https://www.ory.sh/ logo
c

careful-engineer-44837

05/06/2022, 12:07 PM
Is there any way to make Keto display the requested relation tuples received via HTTP POST?
s

steep-lamp-91158

05/06/2022, 12:12 PM
what do you mean by display? you can GET them again
or do you mean log?
c

careful-engineer-44837

05/06/2022, 12:15 PM
I'm sorry, I meant logging the requested relation tuples. I'm trying to debug the problem I posted in #oathkeeper but I don't know yet how to find out which relation tuple Oathkeeper sends to Keto as part of the authorization request. When setting
log_level=debug
and
leak_sensitive_information=true
in the global Keto config it only tells me the authorization is forbidden but not based on which checked relation tuple.
s

steep-lamp-91158

05/06/2022, 12:29 PM
ah I see... it should log it when using the GET check API, because then the params are in the URL query
but yeah, I agree that it would help to log the checked tuple on log level debug or trace
it just needs a log statement in this func https://github.com/ory/keto/blob/8c5eb9dcbea2827a27187e5274025c13394001ff/internal/check/engine.go#L116-L123 maybe you would be up for a pr?
c

careful-engineer-44837

05/06/2022, 12:32 PM
Yep! Since
remote_json
seems to only support HTTP POST I dont think theres any other way but to directly capture network traffic. And that seems inconvenient
2 Views