To export relationships from a project using the Ory CLI, you can use the

ory list relationships

command. This command lists relation tuples matching the given partial tuple and returns paginated results. Here is an example of how to use the command:

bash ory list relationships --project=<your-project-id>

In the command above, replace

<your-project-id>

with the ID of your project. The command has several options you can use to customize the output:

bash       --authority string     Set the authority header for the remote gRPC server.         --block                Block until the connection is up.         --format string        Set the output format. One of table, json, yaml, json-pretty, jsonpath and jsonpointer. (default "default")         --namespace string     Set the requested namespace         --object string        Set the requested object         --page-size int32      maximum number of items to return (default 100)         --page-token string    page token acquired from a previous response         --project string       The project to use, either project ID or a (partial) slug.         --relation string      Set the requested relation         --subject-id string    Set the requested subject ID         --subject-set string   Set the requested subject set; format: "namespace:object#relation"

For more details, you can refer to the [Ory CLI documentation](https://www.ory.sh/docs/cli/ory-list-relationships#ory-list-relationships).

@chilly-king-10285 can I set this env vars using ory cli?

export ORY_PROJ_ID=?
export ORY_PROJ_SLUG=?
export ORY_SDK_URL=?
export ORY_API_KEY=?

The Ory CLI does not directly set environment variables. Environment variables are typically set in the shell or operating system where your application is running. However, the Ory CLI and other Ory tools can use these environment variables if they are set. Here's how you can set these environment variables in different operating systems: - On Linux or macOS, you can use the

export

command in your terminal:

bash export ORY_PROJ_ID=<your-project-id> export ORY_PROJ_SLUG=<your-project-slug> export ORY_SDK_URL=<your-sdk-url> export ORY_API_KEY=<your-api-key>

- On Windows CMD, you can use the

set

command:

cmd set ORY_PROJ_ID=<your-project-id> set ORY_PROJ_SLUG=<your-project-slug> set ORY_SDK_URL=<your-sdk-url> set ORY_API_KEY=<your-api-key>

- On Windows Powershell, you can use the

$Env:

prefix:

powershell $Env:ORY_PROJ_ID = "<your-project-id>" $Env:ORY_PROJ_SLUG = "<your-project-slug>" $Env:ORY_SDK_URL = "<your-sdk-url>" $Env:ORY_API_KEY = "<your-api-key>"

Remember to replace

<your-project-id>

,

<your-project-slug>

,

<your-sdk-url>

, and

<your-api-key>

with your actual values. Once these environment variables are set, they can be used in your Ory configuration. For example, the Ory CLI commands often have options that can be set using environment variables. You can find more information about this in the [Ory documentation](https://www.ory.sh/docs/ecosystem/configuring#loading-configuration-from-environment-variables).

To create a new project within a workspace using the Ory CLI, you can use the

ory create project

command. However, the command does not directly specify the workspace. The project is created within the context of the currently authenticated user or workspace. Here is an example of how to use the command:

bash ory create project --name "Your Project Name"

In the command above, replace

"Your Project Name"

with the name of your project. The command has several options you can use:

bash       --format string   Set the output format. One of table, json, yaml, json-pretty, jsonpath and jsonpointer. (default "default")     -h, --help            help for project     -n, --name string     The name of the project, required when quiet mode is used     -q, --quiet           Be quiet with output printing.         --use-project     Set the created project as the default.

For more details, you can refer to the [Ory CLI documentation](https://www.ory.sh/docs/cli/ory-create-project#ory-create-project). Please note that to perform this operation, you must be authenticated. You can authenticate using the

ory auth

command as described in the [Ory CLI guide](https://www.ory.sh/docs/guides/cli/cli-basics#create-ory-network-account-and-project).

Yes, you can export a project's configuration from the Ory Network using the Ory CLI. The command to do this depends on the specific configuration you want to export. Here are some examples: 1. To export the configuration of Ory Identities, use the following command:

bash ory get identity-config {project-id} --format yaml

2. To export the configuration of Ory OAuth2 and OpenID, use the following command:

bash ory get oauth2-config {project-id} --format yaml

3. To export the configuration of Ory Permissions, use the following command:

bash ory get permission-config {project-id} --format yaml

In the commands above, replace

{project-id}

with the ID of your project. The

--format

flag defines the format of the output file. You can choose one of

yaml

,

json

, or

json-pretty

. For more details, you can refer to the Ory CLI documentation for [Ory Identities](https://www.ory.sh/docs/guides/cli/identity-cli), [Ory OAuth2 and OpenID](https://www.ory.sh/docs/guides/cli/oauth2-cli), and [Ory Permissions](https://www.ory.sh/docs/guides/cli/configure-permission-service). To get the complete configuration of an Ory Network project, you can use the

ory get project

command:

bash ory get project [id] [flags]

For more details, you can refer to the [Ory CLI documentation](https://www.ory.sh/docs/cli/ory-get-project#ory-get-project).

To get an identity by its email, you would typically need to list all identities and then filter them by the email attribute. However, the Ory CLI does not currently support this functionality directly. In the Ory Kratos API, there is no direct endpoint to fetch an identity by email. The

/identities

endpoint lists all identities, but it does not support filtering by traits like email. Here is an example of how to list identities using the Ory CLI:

bash ory identities get

This command will return a list of all identities. You would then need to manually search through the returned list to find the identity with the matching email. For more details, you can refer to the [Ory CLI documentation](https://www.ory.sh/docs/cli/ory-identities-get#ory-identities-get). Please note that handling user data, including emails, should always be done in compliance with all relevant data protection regulations.

To make this API request using the Go SDK, you would typically use the

ListIdentities

function provided by the SDK. However, the Ory Kratos Go SDK does not currently support filtering identities by email directly. Here is an example of how to list identities using the Go SDK:

go package main  import (  "context"  "fmt"  "<http://github.com/ory/client-go|github.com/ory/client-go>"  "os" )  var ory *client.APIClient  func init() {  cfg := client.NewConfiguration()  cfg.Servers = client.ServerConfigurations{   {URL: fmt.Sprintf("<https://%s.projects.oryapis.com>", os.Getenv("ORY_PROJECT_SLUG"))},  }   ory = client.NewAPIClient(cfg) }  func main() {  ctx := context.Background()  identities, _, err := ory.IdentityApi.ListIdentities(ctx).PageSize(250).Execute()  if err != nil {   fmt.Println("Error:", err)   return  }   for _, identity := range identities {   fmt.Println("Identity:", identity)  } }

In the code above,

ListIdentities

is used to get a list of identities with a page size of 250. You would then need to manually iterate over the returned identities and check the

Credentials

field to find the identity with the matching email. Please note that handling user data, including emails, should always be done in compliance with all relevant data protection regulations. For more details, you can refer to the [Ory Kratos Go SDK documentation](https://www.ory.sh/docs/kratos/sdk/go).

I'm sorry for any confusion, but currently, the Ory Kratos Go SDK does not support filtering identities by email directly using the

credentials_identifier

parameter. The

ListIdentities

function provided by the SDK does not have this functionality. You can list all identities and then manually iterate over the returned identities to find the one with the matching email. However, please note that this could be inefficient if you have a large number of identities. Here is an example of how you might do this:

go package main  import (  "context"  "fmt"  "<http://github.com/ory/client-go|github.com/ory/client-go>"  "os" )  var ory *client.APIClient  func init() {  cfg := client.NewConfiguration()  cfg.Servers = client.ServerConfigurations{   {URL: fmt.Sprintf("<https://%s.projects.oryapis.com>", os.Getenv("ORY_PROJECT_SLUG"))},  }   ory = client.NewAPIClient(cfg) }  func main() {  ctx := context.Background()  identities, _, err := ory.IdentityApi.ListIdentities(ctx).PageSize(250).Execute()  if err != nil {   fmt.Println("Error:", err)   return  }   email := "<mailto:pavel@cogna.co|pavel@cogna.co>"  for _, identity := range identities {   if identity.Traits.(map[string]interface{})["email"] == email {    fmt.Println("Found identity:", identity)    break   }  } }

In the code above, we're iterating over the returned identities and checking if the email in the

Traits

field matches the desired email. Please note that handling user data, including emails, should always be done in compliance with all relevant data protection regulations. For more details, you can refer to the [Ory Kratos Go SDK documentation](https://www.ory.sh/docs/kratos/sdk/go).

To delete an identity using the Ory CLI, you can use the

ory delete identity

command. This command deletes one or more identities by their ID(s). Here is an example of how to use the command:

bash ory delete identity id-0

In the command above, replace

id-0

with the ID of the identity you want to delete. You can also delete multiple identities at once by providing multiple IDs:

bash ory delete identity id-0 id-1 id-2

Please note that this action is irreversible and permanently deletes the identity. For more details, you can refer to the [Ory CLI documentation](https://www.ory.sh/docs/cli/ory-delete-identity#ory-delete-identity).

To delete all identities using the Ory CLI, you would first need to list all identities and then delete each one by its ID. However, please note that this could be a time-consuming process if you have a large number of identities, and it should be done with caution because this action is irreversible. Here is an example of how you might do this: 1. First, list all identities:

bash ory list identities

This command will return a list of all identities. 2. Then, for each identity, use the

ory delete identity

command to delete it:

bash ory delete identity id-0 id-1 id-2

In the command above, replace

id-0

,

id-1

,

id-2

with the IDs of the identities you want to delete. For more details, you can refer to the [Ory CLI documentation](https://www.ory.sh/docs/cli/ory-delete-identity#ory-delete-identity).

The error message "no resumable session found" typically occurs when the Ory Kratos session cookie is missing or invalid. This can happen for several reasons: 1. The session has expired: Ory Kratos sessions have a limited lifespan, which can be configured in the Kratos configuration file. If the session has expired, you will need to authenticate again to create a new session. 2. The cookie is not being sent with the request: This can happen if the

withCredentials

option is not set to

true

in your API requests. This option is necessary to include cookies in cross-origin requests. 3. The cookie has been deleted: If you or your browser has cleared cookies, the session cookie will be deleted. 4. The cookie is not accessible due to browser settings: Some browser settings and extensions can block cookies, especially in incognito or private browsing mode. To resolve this issue, you can try the following steps: 1. Ensure that you are sending the

withCredentials

option set to

true

in your API requests. Here is an example of how to do this in a React app using the Ory Client:

tsx import { Configuration, FrontendApi } from "@ory/client"  const frontend = new FrontendApi(   new Configuration({     basePath: "<http://localhost:4000>", // Use your local Ory Tunnel URL     baseOptions: {       withCredentials: true,     },   }), )

2. Clear your browser's cookies and cache as suggested in the error message, then try to authenticate again. 3. Check your browser settings to ensure that cookies are not being blocked. For more details, you can refer to the [Ory Kratos documentation](https://www.ory.sh/docs/kratos/).

A message from kapa.ai

I'm sorry, but your question seems to be incomplete. You mentioned an error when running React authentication with Ory and provided a URL, but you didn't specify what the error message is. If you're having trouble with the

/sessions/whoami

endpoint, it's used to check who the current HTTP session belongs to. If you're getting an error, it could be due to several reasons: 1. The session has expired: Ory Kratos sessions have a limited lifespan. If the session has expired, you will need to authenticate again to create a new session. 2. The cookie is not being sent with the request: This can happen if the

withCredentials

option is not set to

true

in your API requests. This option is necessary to include cookies in cross-origin requests. 3. The cookie has been deleted: If you or your browser has cleared cookies, the session cookie will be deleted. 4. The cookie is not accessible due to browser settings: Some browser settings and extensions can block cookies, especially in incognito or private browsing mode. To help you further, could you please provide more details about the error message you're seeing?

I'm sorry, but I can't provide a specific solution without more information about the error you're encountering. The URL you've provided (`http://localhost:4000/sessions/whoami`) is typically used to check the current session status in Ory Kratos. If you're having trouble with this endpoint, it could be due to several reasons such as: 1. The session has expired or doesn't exist. 2. The

withCredentials

option might not be set to

true

in your API requests. 3. The Ory Kratos server might not be running or not correctly configured. Here's an example of how to use this endpoint in a React app:

tsx import { Configuration, FrontendApi, Session } from "@ory/client"   import { useEffect, useState } from "react"      const frontend = new FrontendApi(     new Configuration({       basePath: "<http://localhost:4000>", // Use your local Ory Tunnel URL       baseOptions: {         withCredentials: true,       },     }),   )      export function checkSession() {     const [session, setSession] = useState<Session>(undefined)        useEffect(() => {       frontend         .toSession()         .then(({ data: session }) => {           setSession(session)         })         .catch((error) => {           // The session could not be fetched           // This might occur if the current session has expired         })     }, [])        return session ? (       <table>         <tr>           <th>Session ID</th>           <th>Expires at</th>           <th>Authenticated at</th>         </tr>         <tr id={session.id}>           <td>{session.id}</td>           <td>{session.expires_at || ""}</td>           <td>{session.authenticated_at || ""}</td>         </tr>       </table>     ) : (       <div>Loading session data...</div>     )   }

In this example, the

checkSession

function uses the

toSession

method from the Ory Client to make a request to the

/sessions/whoami

endpoint. If the session exists and is valid, it sets the session data in the component's state. If you're still having trouble, please provide more details about the error message or the issue you're experiencing. You can also refer to the [Ory Kratos documentation](https://www.ory.sh/docs/kratos/) for more information.

The error message "No valid session credentials found in the request" typically occurs when the Ory Kratos session cookie or token is missing or invalid in the request. This can happen for several reasons: 1. The session has expired: Ory Kratos sessions have a limited lifespan, which can be configured in the Kratos configuration file. If the session has expired, you will need to authenticate again to create a new session. 2. The cookie or token is not being sent with the request: This can happen if the

withCredentials

option is not set to

true

in your API requests, or if the

Authorization

or

X-Session-Token

headers are not correctly set. This option is necessary to include cookies in cross-origin requests. 3. The cookie or token has been deleted: If you or your browser has cleared cookies, the session cookie will be deleted. Similarly, if the session token has been removed from wherever it was stored, it will not be included in the request. To resolve this issue, you can try the following steps: 1. Ensure that you are sending the

withCredentials

option set to

true

in your API requests, or that you are correctly setting the

Authorization

or

X-Session-Token

headers. Here is an example of how to do this in a React app using the Ory Client:

tsx import { Configuration, FrontendApi } from "@ory/client"  const frontend = new FrontendApi(   new Configuration({     basePath: "<http://localhost:4000>", // Use your local Ory Tunnel URL     baseOptions: {       withCredentials: true,     },   }), )

2. If you are using a session token, ensure that it is being correctly retrieved from wherever it is stored and included in the request. 3. Try to authenticate again to create a new session. For more details, you can refer to the [Ory Kratos documentation](https://www.ory.sh/docs/kratos/).

Yes, you can create a project and set local environment variables programmatically. Here's a general outline of how you might do it: 1. Create a project: You can create a project using the Ory CLI with the

ory create project

command. This will return the details of the newly created project, including the project ID and slug. You can capture this output and parse it to get the values you need. Here's an example:

bash ory create project --name "My Amazing Project"

2. Set environment variables: Once you have the project details, you can set the environment variables in your shell. The exact method will depend on your operating system and shell, but here's a general example using bash:

bash export ORY_PROJ_ID=<project-id> export ORY_PROJ_SLUG=<project-slug> export ORY_SDK_URL=https://$<http://ORY_PROJ_SLUG.projects.oryapis.com|ORY_PROJ_SLUG.projects.oryapis.com> export ORY_API_KEY=<your-api-key>

Replace

<project-id>

,

<project-slug>

, and

<your-api-key>

with the actual values. Please note that the

ORY_API_KEY

is not provided when you create a project. You need to create it separately in the Ory console. For more details, you can refer to the [Ory CLI documentation](https://www.ory.sh/docs/guides/cli/cli-basics#create-a-project) and the [Ory Kratos documentation](https://www.ory.sh/docs/getting-started/integrate-auth/react#run-your-react-app).

To update the active schema for identities in a project using the Ory CLI, you can use the

ory update identity-config

command. This command updates the Ory Identities configuration of the specified Ory Network project. Here is an example of how to use the command:

bash ory update identity-config [project-id] --file /path/to/config.json

In the command above, replace

[project-id]

with the ID of your project and

/path/to/config.json

with the path to your configuration file. The configuration file should contain the new identity schema. Here's an example of how the configuration might look:

json {   "identity": {     "default_schema_id": "new-schema-id",     "schemas": [       {         "id": "new-schema-id",         "url": "base64://..."       }     ]   } }

In the configuration above, replace

new-schema-id

with the ID of your new schema and

base64://...

with the Base64-encoded content of your new schema. Please note that this command will overwrite all values in the Ory Identities configuration. If you want to update individual settings, you should use the

patch

command instead. For more details, you can refer to the [Ory CLI documentation](https://www.ory.sh/docs/cli/ory-update-identity-config#ory-update-identity-config).