- id: "ory:keto:anonymous" upstream: preserv...
# talk-keto
j
- id: "oryketoanonymous" upstream: preserve_host: true url: "http://keto-api:4457/" strip_path: /.ory/keto/public match: url: "http://my-obsidian-edtech-dev.info/.ory/keto/public/**" methods: - GET - POST - PUT - DELETE authenticators: - handler: anonymous authorizer: handler: allow mutators: - handler: noop I have this rule in my oathkeeper PUT -:http://my-obsidian-edtech-dev.info/.ory/keto/public/admin/relation-tuples { "namespace":"access", "object":"obsidian", "relation":"view", "subject_id":"ankit", "subject_set":{ "namespace":"obsidian", "object":"ob-dev", "relation":"member" } } i am trying to create a relationship but i am getting this error -> 404 page not found , i am not understanding what is the reason of this error
c
Did you create the "access" namespace in Keto? It has to be created before you can push tuples to it 🙂
j
Thanks @curved-fountain-46946
c
Any time!
j
Hii @curved-fountain-46946, i want to add drop down in my identity schema.json can you please tell me how to do that?
c
I'm not sure i understand entirely what you're asking, can i have some more detail?
j
i want to add a textfield in my ory self-service-ui-node registration page with name role such that it has a dropdown which shows that only these roles can be selected
c
Ah, so you want users to be able to select their own roles? Interesting usecase. I haven't seen this case before, but unless the schema supports an enum, i think you'll have to write some backend code and some custom ui code for this specific case. Backend code to list your roles from their keto namespace, and front-end code to request that list from the backend and display it in the gui.
The latter is probably better anyway, so you don't have to maintain your list of roles in two places - both in keto and in the identity schema itself
j
Okay @curved-fountain-46946,I think enum could be the actual thing i was looking for.
Hii @curved-fountain-46946, Hope you are doing well. I am really stuck in a problem I am trying to implement single sign on using microsoft in my self hosted ory kratos+ keto+ oathkeeper environment.
selfservice:
methods: oidc: config: providers: - id: microsoft provider: microsoft client_id: *********** client_secret: ******* issuer_url: https://login.microsoftonline.com/xyz/oauth2/v2.0/token microsoft_tenant: ******* enabled: true I have this configuration in my kratos and the redirect url is this https://my-domain/.ory/kratos/public/self-service/methods/oidc/callback/microsoft But whenever i am trying to login using microsoft it throws me error
c
What error?
j
it redirects me to a url https://my-domain/panel/error ,since this url is not in my oathkeeper ,it gives url not match
Am i missing some configuration or misconfigured the redirect uri?
c
Did you check if maybe that url is defined as a redirect url on error in azure or wherever you setup the sso provider?