Get user information from the id_token or oauth token in the request about go-endpoints HOT 3 CLOSED

Here's a much more juicy implementation: https://github.com/dhermes/go-endpoints/commit/b6a68e7fa38242803713676cb7c1101032e01db5

from go-endpoints.

Interesting. There's definitely something going on differently on production servers.

I've just updated https://go-endpoints.appspot.com to use endpoints.CurrentUser() with appropriate scopes and clientIDs:

instead of using appengine/user.CurrentOAuth() in GreetingService.Sign() method it now does this:

user, err := endpoints.CurrentUser(c, scopes, audiences, clientIds)
if err == nil {
    greet.Author = user.String()
} else {
    greet.Author = "Anonymous User (" + err.Error() + ")"
}

The interesting part is the following:

Try signing the guestbook using API explorer (don't forget to turn on "Authorize requests" switch to the right):
https://developers.google.com/apis-explorer/?base=https://go-endpoints.appspot.com/_ah/api#p/greeting/v1/greeting.greets.sign

What you'll see in the author field is Anonymous User (No request exists in the context.) which is failing exactly at this point:

req, ok := c.Request().(*http.Request)
if !ok {
    return nil, errors.New("No request exists in the context.")
}

(so, c.Request() is something else than http.Request in production)

Didn't really expect that but well, the docs did say "c.Request() is internal use only".

I can think about two solutions: (1) we'll have to use http.Request instead of Context here, or (2) @dhermes talks to App Engine - Go folks and try to uncover some truth / possible solutions :) though I suspect they'll say "use http.Request"

from go-endpoints.

Wow, I didn't know Github can cross-reference different repos.

Anyway, I updated go-endpoints guestbook demo and go-tictactoe repos to use latest changes from #12 (fix for c.Request().(*http.Request) not working in production) and integrated go-tictactoe/tictactoe package with go-endpoints demo so we can all play TicTacToe at https://go-endpoints.appspot.com/tictactoe now :)

from go-endpoints.