How to access public api in hasura

Question

I'm running a docker container with admin secret. In the below image, you can see the roles under the permissions window.

For category table, I set public role for SELECT option and there is no restriction for that role to access any query.

But my problem is I can't access the query using public role, hasura engine ask admin-secret. see the below image. How can I access this API without giving admin credentials?

Have you set `HASURA_GRAPHQL_UNAUTHORIZED_ROLE` to "public" or used --unauthorized-role=public flag in the startup command? — avimoondra, Jul 01 '20 at 06:55
That's likely the issue! Looks like you are running in JWT mode, and have not passed "Authorization: Bearer " header. — avimoondra, Jul 01 '20 at 16:05

score 2 · Accepted Answer · answered Jul 01 '20 at 16:05

Relevant docs: https://hasura.io/docs/1.0/graphql/manual/auth/authentication/unauthenticated-access.html#unauthenticated-public-access

If you are using webhook-based authentication, "for unauthenticated access, you can return a 200 status response with your defined unauthenticated role, e.g: { "x-hasura-role": "<anonymous-role>" }."

If you are using jwt-based authentication, "you can use the env variable HASURA_GRAPHQL_UNAUTHORIZED_ROLE or --unauthorized-role flag to set a role for unauthenticated (non-logged in) users."

The unauthenticated role can be called anything, in your case it would be "public"

Do i have to pass HASURA_GRAPHQL_UNAUTHORIZED_ROLE this in request header with value anonymous. I have set up this role and made public api. Now, i wanted to call that api from Apollo. My Hasura instance is set up with JTW mode. But some api i wanted to access from apollo in vue app as public to which I have also set up HASURA_GRAPHQL_UNAUTHORIZED_ROLE role — Wikki, Nov 13 '21 at 15:59

score 0 · Answer 2 · answered Jan 06 '23 at 16:37

you have to set the HASURA_GRAPHQL_UNAUTHORIZED_ROLE to the unauthorized role name in the env variables of the cloud console sample config

in my case, it's called public, then subsequent request should use the following header

x-hasura-default-role: public without any need for JWT or Admin.

How to access public api in hasura

2 Answers2