hello there!
We're starting to play around self-hosting supertokens core using the provided helm chart (
https://github.com/supertokens/supertokens-docker-postgresql/tree/master/helm-chart)
So to enable API keys, I'm doing this:
--set apiKeys.enabled=true --set "apiKeys.keys={${{ secrets.ST_API_KEY }},${{ secrets.ST_API_KEY_2}}}" (in gh actions) as I'm told to do so by the chart docu
then I'm trying to test it out like:
curl --location --request PUT 'http://supertokens.mysvc.svc.cluster.local:3567/recipe/role' \
--header 'api-key:
' \
--header 'Content-Type: application/json; charset=utf-8' \
--data-raw '{
"role": "user2",
"permissions": [
"read"
]
}'
I'm getting
{"status":"OK","createdNewRole":true}
with:
- the right key
- a wrong key
- i can leave out the api-key header completely
Why is that?
thanks