10/2023, 2:15 PM

can I query which groups is the user a member of?

prehistoric-boots-58621

07/10/2023, 2:15 PM

how do subject sets come in to this — all the cat lady and chat examples have no subject sets

prehistoric-boots-58621

07/10/2023, 2:15 PM

not prominently anyway

steep-lamp-91158

07/10/2023, 2:15 PM

so originally we had subject sets and unscoped subject IDs, but turned out you probably want to scope subjects so using a subject set with no relation is basically a scoped subject

steep-lamp-91158

07/10/2023, 2:16 PM

the examples are outdated there...

steep-lamp-91158

07/10/2023, 2:16 PM

sorry for that

prehistoric-boots-58621

07/10/2023, 2:16 PM

okay so subject id is out

steep-lamp-91158

07/10/2023, 2:16 PM

TL;DR only use subject sets everywhere, we want to deprecate and remove subject IDs anyway

prehistoric-boots-58621

07/10/2023, 2:17 PM

Copy code

await api.getRelationships({
    namespace: 'Group',
    relation: 'members',
    subjectSetNamespace: 'User',
    subjectSetObject: user.id,
});

prehistoric-boots-58621

07/10/2023, 2:17 PM

oh wait no,

prehistoric-boots-58621

07/10/2023, 2:17 PM

subjectSetObject

prehistoric-boots-58621

07/10/2023, 2:19 PM

Uhm…

"incomplete subject, provide \"subject_id\" or a complete \"subject_set.*\""

prehistoric-boots-58621

07/10/2023, 2:19 PM

so I need to add an empty string relation?

prehistoric-boots-58621

07/10/2023, 2:21 PM

yea, that’s it

prehistoric-boots-58621

07/10/2023, 2:22 PM

need to mangle OpenAPI types so that it has a strict OR between

string | SubjectSet

prehistoric-boots-58621

07/10/2023, 2:22 PM

isomorphic type

prehistoric-boots-58621

07/10/2023, 2:22 PM

otherwise the requirement isn’t present at compile/static check

prehistoric-boots-58621

07/10/2023, 2:23 PM

or make

subjectId

@deprecated

prehistoric-boots-58621

07/10/2023, 2:23 PM

✅

prehistoric-boots-58621

07/10/2023, 2:24 PM

is there a way to limit depth? Like if I don’t care how the user is a member of a group, I just need a list of groups

steep-lamp-91158

07/10/2023, 2:24 PM

we had it polymorph but it did not work well for all languages...

steep-lamp-91158

07/10/2023, 2:24 PM

the list is always only one level

prehistoric-boots-58621

07/10/2023, 2:25 PM

oh so it’s just the subject set key

prehistoric-boots-58621

07/10/2023, 2:25 PM

okay, great

steep-lamp-91158

07/10/2023, 2:26 PM

if you can I'd always recommend grpc over openapi because the clients are so much better

prehistoric-boots-58621

07/10/2023, 2:26 PM

not opposed

prehistoric-boots-58621

07/10/2023, 2:26 PM

node grpc avalable?

steep-lamp-91158

07/10/2023, 2:27 PM

yes!

steep-lamp-91158

07/10/2023, 2:27 PM

https://www.npmjs.com/package/@ory/keto-grpc-client

prehistoric-boots-58621

07/10/2023, 2:27 PM

weeee

prehistoric-boots-58621

07/10/2023, 2:28 PM

so they’re separate clients vs axios one big blob

@ory/client

steep-lamp-91158

07/10/2023, 2:28 PM

well only keto supports grpc rn

prehistoric-boots-58621

07/10/2023, 2:28 PM

prehistoric-boots-58621

07/10/2023, 2:28 PM

sad

steep-lamp-91158

07/10/2023, 2:29 PM

was kind of an experiment with success, but it is not an easy thing to rewrite all services 😅

steep-lamp-91158

07/10/2023, 2:29 PM

especially when you have HTML form APIs, OAuth2, ...

prehistoric-boots-58621

07/10/2023, 2:32 PM

actually the html form API is another question;

steep-lamp-91158

07/10/2023, 2:33 PM

yeah but it would be great to not maintain several different servers in one codebase

steep-lamp-91158

07/10/2023, 2:33 PM

we looked into grpc gateway, which could make it work, at least for all json apis

steep-lamp-91158

07/10/2023, 2:34 PM

but again, a bit of work required

prehistoric-boots-58621

07/10/2023, 2:37 PM

posted in #kratos

3 Views

Open in Slack

Previous Next