Graphql-engine: How can i create API token's for my users ?

[polRk]

I using firebase auth, and i want to create API tokens for my users (role user) with role 'API'. How can I implement this?

[arjunyel]

https://firebase.google.com/docs/auth/admin/custom-claims

[polRk]

Firebase tokens expire in 1 hour. It's not good for me.
I’m thinking about how to save tokens in the database and compare their _exists before the request. How to configure Hasura to work on authorization and without authorization?

[0x777]

You can configure an 'unauthenticated' role and then define permissions for that role: https://docs.hasura.io/1.0/graphql/manual/auth/authentication/unauthenticated-access.html.

[polRk]

Yes ! This is my solution.
HASURA_GRAPHQL_UNAUTHORIZED_ROLE: "anonymous"

And permissions

{
  "_and":[
    {
      "_exists":{
        "_table":{
          "name":"user",
          "schema":"public"
        },
        "_where":{
          "id":{
            "_eq":"X-Hasura-User-Id"
          }
        }
      }
    },
    {
      "_exists":{
        "_table":{
          "name":"token",
          "schema":"public"
        },
        "_where":{
          "_and":[
            {
              "id":{
                "_eq":"X-Hasura-Token-Id"
              }
            },
            {
              "user_id":{
                "_eq":"X-Hasura-User-Id"
              }
            }
          ]
        }
      }
    }
  ]
}