Temporal security using JWT Claim mapper

Community Support
1

Hi,

I am using Temporal Security Claim mapper using JWT token provider. I am using Java SDK to invoke the method .

workflowServiceStub.getQueryWorkflow(query)

Error

Error while searching Workflow query DEADLINE_EXCEEDED: deadline exceeded after 9.998986151s
Error while searching Workflow Information Query did not yield to any result. :

By default all the requests going through the interceptor.go to claim_mapper & authroze.

Does we need to set token inter communication between the 4 services (frontend / matching / worker / history)? If yes, how to do it?

2

Are you able to run the query via the web ui (click on a workflow run id and then the query tab)?

3

Does we need to set token inter communication between the 4 services (frontend / matching / worker / history)?

Generally, you don’t need to. The interceptor is only on the frontend. So, when frontend makes calls to history and matching, those calls should just go through. The trickier part is if a worker needs to call a frontend. Then it would not pass authorization in this setup. But for a query call you should be fine.
Do you have server logs to see what it happening there?

4

After clean up of the code all set.
Thanks.

1 Like
5

Hello @tihomir, Is there a typescript implementation of the Authorization Token supplier? if not, is there another way to be able to pass the token from workflow client to the authorizer (on the server)?

6

You should be able to pass JWT through the authorization header similar to what tctl does via the
TEMPORAL_CLI_AUTH env var (or use --auth prop) if that helps.

1 Like