Hi All. I just started using AppWrite with Android (kotlin) and I am having some issues getting the JWT token to allow my user to pull down image from Storage with read permissions. I know the token is valid and not-expired because I checked the JWT expiration date and the token is also for my logged in user. I will show you the steps I have taken below:
I am logging in the user and getting a token:
val session = account.createEmailPasswordSession(email, password)
val token = account.createJWT()
...
Just to isolate Android from my AppWrite setup, I pulled the token out and plugged it into Postman to query my AppWrite Storage endpoint:
This is the message i get with that:
{
"message": "The current user is not authorized to perform the requested action.",
"code": 401,
"type": "user_unauthorized",
"version": "1.8.0"
}
I have given my user (the same one I have the token for) read permissions on my AppWrite Storage.
If I give my Storage Any with read permission, I am able to access the image in storage just fine. So it seems to be blocking based on my invalid token or my request url (I am just copying the file url from the Storage area in AppWrite to get the url).
Any help would be greatly appreciated!
Thanks!
Recommended threads
- is `account.get()` safe to be used in th...
I want to user's `id` for authentication. However, a while ago I was told in this server not to use `account.get()` and instead add user preferences for that us...
- Courtesy limit reset for non-profit migr...
Hi Team! I'm the architect for a 501(c)(3) non-profit project (Aaria's Blue Elephant) and we just hit our Free plan Database Read limit (currently at 164%). Th...
- RBAC design question
Hi, I am trying to create RBAC so we will have multiple orgs in the app each org will have 3 roles (admin, member and read only) what is the best way to go ab...