i would crack carmen lopez•4w ago

Http Action no authentication

export const generateUrlForToken = httpAction(async (ctx, request)=>{
    const identity = await ctx.auth.getUserIdentity();
    
    if(identity == null){
        return new Response("No identity found",{
            status:401,
            headers:{
                "Access-Control-Allow-Origin": process.env.CLIENT_ORIGIN,
                "Vary": "origin",
            }
        });
    }
});

export const generateUrlForToken = httpAction(async (ctx, request)=>{
    const identity = await ctx.auth.getUserIdentity();
    
    if(identity == null){
        return new Response("No identity found",{
            status:401,
            headers:{
                "Access-Control-Allow-Origin": process.env.CLIENT_ORIGIN,
                "Vary": "origin",
            }
        });
    }
});

The identity keeps returning null in my http action. I plugged in the Auth0 access token in the request header as shown below.

const link = await (await fetch("https://blablabla.convex.site/tiktokAuth", {
            method:"GET",
            headers: { Authorization: `Bearer ${await getAccessTokenSilently()}` }
        })).text();

const link = await (await fetch("https://blablabla.convex.site/tiktokAuth", {
            method:"GET",
            headers: { Authorization: `Bearer ${await getAccessTokenSilently()}` }
        })).text();

And I see in the network tab that it does send over the Authorization header and I logged it in the http action and it does send over. But for some reason I never get the identity object. Thanks for ur guys help

4 Replies

Convex Bot•4w ago

Thanks for posting in <#1088161997662724167>. Reminder: If you have a Convex Pro account, use the Convex Dashboard to file support tickets. - Provide context: What are you trying to achieve, what is the end-user interaction, what are you seeing? (full error message, command output, etc.) - Use search.convex.dev to search Docs, Stack, and Discord all at once. - Additionally, you can post your questions in the Convex Community's <#1228095053885476985> channel to receive a response from AI. - Avoid tagging staff unless specifically instructed. Thank you!

Clever Tagline•4w ago

There is no user when calling an HTTP endpoint. To get the data passed in the headers and validate the request, you'll need to read that from the request object passed to the function:

export const generateUrlForToken = httpAction(async (ctx, request) => {
  let auth = request.headers.get('Authorization')
  // Validate the authorization
  // If invalid, return a Response with a 401 status
  // Otherwise perform any needed logic then return a Response with a 200 status
}

export const generateUrlForToken = httpAction(async (ctx, request) => {
  let auth = request.headers.get('Authorization')
  // Validate the authorization
  // If invalid, return a Response with a 401 status
  // Otherwise perform any needed logic then return a Response with a 200 status
}

erquhart•4w ago

I thought the same, turns out you can pass in a jwt: https://docs.convex.dev/functions/http-actions#authentication

HTTP Actions | Convex Developer Hub

HTTP actions allow you to build an HTTP API right in Convex!

Clever Tagline•4w ago

Ah, gotcha. I hadn't seen that before. I'm not familiar with JWTs yet, so I'm afraid I can't be of further help.

Http Action no authentication

Did you find this page helpful?