Literally follow the docs doesn't work on GKE cluster

Describe the bug
I've been reading up and down the docs to install edge stack on gke cluster and never works...no matter which version.
To Reproduce
Steps to reproduce the behavior:

Go to https://www.getambassador.io/docs/emissary/latest/topics/running/ambassador-with-gke/
Follow the steps on docs...just don't work

Also tried a recent post and same problems...
https://blog.searce.com/microservices-authentication-using-ambassador-api-gateway-on-gke-76437fcbd2c2
Expected behavior
A clear step by step installation guide that actually works...
Also very confusing setting up https on GKE, more details on how to config would help a ton.
Versions (please complete the following information):

Ambassador: 3.3
Kubernetes environment v1.24.5-gke.600 on GKE

Additional context
I need to setup two microservices with one authservice checking access on an ingress load balancer.
Also setup https following the docs don't work, keeps saying unsafe website on browser.
Critical misinfo on docs (https://www.getambassador.io/docs/emissary/latest/topics/running/ambassador-with-gke/):

Just after I run the step 02, it creates an ambassador service with 0 pods ?
Step 3 is outdated, apiVersion: extensions/v1beta1 don't work on GKE cluster with new k8s version.
Step 3 points to a service named ambassador with 0 pods.
All steps use default namespace
Clean install creates a service named edge-stack with type LoadBalancer, but the docs for GKE say this is not correct...but doesn't show how to fix it.

I'm not sure about the issue you are facing, but I can suggest you some solutions.
If the service is not picking up any pods, then it should be because of the selector mentioned in the service or the labels mentioned in the deployment
if you are getting a 502 server error. it could be the unhealthy backend, check your ingress healthcheck to confirm. If its case, apply a backend config and mention the annotation in the service.


Installing from crate.io failed, couldn't compile

Wanting to try your tool, I ran cargo install kmeans_colors.
It started to download and build the version 0.3.3 from crate.io.
But it ultimately failed, with the following errors:
(...)
   Compiling approx v0.3.2
   Compiling image v0.23.11
   Compiling palette_derive v0.5.0
   Compiling structopt-derive v0.4.13
   Compiling structopt v0.3.20
   Compiling kmeans_colors v0.3.3
error[E0433]: failed to resolve: could not find `CompressionType` in `png`
  --> /Users/bvermont/.cargo/registry/src/github.com-1ecc6299db9ec823/kmeans_colors-0.3.3/src/bin/kmeans_colors/utils.rs:89:25
   |
89 |             image::png::CompressionType::Best,
   |                         ^^^^^^^^^^^^^^^ could not find `CompressionType` in `png`

error[E0433]: failed to resolve: could not find `FilterType` in `png`
  --> /Users/bvermont/.cargo/registry/src/github.com-1ecc6299db9ec823/kmeans_colors-0.3.3/src/bin/kmeans_colors/utils.rs:90:25
   |
90 |             image::png::FilterType::NoFilter,
   |                         ^^^^^^^^^^ could not find `FilterType` in `png`

error[E0433]: failed to resolve: could not find `CompressionType` in `png`
   --> /Users/bvermont/.cargo/registry/src/github.com-1ecc6299db9ec823/kmeans_colors-0.3.3/src/bin/kmeans_colors/utils.rs:127:25
    |
127 |             image::png::CompressionType::Best,
    |                         ^^^^^^^^^^^^^^^ could not find `CompressionType` in `png`

error[E0433]: failed to resolve: could not find `FilterType` in `png`
   --> /Users/bvermont/.cargo/registry/src/github.com-1ecc6299db9ec823/kmeans_colors-0.3.3/src/bin/kmeans_colors/utils.rs:128:25
    |
128 |             image::png::FilterType::NoFilter,
    |                         ^^^^^^^^^^ could not find `FilterType` in `png`

error: aborting due to 4 previous errors

For more information about this error, try `rustc --explain E0433`.
error: failed to compile `kmeans_colors v0.3.3`, intermediate artifacts can be found at `/var/folders/s7/jfsvj8x90tq9yf84p62t5vqd4y5v7f/T/cargo-installBCF7Ud`

Caused by:
  could not compile `kmeans_colors`.

To learn more, run the command again with --verbose.

If I check out the repo, building works fine though. So my hunch is that what is published on crate.io might be broken?

Thanks for the issue! I didn't know this was broken.
It looks like a problem upstream in the image crate.  Recently, the png module was moved into a codecs module so instead of the path being image::png, it's now image::codecs::png for the errors you've received. I've submitted an issue for that in  image. When installing from cargo, it tries to grab image version "0.23.11" so it fails. When checking out this repo, I've checked in a Cargo.lock with image version "0.23.6" so the build succeeds.
In the meantime, I'll try to update the dependency and offending lines of code. I can push out a new version of this crate when I get the time since I don't like the idea of the crate being broken on crates.io.

I've published version 0.3.4 to crates.io. I was able to install it successfully. :slightly_smiling_face:
   Compiling palette_derive v0.5.0
   Compiling structopt v0.3.20
   Compiling kmeans_colors v0.3.4
    Finished release [optimized] target(s) in 56.01s
  Installing C:\Users\user\.cargo\bin\kmeans_colors.exe
   Installed package `kmeans_colors v0.3.4` (executable `kmeans_colors.exe`)

I greatly appreciate the report. This same issue prevented another crate of mine from installing, but I've fixed that. I wouldn't have spotted this for a while.

Thanks for the quick fix! I tried and it works flawlessly. I'm closing this issue then.

FYI : there is something really cool about running your app through some of my random pictures like

It was a lot of fun to write but more fun to see the results. I've had some thoughts about adding a dithering module to this crate for aesthetics.
A crate I finished recently works well with this crate https://github.com/okaneco/rscolorq. It's in a similar family of algorithms as k-means but dithers based on the pixels around it. It's fairly computationally expensive and doesn't have as clean of convergence criteria, but I like making images with it too. I threw your image into kmeans_colors, then piped the colors into rscolorq and a 50% size copy of the image. It's best to view at full size.
kmeans_colors -i github.jpg -p --no-file
# 13110e,2c2b28,472218,595139,b72c19,748b88,c08d63,dbe4dd
rscolorq -i github.jpg -o github-8c.png -c 13110e,2c2b28,472218,595139,b72c19,748b88,c08d63,dbe4dd

And with letting the program find the colors, I've noticed it has some weakness sometimes due to initial choices or lower image contrast.
rscolorq -i github.jpg -o github-8-auto.png --iters 4 --auto

You... do really cool stuff! It's amazing, I was actually thinking about how to have some nice effect like in the game Return of the Obra Dinn.
You could not be more on point!
I'm gonna use your rscolorq app and try a few things! Thanks for sharing!

kmeans_colors.exe -i '.\Japan 01-08-2013 20-54-35.jpg' -k 4 -p --no-file
# 181412,514133,af3b21,bcc3b8
rscolorq.exe -i '.\Japan 01-08-2013 20-54-35.jpg' -c 181412,514133,af3b21,bcc3b8 -o tokyo.png

It looks just great!

That does look nice. I like that the algorithm has a sort of chunky, high-ISO film grain look when viewed from a slight distance.
If you're interested in Obra Dinn, I know there are some dev blogs about the dithering used. It seems like a blue noise lookup texture on a sphere was used, and there was a temporal aspect that needed to be overcome from player movement (not to mention scaling for different resolutions).
(404'd link in the first post)
https://web.archive.org/web/20140214164527/http://home.comcast.net/~ulichney/CV/papers/1993-void-cluster.pdf
https://forums.tigsource.com/index.php?topic=40832.msg1045205#msg1045205
https://forums.tigsource.com/index.php?topic=40832.msg1363742#msg1363742

Thanks for the links! Things like that is one of the reason why I decided to learn rust in the first place: to manipulate image data, and write some algorithm, things I really don't do in my android dev daily job.
I'll take a close look at the articles.
Let me know if you want some helps for some basic tasks!


Adding support for Amazon OpenSearch Service

*Issue #, if available:  https://github.com/aws-samples/aws-bookstore-demo-app/issues/31
*Description of changes:  Updated stack to support Amazon OpenSearch Service.  Ensured the primary stack template and the template container lambda warmers were both in-sync.
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

If you're going to change the environment variables passed to the lambdas like "ES_ENDPOINT" => "OS_ENDPOINT" you have to change it in the lambdas too.  Like this one:
https://github.com/aws-samples/aws-bookstore-demo-app/blob/master/functions/APIs/search.py#L14


Add nif_image_write_to_array to copy the matrix

Adds nif_image_write_to_array to copy the matrix
of any image to be able to interop with other
libraries like eVision and Nx.
Adds Vix.Vips.Image.write_to_array/1 for the
public API to return a reference to the image matrix
that can be passed to other Elixir/erlang libraries.
Not ready for production use but would welcome your
input and guidance to see if I'm heading the right way.
Next step will be the reverse: new_from_array to consume
arrays from other libraries.
In this version the matrix is copied. This to avoid memory
ownership issues. It would be desirable to find a memory
safe way to share the image matrix but that comes with both
concurrency and memory safe issues.

Excited to see you merge the pipe source/sink branch into master as well!

Thanks for the feedback and yes, there are definitely challenges in sharing access to the underlying data safely. I hope you will have a flash of inspiration sometime!
In the meantime, I have reverted nif_image_write_to_array and implemented the very similar nit_image_write_to_binary  to take the image data, create a binary copy, and return that.  A lot less efficient but a lot safer.
There are some open items for your consideration:

I am using a copy of the Nx.Tensor.t type to package the binary, the tensor shape and the format. I think using this format will aid other integrations with other you and other library builders are willing.
I don't have a good way to translate the Vix.Vips.Enun.VipsBandFormat.t types into native data types - I don't there is currently a Vips.Nif function to return the native data type sizes?

With your zero-copy code in place I think we open up a lot of opportunities (and its how PyVips integrates with Numpy and PIL as well).  Hopefully eVision will follow along.
As for the how do we share meta data about a memory blob, I think having a canonical form helps. I copied the Nx tensor struct approach not to tie closely together but more to advocate for a consistent strategy for sharing amongst libraries and I think the Nx struct isn't a bad approach.  What do you think?
I don't believe there is an API in the BEAM to return the size of native types but you will know that much better than I do.  If there isn't one then I think even I can create a NIF function to return that data. Let me know?


[stable/sonatype-nexus] Add resource limits/requests to deployment config

Addresses issue from #2731

/ok-to-test


Error flagging services in files with just body

For example, in pyLODE there is a server script which uses falcon (one of our recognized software deps); but it is not flagged as such. We have to look into these cases.

Closing, this was a small issue caused by a typo


UI Scaling Broken With Display Scaling Overrides

When forcing Windows to allow Runelite to control its own hi dpi scaling, the 117 HD plugin's UI Scaling does not work as expected. The game itself renders great making use of the full display resolution, but the UI is blurry when using Nearest Neighbor for UI scaling.
Steps to reproduce the behavior:

Right click Runelite icon in taskbar, right click Runelite and click properties
Click on Compatiblity->Change High DPI Settings
Check Override High DPI Scaling Behavior and set to Scaling performed by Application
Set Runelite 117 HD plugin to use Nearest Neighbor for UI Scaling

Expected: UI is sharp upscaled with nearest neighbor scaling
Actual: UI is blurry as if it's being scaled bilinear by Windows still
Environment (please complete the following information):

OS: Windows
RuneLite version: 1.7.24
Launcher version: 2.1.5

This is fixed in https://github.com/runelite/runelite/commit/8c4390baa2dd0e9f791976d9be6a232eb9fa5028


vm/adb: unlink symlinks before calling rm

rm fails if a symlink exists but points to a nonexistent location.

Before sending a pull request, please review Contribution Guidelines:
https://github.com/google/syzkaller/blob/master/docs/contributing.md

I am still seeing this issue come up during syz-repro run. When I adb shell into my test cuttlefish instance, I see /data/syz-execprog, syz-executor, and syz-executor.0 from the previous run:
vsoc_x86_64:/ # ls /data/syzkaller*
ls: /data/syzkaller*: No such file or directory
1|vsoc_x86_64:/ # ls /data/syz*
/data/syz-execprog  /data/syz-executor  /data/syz-executor.0

so we should unlink /data/syz*?
But I see this issue repeated either way even after I unlink these symlinks and delete them.

As far as I remember rm -Rf /data/syzkaller* is supposed to delete temporary data files left after previous fuzzing runs, so they don't pile up infinitely. Binaries should not be a problem.


not compatible with latest zotero

Is this a common issue recently to use ZoteroPreview.xpi on Win10 machine?

I am facing the same issue with version 6.0.13. Is there any workaround available?

Will need to research

What OS?

I don't know that it will help, since I'm a bit mystified by the error, but I just released a new version.
If you rename the .xpi to .zip does that make a difference? Does it open as a .zip file?

Unfortunately, both attempts did not work. I still get the same error message.
I am using Win 10 Enterprise LTSC x64 on a company notebook. I will try your plugin on my personal computer later. Lets see, if it works there.

FYI - the problem appears to be that I haven't set up this repository in quite the right way. Please make sure to download Zotero Preview from either the Releases page or from this link

If it helps, I have no problems with the plugin. It auto-updated today with no problems.
Windows 10; Zotero 6.0.14.beta1

I released a couple of updates and cleaned up the GitHub repository itself. I think it should be good now.

I downloaded version 0.1.16 from the release page and it works like a charm. That's exactly what I was looking for.
Thank you!


Terminal Glasses Bridge: glasses.addText() returns string insted of the displayes object.

I am using DW20 1.0.3 which claims to use 0.2.0-snapshot-139.
The glasses.addText()  of terminal glasses bridge returns a string instead of the displayed object.
The string contains something like "openperipheral.adapter.object.LuaObjectWrapper$WrappedLuaObject@2d86d251"
It worked in DW20 1.0.2 (OPA 0.2.0-snapshot-122).

Guess what? Ancient version (same as #48). And duplicate of #41


Show that it is multiple tables :)

Makes sense... a good 'doc fix'.
I think there is some space to come for samples, and a demo container running live on Azure


New Rule: number of images validation

Rule details
checking how many images are used on a website
Related ECMAScript feature
No response
What type of rule is this?
JavaScript/TypeScript code
Which codebase the rule should be implemented?
ec0lint / ec0lint-style
Participation

[ ] I am willing to submit a pull request to implement this rule.

Additional comments
No response

Backlog of release v3.0.p

free to take


remove tmp files.

all this files is generated by ./config , so just remove them.
And add a  missing define.

The file '.gitignore' is missing, it's important.

Bug fix 请以说明的方式提供，例如 https://github.com/guanzhi/GmSSL/issues/17
可以方便我们修改并且避免以后再次出现类似问题。


Smart AssemblyInfo, that writes output only if it has changed

Smart AssemblyInfo, that writes output only if it has changed, so the solution needs to be rebuild only if AssemblyInfo really has changed.

Any idea why this was never merged? If multiple people are trying to report and fix this it seems like at least having a comment why it was ignored this long would make sense?


⚠ Bofrost.de has degraded performance

In d54b40a, Bofrost.de (https://www.bofrost.de) experienced degraded performance:

HTTP code: 200
Response time: 1581 ms

Resolved: Bofrost.de performance has improved in f96825a.


Found and valid commands being highlighted red

When using tab to complete and suggest commands, some valid and found commands are highlighted red. This implies an error. For example cryptsetup.

This isn't sufficient to reproduce the issue or track down the cause. What version are you on? What is the exact input? Is the command in $PATH and executable?


Problem with "split" function

Hi.
When I execute:
./gnip_search.py -n 10 -f"The old apple revels in its authority" json
I obtain:
AttributeError: 'int' object has no attribute 'split'
./gnip_search.py -n 10 -f"The old apple revels in its authority" wordcount
Traceback (most recent call last):
File "./gnip_search.py", line 237, in
print(g.get_result())
File "./gnip_search.py", line 176, in get_result
, hard_max=self.options.hard_max
File "/home/user/Gnip-Python-Search-API-Utilities-master/search/results.py", line 64, in init
, show_query = show_query
File "/home/user/Gnip-Python-Search-API-Utilities-master/search/api.py", line 303, in execute
tmp_list = self.twitter_parser.procRecordToList(rec)
File "/home/user/ENV3/lib/python3.5/site-packages/acscsv/twitter_acs.py", line 78, in procRecordToList
return self.get_output_list(d)
File "/home/user/ENV3/lib/python3.5/site-packages/acscsv/twitter_acs.py", line 91, in get_output_list
output_list.append( Field_id(d).value )
File "/home/user/ENV3/lib/python3.5/site-packages/acscsv/twitter_acs_fields.py", line 77, in init
tmp = self.value.split(":")
AttributeError: 'int' object has no attribute 'split'
What is wrong?
Thanks

I cannot reproduce.  Can you share some info on platform, os, terminal etc. to see if there is some debugging info we can add to help sort this out?  Thanks.

Just to summarize.

I download both pip and GitHub versions and they give me different results! Since I assume I can trust GitHub, I'm using "./gnip_search.py" from inside the "Gnip-Python-Search-API-Utilities-master" folder obtained uncompressing GitHub clone download, and NOT "gnip_search.py" (that points to /usr/local/bin/gnip_search.py).
I'm on Ubuntu 16.04 64bit. Same error with both python 2.7 and 3.5 versions.
Additionally, if I perform the same command adding "-q" at the end, I have:
gnip_search.py -n 10 -f"The old apple revels in its authority" json -q
API query:
Traceback (most recent call last):
File "/usr/local/bin/gnip_search.py", line 237, in
print(g.get_result())
File "/usr/local/bin/gnip_search.py", line 176, in get_result
, search_v2=self.options.search_v2
File "/usr/local/lib/python2.7/dist-packages/search/results.py", line 65, in init
, show_query = show_query
File "/usr/local/lib/python2.7/dist-packages/search/api.py", line 276, in execute
sys.stderr.write(self.rule_payload + '\n')
TypeError: unsupported operand type(s) for +: 'dict' and 'str'
This using pip version (gnip_search.py). Instead, if I execute the same query simulation within local path (./gnip_search.py), the command is executed correctly.

So, I guess I must use local version (GitHub one), but still have the "split" problem. I added a print of "self.value" inside /usr/local/lib/python2.7/dist-packages/acscsv/twitter_acs_fields.py and I have the Twitter_ID as the result before the split. That's why the next error I highlighted.


Implementation of a framework using publisher-subscriber architecture

Kafka-like behavior using Redis message broker
Asynchronous task processing using celery
FastAPI-based web server
Microservices architecture

Cognito based authentication system

Sort of this implementation - https://inference.roboflow.com/using_inference/inference_pipeline/


Please - connect to IRC everytime you want to do something!

Hello!
Everytime we are making something and we are not updating our files actively, someone can do an commit and it mixes things up and its hard to revert everything back.
We need to get everyone to join the IRC chat @The-QullzToxic  created a while ago. Its really important and we can keep track on whats everyone doing.
Even though theres nobody online, stay there! I'm usually online 12 hours a day on the IRC and i would love for someone else to talk there :sweat_smile:
https://webchat.freenode.net/ Username: Your GitHub name and connect to #OpenSprites

I'd rather not use the chat and use issues instead - more trackable

But still, there are  people online on github, but not online on IRC, I want to do something but there is no one there

^exactly

fixed! :D http://dev.opensprites.x10.mx/

Not completely- hit login and the pop up is messed up

The popup is fine, it works for me. :P Registration links need to be fixed though. I meant to post this on #60

I want to discuss about the upload proscess with someone on the IRC

First login and registration have to be finished though

Also, irc isn't that practical to track stuff - closing


Deactivate safeenv for only some globals that are known to change value

I'm working on adding Luau support to Plasma. Their existing Lua API has some globals (V1 through V8) that change value. I'm trying to express this in Luau without breaking the existing API too badly, and I see three paths forward:

Leave safeenv active, deal with the possibility of them being imported. None of these globals are tables, but it will be problematic if they are cached automagically at any point.
Deactivate safeenv and deal with losing fastcall and some other important performance improvements.
Use an __index metamethod to catch reads to those globals.
Somehow prevent the import optimization from touching those globals.

1 through 3 don't look particularly attractive:

1 is strictly incorrect -- safeenv is not for controlling the import optimization but rather for expressing the purity of the environment in general, which concerns more things than just import. Leaving it enabled with the environment being somewhat impure could cause unwanted side effects to be observed by users.

2 is too far -- code is only loaded once into the thread, and the set of libraries and functions available does not ever change. Only the globals V1 through V8 change. It would be a shame to see the entire thing completely deoptimize because of these globals.

3 looks like it would be a workaround, but the import resolution does actually follow index tables and even functions, so this won't work. Safeenv truly assumes that the environment is entirely pure.

4 looks like it would work, but I don't think CompileOptions::kMutableGlobals forbids the global itself from being cached (because it is designed for things like _G, workspace, and etcetera, which can be cached themselves due to not changing value). If this is true, there is currently no way to do 4 with Luau.
That's what my feature request is about; we could introduce a new option, kVolatileGlobals for example, which holds globals which change value over time, suppressing the import optimization for those globals.
I am open to writing a PR for this, I just want to make sure it's something you'll accept. What do you think?

And I should mention that one other option is to set V1-V8 globals per thread after luau_load is called. Depending on the environment setup this may or may not be feasible.

I'm assuming it's not an option to change the API, eg change it to a non-volatile global V that's indexed with 1-8?

I actually hadn't thought of that. That would indeed break compatibility a bit, I have some breaking changes but mostly edge cases (i.e. error messages). Since this is a demo of a game that's going to be a lot different in Early Access, I'm not super afraid to break things.

And I should mention that one other option is to set V1-V8 globals per thread after luau_load is called. Depending on the environment setup this may or may not be feasible.

This is actually what happens already. The threads are per-node and each node has its own inputs, so they are set per-thread. (As if user code itself assigned those globals.) The code is loaded before the globals are set.
Is this the official/idiomatic way to do this? If there is a guarantee that nil values won't be imported, then that would satisfy my use-case perfectly.

Yeah it should be safe to rely on this.

OK, I will consider this issue resolved then.


After 13.6.1 update program is not working correctly [BUG]

As you can see the dragon timer is showing the wrong dragon and the tabs are not working at the moment. The program sometimes crashes too but I couldn't find a crash log for that.

Did you do anything else for this? Cause I updated the offsets as you specified and it still didn't work

this is the only thing I changed

Damn. Even when I tried a fresh install that did not work.

Hey just noticed that it's broken again. There was an update today that riot did. I think it was a hotfix for the new champion and it look likes it broke the program again.

UPDATE (FIXED AGAIN)
{
"OffsetVersion": "13.6.1",
"GameOffsets": {
"Manager": "0x186e154",
"MapCount": "0x2c",
"MapRoot": "0x28",
"MapNodeNetId": "0x10",
"MapNodeObject": "0x14"
},
"ObjectOffsets": {
"ID": "0x8",
"NetworkID": "0xb4",
"Team": "0x34",
"DisplayName": "0x54",
"DisplayNameLength": "0x64",
"Pos": "0x1dc",
"Mana": "0x29c",
"MaxMana": "0x2ac",
"Health": "0xe7c",
"MaxHealth": "0xe8c",
"CurrentGold": "0x1bb4",
"GoldTotal": "0x1bc4",
"EXP": "0x32ec",
"Name": "0x2b04"
},
"FileVersion": "1.0"
}
the "Manager" : switched from "0x186D154" to "0x186e154"


SignalFx.Tracing.dll strong name validation fails, asp.net unable to start

Describe the bug
SignalFx.Tracing strong name validation fails, asp.net unable to start
To Reproduce
Steps to reproduce the behavior:

Create a new ASP.NET Web Application (Replicated on on .NET framework 4.5, 4.6 and 4.7.1)
Add the SignalFx.Tracing.OpenTracing nuget package
Run the project (IIS or IIS Express)

`Could not load file or assembly 'SignalFx.Tracing' or one of its dependencies. Strong name signature could not be verified.  The assembly may have been tampered with, or it was delay signed but not fully signed with the correct private key. (Exception from HRESULT: 0x80131045)
=== Pre-bind state information ===
LOG: DisplayName = SignalFx.Tracing
(Partial)
WRN: Partial binding information was supplied for an assembly:
WRN: Assembly Name: SignalFx.Tracing | Domain ID: 2
WRN: A partial bind occurs when only part of the assembly display name is provided.
WRN: This might result in the binder loading an incorrect assembly.
WRN: It is recommended to provide a fully specified textual identity for the assembly,
WRN: that consists of the simple name, version, culture, and public key token.
WRN: See whitepaper http://go.microsoft.com/fwlink/?LinkId=109270 for more information and common solutions to this issue.
LOG: Appbase = file:///C:/src/WebApplication1/WebApplication1/
LOG: Initial PrivatePath = C:\src\WebApplication1\WebApplication1\bin
Calling assembly : (Unknown).`
This issue is not present in SignalFx.Tracing.OpenTracing v0.1.2. Anything later (0.1.3 - 0.1.5) fails
Doesn't seem to be an issue with .NET core runtimes
Runtime environment:
Windows 10 pro 1909
.NET 4.8.03752

Thanks for reporting @narth.

Hi @nfaulk release 0.1.6 is available now with proper strong name signature.


Migrate out of react-responsive

Consolidating our usage of 3rd party hooks under the mantine hooks library.
react-responsive -> @mantine/hooks https://mantine.dev/hooks/use-media-query/
See #2935

Marking as important as we should try to minimise our dependencies before attempting to migrate to Vite.


Next texture matrix

This PR contains multiple serious changes.

TextureMatrix is stored in uvMatrix field
Texture's _updateUvs is not a public method, because devs change the frame all the time, for example for  HPBar's.
Mesh is up-to-date with v4
Mesh opts parameter in constructor marked as temporary
Removed duplicate RenderTexture file
Changed several instances of old hasLoaded flag to valid

Hamster NineSlicePlane - https://jsfiddle.net/Hackerham/cpL5n1u9/9/
Hamster NineSlicePlane Canvas - https://jsfiddle.net/Hackerham/cpL5n1u9/10/
Animated Plane (no trim) -  https://jsfiddle.net/Hackerham/s56wv7aa/6/
Animated Plane Canvas -  https://jsfiddle.net/Hackerham/s56wv7aa/11/
Animated Plane uploadUvMatrix - https://jsfiddle.net/Hackerham/s56wv7aa/10/

As for public vs private, the problem is that when people use Mesh in projects, they need those parameters. It would be good to have custom scopes like in Flash. "very public", "public"," for tweaks" ,"for plugins", "super-private"

In pixi v3 it was difficult to use Texture regions, and in v4 we've really improved the situation. Now Texture Region API is stable enough to be used by users who know what Atlas is.


Custom Headers for Download-File

In our pipelines we have the need to authenticate using Oauth2 since we have a private storage container, we are using your Download-File in the scripts and I do not want to use a SAS token. I did not find any other way than this, perhaps you have another idea that doesn't need a commit? :)
$context = New-BcAuthContext -clientID "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" `
                             -tenantID "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" `
                             -clientSecret "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx" `
                             -scopes "https://storage.azure.com/.default"

$headers = @{
    "Authorization" = "Bearer $($context.accessToken)"
    "x-ms-version" = "2017-11-09"
}

Download-File -sourceUrl "https://storage.blob.core.windows.net/container/file.file" `
              -destinationFile "c:\temp\file.file" `
              -headers $headers

looks good - doesn't change anything for people who doesn't specify the parameter and adds functionality.


TypeError: init() got an unexpected keyword argument 'info_dict'

I ran the demo.ipynb and encountered the following error. Maybe we do not need info_dict=info_dict?

---------------------------------------------------------------------------

TypeError                                 Traceback (most recent call last)

<ipython-input-13-cced5658f81f> in <module>
     35                   solver=solver, eval_class=eval_class,
     36                   use_predicted_class=True,
---> 37                   info_dict=info_dict, **kwargs)
     38
     39

~/repos/robust-gcn-structure/robust_gcn_structure/certification.py in certify(i, A, X, weights, z, local_changes, global_changes, solver, eval_class, use_predicted_class, **kwargs)
    666
    667     certification = BranchAndBoundCertification(i_th, A, twohop_nbs, onehop_ixs_th, onehop_nbs, X, weights,
--> 668                                                 local_changes, global_changes, **kwargs)
    669
    670     if eval_class is None:

TypeError: __init__() got an unexpected keyword argument 'info_dict'

Yes, you were correct. Thanks!


Document CityDB WFS?

Hey all,
we need to decide, if we are going to document the WFS here too.

The current WFS implementation is not compatible with the new 3DCityDB 5. We can leave it out for the new documentation. We have a new OGC Features API service on the roadmap. But the development is too early to include it. So, no action required at the moment.


Refactored metadata API in preparation for encryption API overhaul

Issue #, if available:
Description of changes:
By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

I have no idea what the relevant code is doing, but the python looks good to me. I'm OK with approving if you've checked that the notebooks still work.


Fix aliases to reflect latest install directories.

Codecov Report

Merging #55 into master will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master      #55   +/-   ##
=======================================
  Coverage   25.49%   25.49%
=======================================
  Files          39       39
  Lines        1769     1769
  Branches      192      192
=======================================
  Hits          451      451
  Misses       1296     1296
  Partials       22       22

Impacted Files
Coverage Δ

lib/python/treadmill_aws/bootstrap/aws_aliases.py
0% <ø> (ø)
:arrow_up:

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update bc7768b...c0c3529. Read the comment docs.


$graph_node_fillable_fields

Hello.
I have a Users model like this :
` use SammyK\LaravelFacebookSdk\SyncableGraphNodeTrait;
class Users extends Model
{
use SyncableGraphNodeTrait;
protected static $graph_node_fillable_fields = ['id', 'name'];

protected static $graph_node_field_aliases = [
    'id' => 'facebook_id',
    'name' => 'full_name',

];

} `
When execute this code I get something like this: "missmatch facebook_id " .
But if I change to "protected $fillable = ['id', 'name'];" the code work fine, it means that save my data to table..

Hey @david2alecs! I'm not sure I understand your question. Can you paste in the whole error message you're getting?

Hey @SammyK ! Sorry for delay. Here is the error I get :
MassAssignmentException in Model.php line 452:
facebook_id

and this is my Users model :
<?php

namespace App;

use Illuminate\Database\Eloquent\Model;

use SammyK\LaravelFacebookSdk\SyncableGraphNodeTrait;

class Users extends Model
{
    use SyncableGraphNodeTrait;

    protected $table = 'users';

    protected $hidden = ['access_token'];

       protected static $graph_node_fillable_fields = ['first_name', 'last_name', 'start_time', 'facebook_id'];

    protected static $graph_node_field_aliases = [
        'id' => 'facebook_id',
        'first_name' => 'first_name',
        'last_name' => 'last_name',

    ];

    protected static $graph_node_date_time_to_string_format = 'c'; # ISO 8601 date

}

Hey @david2alecs, it would help if you can share the User table's migration as well.  Just check that the column facebook_id exists in your user table and has correct settings (unsigned biginteger and index).  The user migration file should have:
public function up()
{
Schema::table('users', function(Blueprint $table)
{
// If the primary id in your user table is different from the Facebook id
// Make sure it's an unsigned() bigInteger()
$table->bigInteger('facebook_id')->unsigned()->index();
        // continue other stuff...
    });
}

hello Sir
I have the same issue about
MassAssignmentException in Model.php line 452:
facebook_id,
how should I fix

Hello @osette as I said in first post the only way to make work is to use "protected $fillable = ['id', 'name'];" , but I want to use like @SammyK in this pack.
Hope we can receive a answer soon.

Just to be clear, a temporary fix for this issue is to add the $fillable attribute on your Eloquent model. In this case, the Users model should have this line:
protected $fillable = [
    'id',
    'name',
    // ... Add whatever attribute you need.
    'facebook_id', // Without this, you will get mass assignment on facebook_id.
];

If you have any other fields that is having MassAssignmentException, add them to the $fillable attribute as well.

Just dealing with the silmiar issue in Laravel 5.1
It looks like
protected static $graph_node_field_aliases = [         'id' => 'facebook_user_id' ];
not works and not map id filed from facebook api, and trying save id in id field...


Autocomplete

see https://msdn.microsoft.com/en-us/library/windows/desktop/ms684202(v=vs.85).aspx

Also consider how https://github.com/adamabdelhamed/PowerArgs implements tab completion


General Questions

I have some basic questions, I skimmed the docs and got a feel for the approach but have more specific questions.
Is there a list of the kinds of arguments supported? like optional args, switch args (on/off), args that can take one of a fixed set of values (e.g. -output_type fixed, -output_type float, -output_type int)? args that must be numeric and perhaps fit some designated range? Is there a way to do a final consistency check to make sure there are no incompatible args which might be OK on their own but not together?
I should explain too that I once used a very powerful command line parser when I worked on Stratus fault tolerant minicomputers in the 1980s, these ran VOS a derivative the Multics.
Their approach was a function that took a set of descriptors, it worked well and I wonder how your stuff compares with this?
Here's their documentation for this.
Thanks

Hey @Korporal, for the most part arguments simply consume strings and use the IConvertible interface to transform them into objects (via Convert.ChangeType). Two exceptions are:

booleans are flags, they do not consume any values. -f sets the bool to true, otherwise it isn't set.
Enums are supported even though they don't implement IConvertible. By default, parsing is case sensitive, although that can be configured if you don't use the Default parser. Enums are restricted to only valid values and throw an error otherwise. No support for "bitflags" e.g. Debug|Error

@nemec can you please share an example code on how to use Enums as values for commandline arguments ?

Have you tried
public enum LogLevel
{
    Debug,
    Warning,
    Error
}

public class Options
{
    [Option("logLevel")]
    public LogLevel Level { get; set; }
}

@nemec thank you, it accepts enum and if an invalid string is given it says:
Option 'LogLevel' is defined with a bad format.
Required option 'LogLevel' is missing.
I guess that's good enough and if we include the options in help then we should be good.
[Option("logLevel", Required = true, HelpText="Loglevel with values Debug, Warning or Error")]
           public LogLevel Level
           {
               get; set;
           }


Update README.md

zova-vuetify is a vue3 framework with ioc container. With the support of ioc container, defining reactive states no longer needs ref/reactive, nor ref.value

thanks!


nginx style Forward Auth example.

Hello. https://github.com/caddyserver/caddy/issues/2894 is closed citing this project's existence. Nginx' auth_request directive (https://nginx.org/en/docs/http/ngx_http_auth_request_module.html) works with a simple HTTP response code. Is this kind of functionality available? If yes, can you please direct me to the relevant documentation.
Another question while we're at it. It seems caddy-security is now a single module that includes the former authorize and portal components. Is it still possible to build it without the portal for people who already have an external authentication system in place?

@xpufx, please create Caddyfile that would work in your setup. After that I will modify it (with some directives) to do what you are asking here.

@greenpau Thank you.
whoami.DOMAIN.eu {

        route /akprox* {
                reverse_proxy https://sso.DOMAIN.de
        }

        route /* {

               { # do the auth against authentik
                # auth url is   https://sso.DOMAIN.de/akprox/auth/nginx
                # last part can be traefik or nginx. I am told the difference is minor
                # and both will work for another proxy.
               }
                reverse_proxy http://<IP_ADDRESS>:14000
        }
}

do the auth against authentik

@xpufx , I don't know much about authentik. What is your OAuth provider? Is authentik play the role of auth provider?

Yes. It would basically provide the client id and secret.

Yes. It would basically provide the client id and secret. (supports saml/oauth/oidc etc)

@xpufx , here is the setup for this type of proxy. I tried keeping the names descriptive.
The OAuth provider in this case is Github.
Please note the Callback URL.

When you will be setting up authentic you would need to change the highlighted github to the realm you configure for this specific provider. To setup authentic as OAuth provider you must follow the generic setup here: https://authp.github.io/docs/authenticate/oauth/backend-oauth2-0000-generic
NOTE: The auth.myfiosgateway.com in my example is your whoami.DOMAIN.eu.
💡  I also added a slim down version over here
Create ~/authproxy.env file. I added the shortcuts for backend in v1.0.8 release.
export JWT_SHARED_KEY=1999fcc6-5499-4524-9b93-f4ad2dd46e5e
export GITHUB_CLIENT_ID="foo"
export GITHUB_CLIENT_SECRET="bar"

And load it:
source ~/authproxy.env

Here is the config:
{
        http_port 8080
        https_port 8443
        debug

        order authenticate before respond
        order authorize before basicauth

        security {
                authentication portal authz_proxy_portal {
                        crypto default token lifetime 1
                        crypto key sign-verify {env.JWT_SHARED_KEY}
                        backend github {env.GITHUB_CLIENT_ID} {env.GITHUB_CLIENT_SECRET}
                        transform user {
                                match realm github
                                action add role authp/user
                                ui link "My Website" / icon "las la-star"
                        }
                }

                authorization policy default_authz_policy {
                        # disable auth redirect
                        set auth url /authzproxy/oauth2/github/
                        crypto key sign-verify {env.JWT_SHARED_KEY}
                        allow roles authp/user authp/admin
                }
        }
}

(tlsConfig) {
        tls /home/greenpau/.local/tls/myfiosgateway/server.crt /home/greenpau/.local/tls/myfiosgateway/server.key
}

auth.myfiosgateway.com {
        import tlsConfig

        route /authzproxy* {
                # authenticate /authzproxy* with authz_proxy_portal
                authenticate with authz_proxy_portal
        }

        route {
                authorize with default_authz_policy
                respond "assetq is running"
        }
}

The set auth url /authzproxy/oauth2/github/ would also change to the realm you would assign to the authentic OAuth.

Thank you. I will test and see if I can get it working.

First thing you need to do is getting a successful auth from “ /authzproxy/login”.

Hello greenpau. This was a bit confusing so I used the generic oauth2 configuration instead as a base. Below is my configuration. Both authentik and caddy-security are authenticating properly. However I keep going between authentik and caddy-security login (with the Generic oauth button).   Either my config is broken or authentik is not setting something caddy-security needs. I can't tell which. Do you see anything wrong with the below caddy-security oauth config?
{
	email<EMAIL_ADDRESS>	acme_dns cloudflare Skw_j5fub2S9T6VWslcWRtB5rOpJz_L-2MwvVRKI
	debug

	order authenticate before respond
	order authorize before basicauth

	security {
		authentication portal myportal {
			crypto key verify from file /home/MYUSER/caddy/authentik.pem
			backends {
				generic_oauth2_backend {
					method oauth2
					realm generic
					provider generic
					client_id 3af9ee1e0cf1a63fd3bdcd2c38c6a2ad82923d27
					client_secret 916ca1c2d08908d21a08e8feb4dd2857765cb27c574f52ad658d98199c7937ab823cd8e450a3431fd7f1c21443572140424ffbf62321a509d66c86db1c5e16d2
					scopes openid email profile
					base_auth_url https://sso.MYDOMAIN.de/
					metadata_url https://sso.MYDOMAIN.de/application/o/whoami-oauth/.well-known/openid-configuration
				}
			}
			cookie domain whoami.MYDOMAIN.eu
			ui {
				links {
					"My Identity" "/whoami" icon "las la-user"
				}
			}

			transform user {
				match realm generic
				action add role authp/user
				ui link "File Server" https://whoami.MYDOMAIN.eu/ icon "las la-star"
			}

			transform user {
				match realm generic
				match email<EMAIL_ADDRESS>				action add role authp/admin
			}
		}

		authorization policy mypolicy {
			set auth url https://caddyauth.MYDOMAIN.de/oauth2/generic
			crypto key verify from file /home/MYUSER/caddy/authentik.pem
			allow roles authp/admin authp/user
			validate bearer header
			inject headers with claims
		}
	}
}

# for postfix/dovecot certificates
mail.MYDOMAIN.de {

}

caddyauth.MYDOMAIN.de {
	authenticate with myportal
}

whoami.MYDOMAIN.eu {
	authorize with mypolicy
	reverse_proxy	<IP_ADDRESS>:14000

}

@xpufx , if you just go to auth portal, you are able to authenticate and see your identity, correct? Please provide screenshots.
also, you are seeing my identity and file server links, correct?
what is you authentik configuration? Specifically callback url? Please provide screenshots.

@xpufx , are you able to click the “File Server” link and browse to whoami server?

Actually no. I am not seeing a File Server link or a my identity link. What I am seeing is "Successful login" in the log.
Jan 29 19:47:07 mail caddy[734842]: {"level":"info","ts":1643485627.7175086,"logger":"security","msg":"Successful login","session_id":"ZEkMGCLeSEnamMYF1SPK7CXnjJ7HeTrj0fduECrN97gh","request_id":"dc92423f-2a1f-4b84-90ff-4ec51bcb085f","backend":{"name":"generic_oauth2_backend","realm":"generic","method":"oauth2"},"user":{"addr":"<IP_ADDRESS>","exp":1643486527,"frontend_links":["\"File Server\" https://whoami.MYDOMAIN.eu/ icon \"las la-star\""],"groups":["Vaultwarden Users","authentik Admins","ldapadmin","user","admin","useradmins","Vaultwarden Users","authentik Admins","ldapadmin","user","admin","useradmins"],"iat":1643485627,"iss":"https://caddyauth.MYDOMAIN.de/oauth2/generic/","jti":"ZEkMGCLeSEnamMYF1SPK7CXnjJ7HeTrj0fduECrN97gh","mail":"MYUSER@MYDOMAIN.de","name":"MYUSER Altunergil","nbf":1643485567000,"origin":"generic","realm":"generic","role":"authentikuser","roles":["authp/user","authp/admin"],"sub":"e30f9d117a4e772584d6fb32bd5fa6706850a330ff880cf7e37fb24eaaf5ce0d"}}

@xpufx , when you click the button to login to authentik, what happens next? Web browser screenshot and trace would be helpful.

By the way the original topic of this issue was regarding whether caddy-security can implement the Forward Auth functionality of Nginx and Traefik as claimed by the caddy server authors.  I like the possibility of authenticating with Oauth/SAML but that's a much more complicated setup than what Forward Auth provides. (I fully realize forward auth is not something an idp should provide. It's a web proxy feature.)
Also I will open another issue regarding using just the "authorize" portion of caddy-security with a corresponding Caddyfile for use with an external idp.

whether caddy-security can implement the Forward Auth functionality of Nginx and Traefik as claimed by the caddy server authors.

@xpufx , we are just troubleshooting here. If everything is being setup properly. The user who browsed to the file server, would be redirected to auth portal, to authentik, then back to auth portal, and back to the fileserver. The user never sees the auth portal interface.

I actually don’t like the “ "role":"authentikuser",”

It could be that the “role” messes up the “roles”

@xpufx , so you have “groups” and “role” being passed by the authentik. Need to check what would be the desired logic here.
the goal is to be able to login to portal and see the 2 links.

I actually don’t like the “ "role":"authentikuser",”

I had actually added that bit to the authentik side because I tried to get authentication working without using caddy-auth-portal as my authentication portal. I will remove it and see if that makes a difference.

@xpufx , basically, try not adding role or group for now.
I will look at the way to handle role, roles, and groups at the same time.

@xpufx , once we finish the troubleshooting, you will be able to add the groups in authentic and it will propagate to the token issues by the portal.

Here's some info from browser Developer Console and caddy logs.
Going to portal login, Generic icon shows. At this point the only interesting thing in the console is:
set-cookie: AUTHP_SESSION_ID=qvzDNbv29PFLVU8NHNrCcIjcUBaarqsvoenpygj7nFlC; Domain=whoami.MYDOMAIN.eu; Path=/; Secure; HttpOnly;

When I hit the Generic button it goest to authentik. (It's configured to redirect manually now when I hit continue)
Jan 29 20:06:18 mail caddy[734842]: {"level":"debug","ts":1643486778.5612354,"logger":"security","msg":"External login requested","session_id":"VxkdFKJrfMoyGtgdsKdqy8fku4bOazKF2NDPhE8Kgmllc","request_id":"be3da0bf-6b4d-49e5-9e41-f4c46b59606b","base_url":"https://caddyauth.MYDOMAIN.de","base_path":"/","auth_method":"oauth2","auth_realm":"generic","request_path":"/oauth2/generic"}
Jan 29 20:06:18 mail caddy[734842]: {"level":"debug","ts":1643486778.561287,"logger":"security","msg":"redirecting to OAuth 2.0 endpoint","request_id":"be3da0bf-6b4d-49e5-9e41-f4c46b59606b","redirect_url":"https://sso.MYDOMAIN.de/application/o/authorize/?client_id=3af9ee1e0cf1a63fd3bdcd2c38c6d2ad82923d27&nonce=0WoPMrLjVFeJWoILpntSOHz2YozJgx6E&redirect_uri=https%3A%2F%2Fcaddyauth.MYDOMAIN.de%2Foauth2%2Fgeneric%2Fauthorization-code-callback&response_type=code&scope=openid+email+profile&state=c3e94005-ed9e-4e24-b06e-5c3b98c36dc9"}
Jan 29 20:06:18 mail caddy[734842]: {"level":"debug","ts":1643486778.5612934,"logger":"security","msg":"Redirect to authorization server","session_id":"VxkdFKJrfMoyGtgdsKdqy8fku4bOazKF2NDPhE8Kgmllc","request_id":"be3da0bf-6b4d-49e5-9e41-f4c46b59606b","url":"https://sso.MYDOMAIN.de/application/o/authorize/?client_id=3af9ee1e0cf1a63fd3bdcd2c38c6d2ad82923d27&nonce=0WoPMrLjVFeJWoILpntSOHz2YozJgx6E&redirect_uri=https%3A%2F%2Fcaddyauth.MYDOMAIN.de%2Foauth2%2Fgeneric%2Fauthorization-code-callback&response_type=code&scope=openid+email+profile&state=c3e94005-ed9e-4e24-b06e-5c3b98c36dc9"}

Authentik also sets a csrf and session cookie but it shouldn't matter at this step.  Click continue, the browser goes back to the login page. I have a feeling at this point it should go to whoami.DOMAIN.com instead for this to work.
Interesting bits in log:
Jan 29 20:11:09 mail caddy[734842]: {"level":"info","ts":1643487069.40793,"logger":"security","msg":"Successful login","session_id":"P70Mlj7ZreWgt8q4qDyd6nnWbMPrGLTvBNxh","request_id":"6063f0e7-3fc6-45c2-bb6c-e6b2afeb6897","backend":{"name":"generic_oauth2_backend","realm":"generic","method":"oauth2"},"user":{"addr":"<IP_ADDRESS>","exp":1643487969,"frontend_links":["\"File Server\" https://whoami.MYDOMAIN.eu/ icon \"las la-star\""],"groups":["Vaultwarden Users","authentik Admins","ldapadmin","user","admin","useradmins"],"iat":1643487069,"iss":"https://caddyauth.MYDOMAIN.de/oauth2/generic/","jti":"P70Mlj7ZreWgt8q4qDyd6nnWbMPrGLTvBNxh","mail":"MYUSER@MYDOMAIN.de","name":"MYUSER Altunergil","nbf":1643487009000,"origin":"generic","realm":"generic","roles":["authp/user","authp/admin"],"sub":"e30f9d117a4e772584d6fb32bd5fa6706850a330ff880cf7e37fb24eaaf5ce0d"}}
Jan 29 20:11:09 mail caddy[734842]: {"level":"debug","ts":1643487069.5537572,"logger":"security","msg":"Redirect served","session_id":"WuZt4SOpOZg7xa6j88noZY5GEuH03lSGSM7w2Qma","request_id":"311a6d0e-b4a4-49c2-999d-8854d0ea559f","redirect_url":"https://caddyauth.MYDOMAIN.de/login","status_code":302}
Jan 29 20:11:09 mail caddy[734842]: {"level":"debug","ts":1643487069.8840265,"logger":"security","msg":"static assets","session_id":"Cum26TiXPLbKEKRIbufYWvDSYmardWFfASnWe0Zbc","request_id":"74c79aa5-19fd-4d1b-999c-cc0353c521d7","url_path":"/assets/materialize-css/css/materialize.css","request":{"session_id":"Cum26TiXPLbKEKRIbufYWvDSYmardWFfASnWe0Zbc","base_url":"https://caddyauth.MYDOMAIN.de","base_path":"/","content_type":"text/css,*/*;q=0.1"},"source_address":"<IP_ADDRESS>"}

msg":"Redirect served"   caught my attention. Maybe you can tell why it's redirecting back to login. As before logs say "successful login" but I get redirected and I never see a File link or a my identity button as if login was not sucessful.
It loops from here.

Authentik also sets a csrf and session cookie but it shouldn't matter at this step. Click continue, the browser goes back to the login page. I have a feeling at this point it should go to whoami.DOMAIN.com instead for this to work.

@xpufx , by the "login page," you mean the page with "Generic" button? If so, then you did not pass authentication.
I suspect the issue is with groups, role, and roles all being returned at the same time by the Authentik. Will look at it later today.

@xpufx , please keep your Authentik config intact for now. I will release a patch and see how your auth experience changes.

I already had a scope without groups set up (Dovecot xoauth2 doesn't like it) and used that instead. Here's the log for that. I don't need the groups as  I only need authentication now.
Jan 29 20:21:47 mail caddy[734842]: {"level":"debug","ts":1643487707.7854779,"logger":"security","msg":"decoded claims from OAuth 2.0 authorization server access token","request_id":"c7906589-eae2-4751-be8a-9200361141fd","claims":{"email":"MYUSER@MYDOMAIN.de","exp":1646079707,"iat":1643487707,"iss":"https://sso.MYDOMAIN.de/application/o/whoami-oauth/","name":"MYUSER MYLAST","sub":"e30f9d117a4e772584d6fb32bd5fa6706850a330ff880cf7e37fb24eaaf5ce0d"}}
Jan 29 20:21:47 mail caddy[734842]: {"level":"info","ts":1643487707.7854917,"logger":"security","msg":"Successful login","session_id":"4yYNnwX8BPSJTJGlzbmOJ8q2NkfG5pOOYgafOKNTHu","request_id":"c7906589-eae2-4751-be8a-9200361141fd","auth_method":"oauth2","auth_realm":"generic","user":{"email":"MYUSER@MYDOMAIN.de","exp":1646079707,"iat":1643487707,"iss":"https://sso.MYDOMAIN.de/application/o/whoami-oauth/","name":"MYUSER MYLAST","sub":"e30f9d117a4e772584d6fb32bd5fa6706850a330ff880cf7e37fb24eaaf5ce0d"}}
Jan 29 20:21:47 mail caddy[734842]: {"level":"debug","ts":1643487707.785592,"logger":"security","msg":"user transformation ended","session_id":"4yYNnwX8BPSJTJGlzbmOJ8q2NkfG5pOOYgafOKNTHu","request_id":"c7906589-eae2-4751-be8a-9200361141fd","user":{"addr":"<IP_ADDRESS>","exp":1643488607,"frontend_links":["\"File Server\" https://whoami.MYDOMAIN.eu/ icon \"las la-star\""],"iat":1643487707,"iss":"https://caddyauth.MYDOMAIN.de/oauth2/generic/","jti":"4yYNnwX8BPSJTJGlzbmOJ8q2NkfG5pOOYgafOKNTHu","mail":"MYUSER@MYDOMAIN.de","name":"MYUSER MYLAST","nbf":1643487647000,"origin":"generic","realm":"generic","roles":["authp/user","authp/admin"],"sub":"e30f9d117a4e772584d6fb32bd5fa6706850a330ff880cf7e37fb24eaaf5ce0d"}}
Jan 29 20:21:47 mail caddy[734842]: {"level":"info","ts":1643487707.78676,"logger":"security","msg":"Successful login","session_id":"4yYNnwX8BPSJTJGlzbmOJ8q2NkfG5pOOYgafOKNTHu","request_id":"c7906589-eae2-4751-be8a-9200361141fd","backend":{"name":"generic_oauth2_backend","realm":"generic","method":"oauth2"},"user":{"addr":"<IP_ADDRESS>","exp":1643488607,"frontend_links":["\"File Server\" https://whoami.MYDOMAIN.eu/ icon \"las la-star\""],"iat":1643487707,"iss":"https://caddyauth.MYDOMAIN.de/oauth2/generic/","jti":"4yYNnwX8BPSJTJGlzbmOJ8q2NkfG5pOOYgafOKNTHu","mail":"MYUSER@MYDOMAIN.de","name":"MYUSER MYLAST","nbf":1643487647000,"origin":"generic","realm":"generic","roles":["authp/user","authp/admin"],"sub":"e30f9d117a4e772584d6fb32bd5fa6706850a330ff880cf7e37fb24eaaf5ce0d"}}
Jan 29 20:21:47 mail caddy[734842]: {"level":"debug","ts":1643487707.90712,"logger":"security","msg":"Redirect served","session_id":"xohfrD7CFTXMfRKEfSEeoO0AgdQl74b9LBRai","request_id":"5ced67ed-75c9-41c3-b83c-69ce702ee2bc","redirect_url":"https://caddyauth.MYDOMAIN.de/login","status_code":302}
Jan 29 20:21:48 mail caddy[734842]: {"level":"debug","ts":1643487708.2249103,"logger":"security","msg":"static assets","session_id":"GhTLvW35rV6zIvhaLPTX6RJ2WTbRRUNCqGj9tcH","request_id":"eb513be7-3212-4fbf-8ad4-c6c6ee45ba6c","url_path":"/assets/materialize-css/css/materialize.css","request":{"session_id":"GhTLvW35rV6zIvhaLPTX6RJ2WTbRRUNCqGj9tcH","base_url":"https://caddyauth.MYDOMAIN.de","base_path":"/","content_type":"text/css,*/*;q=0.1"},"source_address":"<IP_ADDRESS>"}

@xpufx , in auth portal config you have
			crypto key verify from file /home/MYUSER/caddy/authentik.pem

it really should be
			crypto key sign-verify from file /home/MYUSER/caddy/authentik.pem

@xpufx , authentication = sign-verify, authorization = verify.

It does not eliminate the issue with groups/role/roles, but it is something to try.

@xpufx , authentication = sign-verify, authorization = verify.

No change in behavior I'm afraid. At this point authentik does not return any roles/groups.

@xpufx please email me the full log + create the logs of you browser.

@xpufx please email me the full log + create the logs of you browser.

Sure thing. I can also give you a temp user to see the headers yourself. How can I reach you? What's your email address?

@xpufx , I totally did not see that you deviated from my example.
Instead of cookie domain whoami.MYDOMAIN.eu , you should have:
cookie domain MYDOMAIN.eu

My email is<EMAIL_ADDRESS>

The cookie is being issued by caddyauth.MYDOMAIN.de for the use in MYDOMAIN.de domain. The whoami.MYDOMAIN.eu here is FQDN.

@xpufx , I totally did not see that you deviated from my example.
Instead of cookie domain whoami.MYDOMAIN.eu , you should have:
cookie domain MYDOMAIN.eu

My email is<EMAIL_ADDRESS>
I tried both there but that was before everything you told me to do in this thread so it might make a difference. By the way I am kind of confused about the domain. As you can see my domains are not the same .de vs .eu. Which domain is it? portal or my app ? (I will try both of course) Or maybe same domain is required/assumed?

OK with the cookie domain set to that of the portal I am able to now see My Identity and File Server (I didn't realize this was the name of my app until now :) ).   However now the loop moved elsewhere. I think I have to do some troubleshooting on the authentik side now before bugging you any further. I will hold off on sending you the logs since things will change.

@xpufx , good pointing me at .de vs .eu.
You cannot issue the cookie from MYDOMAIN.de to be used in MYDOMAIN.eu. That's not how browsers work.
A server in MYDOMAIN.de can only issue cookies in MYDOMAIN.de or without any domain (i.e. used only by that server).
caddyauth.MYDOMAIN.de {
	authenticate with myportal
}

whoami.MYDOMAIN.eu {
	authorize with mypolicy
	reverse_proxy	<IP_ADDRESS>:14000

}

In sum, please use this config: https://github.com/authp/authp.github.io/blob/main/assets/conf/oauth/authproxy/Caddyfile
where myapp.myfiosgateway.com == whoami.MYDOMAIN.eu.

I am aware of cross domain cookie requirements but I didn't know what it was doing in the context of this caddyfile. Of coures you're right. That's my bad. Thanks for pointing it out.
By the way somehow I saw MY Identity once but it's not working anymore. I will start again with the authproxy caddyfile.

I will start again with the authproxy caddyfile.

@xpufx , basics first.

still using two idps if I am not reading it wrong.

There are no 2 IdPs. There is 1 IdP - authentik. The portal play the role of an intermediary. Here, you are explicitly defining things in portal, because this is an expressive config. In this setup there is no "identity" lookup in the portal. It is just a passthrough.

@xpufx , with the portal configured, you will get the seamless redirects, plus accounting, plus the redirection back to where you were when the session ended.

@xpufx , there is even JS redirect: https://authp.github.io/docs/authorize/auto-redirect-url#javascript-redirect
when your URLs contains #, e.g. links to headings.

I understand. Thank you.  If I am understanding you correctly I am to use the proxy configuration for 'github' (The backend name seems to be significant and need to be supported in the code) but use my own sso url as the auth endpoint. Is this correct?

@xpufx , instead of backend github {env.GITHUB_CLIENT_ID} {env.GITHUB_CLIENT_SECRET}, add your configuration:
			backends {
				generic_oauth2_backend {
					method oauth2
					realm generic
					provider generic
					client_id 3af9ee1e0cf1a63fd3bdcd2c38c6a2ad82923d27
					client_secret 916ca1c2d08908d21a08e8feb4dd2857765cb27c574f52ad658d98199c7937ab823cd8e450a3431fd7f1c21443572140424ffbf62321a509d66c86db1c5e16d2
					scopes openid email profile
					base_auth_url https://sso.MYDOMAIN.de/
					metadata_url https://sso.MYDOMAIN.de/application/o/whoami-oauth/.well-known/openid-configuration
				}
			}

@xpufx , also change realm to realm authentik. For clarity.

Thank you. I am now realizing this is what you told me to do to begin with. I used the generic oauth config without realizing one was an intermediary proxy configuration while the other wasn't. Sorry about that. I am sure I'll be able to get this working now as I now have a clearer understanding of what is what. Thank you for taking the time with me to go over my config and providing the security components for caddy in general.

Thank you for taking the time with me to go over my config and providing the security components for caddy in general.

@xpufx , I am here for you 👍 For me this whole experience is a professional development journey. I study things by coding them. Obviously there are many angles to look at a problem and find a solution. That's why there are so many good projects out there, e.g. Authentik that you are using.
This particular project was build with an "expressive" nature in mind. I want a person to read a Caddyfile and understand what is going on. Yes, there is certain complexity to it. That's the barrier to entry 😄

@xpufx , release https://github.com/greenpau/caddy-security/releases/tag/v1.0.10 where groups, group, role and roles are all combined into roles.
Try to get the portal running such that you get to the identity page and you see something similar to this.

Hi, forgive me for the possibly silly question; let me know if I should create a new issue or discussion.
I've been following this thread and am trying to set up something similar with Authentik and Caddy-Security. I'm just getting started with a simple config:
	security {
		authentication portal atk {
			crypto key verify from file /opt/caddy/cert/atk.pem
			cookie domain DOMAIN.TLD
			backends {
				generic_oauth2_backend {
					method oauth2
					realm authentik
					provider generic
					client_id <redacted>
					client_secret <redacted>
					scopes openid email profile
					base_auth_url https://atk.DOMAIN.TLD
					metadata_url https://atk.DOMAIN.TLD/application/o/csoauth-ha/.well-known/openid-configuration
				}
			}
		}
	}

atk.DOMAIN.TLD being the location of Authentik.
I cannot get Caddy to start with this config, due to a connection refused when attempting to access the metadata_url. But it just occurred to me that of course the connection is refused - because I am proxying Authentik through the same instance of Caddy that fails to start...
My question: is there a way to "invoke" Caddy-Security after loading the configured site blocks? Must I proxy Authentik elsewhere? Or am I thinking about this all the wrong way?
Thank you for any help/insight you can provide!

let me know if I should create a new issue or discussion.

@tmeuze , let’s start with a new thread.

@tmeuze , also, please watch https://youtube.com/watch?v=Mxbjfv47YiQ&feature=share from 45:32


Unauthenticated error

I implemented this solution, but after 1 hour (when the token expires) I can refresh token normally, but trying to save something in Firestore gives an unauthenticated error.

@cmargulhano thanks for reporting!  That does sound like a bug in this solution.  Can you describe the steps to reproduce a little more?  Is it:

Open the app
Sign in
Perform some Firestore operation
Close the app.
Wait an hour
Try to perform another Firestore operation?

It was really a problem in my implementation, as I was trying to put an observer in the background. I had to turn on the full Firestore logs to debug the problem. Everything really works. Thank you for your attention and share your knowledge, for our project was very valuable. Congratulations!!!

@cmargulhano glad you got it working!


fix to propagate app setting change to renderer process

説明 / Description
https://github.com/sunfish-shogi/electron-shogi/issues/491
チェックリスト / Checklist

MUST

[ ] npm test passed
[x] npm run lint was applied without warnings
[x] changes of /docs/webapp not included (except release branch)

RECOMMENDED (it depends on what you change)

[ ] unit test added/updated

Codecov Report
Patch coverage: 75.00% and no project coverage change.

Comparison is base (f5a9ad9) 70.59% compared to head (17418a8) 70.59%.

:mega: This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more
Additional details and impacted files
@@           Coverage Diff           @@
##             main     #493   +/-   ##
=======================================
  Coverage   70.59%   70.59%
=======================================
  Files          75       75
  Lines       15363    15367    +4
  Branches     1926     1926
=======================================
+ Hits        10846    10849    +3
- Misses       2618     2619    +1
  Partials     1899     1899

Impacted Files
Coverage Δ

src/renderer/ipc/web.ts
55.43% <66.66%> (+0.12%)
:arrow_up:

src/renderer/ipc/api.ts
82.81% <100.00%> (+0.05%)
:arrow_up:

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Do you have feedback about the report comment? Let us know in this issue.


Unknown extensible attribute: Cloud API Owned

I would like to use the AllocateIP function on a on-prem infoblox environment with WAPI Version 2.3.1 but i get the error: Unknown extensible attribute: Cloud API Owned.
It would be nice if the object_manager functions could be used on on-prem instances as well.

Hi, can you please address the comments on the PR

Why are these attributes hard-coded in code? https://github.com/infobloxopen/infoblox-go-client/blob/6e85b72befc9d1ae6bb5de12aa201791339209f1/object_manager.go#L63-L69
The go-client should allow users to set the required attributes instead of the ones in the code above

These are the default EAs we get once CNA license is being installed and used. So we have made sure to get them in this method, so that subsequent methods can use them.

Thank you @somashekhar. Is the CNA license required in order to use this library?

If you don't have CNA then you should add these EAs manually and get library working.

We have static license with NIOS, DNS, DHCP, Discovery, Grid features but
not CNA. Looks like CNA is included in the AWS marketplace version. It
doesn't make sense to hard-code these EAs in the client library if they
don't come pre-installed with all licenses. I think a better solution is
would to provide an option to not set these EAs in the client library. I
can create a PR if you agree with it.
On Wed, Oct 21, 2020 at 10:25 PM Som<EMAIL_ADDRESS>wrote:

If you don't have CNA then you should add these EAs manually and get
library working.
—
You are receiving this because you commented.
Reply to this email directly, view it on GitHub
https://github.com/infobloxopen/infoblox-go-client/issues/79#issuecomment-714237326,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AA2SVFL2KNZG3UVAH3UBAFTSL666DANCNFSM4HZRSZIA
.

Agree. That would be a better solution. Do make sure nothing breaks and also add new UTs.
@AvRajath can you once confirm this proposal does not break anything in our existing Terraform plugin.

Also, it replaces the EA object passed to the function call instead of appending to it. I will submit the MR


GH1745: Change signature of methods for IScriptProcessor

No need to pass the whole analyzer result.
Fixes #1745

@patriksvensson fixed!


[Bug]: Cannot add styles to the submit and cancel buttons in Modal Widget

Is there an existing issue for this?

[X] I have searched the existing issues

Description
Cannot add styles to the submit and cancel buttons in Modal Widget
Steps To Reproduce

Public Sample App
No response
Environment
Deploy Preview
Severity
High (Blocker to building or releasing)
Issue video log
No response
Version
cloud

Will fix this here — #31421


Integrate editor at https://github.com/naseer/mermaid-webapp

Creating to address the discussion at #106 to integrate the editor at https://github.com/naseer/mermaid-webapp

@naseer, you should take a look at the new api for validating text. I had this kind of editor in mind when writing it.
Error handling
When the parser encounters invalid syntax the mermaid.parseError function is called. It is possible to override this function in order to handle the error in an application specific way.
Parsing text without rendering
It is also possible to validate the syntax before rendering in order to streamline the user experience. The function mermaid.parse(txt) takes a text string as an argument and returns true if the text is syntactically correct and false if it is not. The parseError function will be called when the parse function returns false.
The code-example below in meta code illustrates how this could work:

mermaid.parseError = function(err,hash){
    displayErrorInGui(err);
};

var textFieldUpdated = function(){
    var textStr = getTextFromFormField('code');

    if(mermaid.parse(textStr)){
        reRender(textStr)
    }
};

bindEventHandler('change', 'code', textFieldUpdated);

Thanks @knsv, this will help a lot and avoid the need for mermaid.init all the time

@knsv - is there something to re-render without calling mermaid.init ?

No I think mermaid.init is the way to go!

@knsv - can this be closed now?

Yes! Closing! Thanks!


Rename snapshot_data to snapshot_obj

Update snapshot function name based on the homestore API change.

:warning: Please install the  to ensure uploads and comments are reliably processed by Codecov.
Codecov Report
Attention: Patch coverage is 0% with 2 lines in your changes missing coverage. Please review.

Project coverage is 65.15%. Comparing base (1746bcc) to head (bb0b2b4).
Report is 8 commits behind head on main.

Files with missing lines
Patch %
Lines

...ib/homestore_backend/replication_state_machine.cpp
0.00%
2 Missing :warning:

:exclamation: Your organization needs to install the Codecov GitHub app to enable full functionality.
Additional details and impacted files
@@            Coverage Diff             @@
##             main     #238      +/-   ##
==========================================
+ Coverage   63.15%   65.15%   +1.99%
==========================================
  Files          32       32
  Lines        1900     1980      +80
  Branches      204      213       +9
==========================================
+ Hits         1200     1290      +90
+ Misses        600      582      -18
- Partials      100      108       +8

:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.


Config File For reproducing experiments

Hi,
I could not locate the configuration files used for the training part. I want to train the network on scannet dataset. Can you please point to where I can find config files.
Thanks and regards,
Sarvesh

Hi Thakur, sorry for missing your issue earlier. The configs used to train the model are the default configs. So you can use the debug config unsupervisedRR/configs/debug.yaml to run the experiments. Hopefully this clarifies the issue.


How to save/delete/restore all the entites in one call-service command?

Hi @PiotrMachowski ,
I usually use following:
service: saver.save_state
data:
  entity_id: specific_domain.specific_entity

However, I need to list all the entities I want to save, in a separate line. But what if I need to save all the entities when leaving home and then restore them when coming back home? So, I'm wondering if there is any chance to save all the entities at once?
I would expect the following useful ideas to be implemented:

Save all the available entities:

service: saver.save_state
data:
  entity_id: [all]

Save all the entities from the same domain:

service: saver.save_state
data:
  entity_id: specific_domain.all

Save all the entities except those being excluded:

service: saver.save_state
data:
  entity_id: switch.all
    excluded_entities:
      - switch.kitchen_coffeemaker
      - switch.any_other_example

The same approach would be applicable to other services: delete, restore, etc.

I think scene.create would be much better for your use case
https://www.home-assistant.io/integrations/scene/#creating-scenes-on-the-fly


Connection went offline and Maximum call stack size exceeded when joining >1000 rooms

Hi there,
I'm seeing the following errors when hubot tries to join >1000 rooms (@All) and I'm not sure how to debug it. I'd appreciate any insight into what's going on. The same setup works if numRooms < 500.
Also, if hubot is the right project for this issue and not hubot-hipchat, I can move it. I created it here since I'm using the hipchat adapter.
[Thu Nov 03 2016 11:10:04 GMT-0700 (PDT)] INFO Joining<EMAIL_ADDRESS>[Thu Nov 03 2016 11:10:04 GMT-0700 (PDT)] INFO Joining<EMAIL_ADDRESS>

[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] INFO Connection went offline
...

[Thu Nov 03 2016 11:10:10 GMT-0700 (PDT)] ERROR RangeError: Maximum call stack size exceeded
  at emitNone (events.js:65:18)
  at Client.emit (events.js:166:7)
  at Client.<anonymous> (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/lib/Client.js:157:12)
  at emitNone (events.js:72:20)
  at Connection.emit (events.js:166:7)
  at emitter.end.emitter.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/node_modules/node-xmpp-core/node_m
odules/reconnect-core/index.js:108:15)
  at Connection.end.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/node_modules/node-xmpp-core/lib/Connect
ion.js:124:5)
  at Client.Session.end (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/lib/session.js:202:21)
  at Connector.module.exports.Connector.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:103:5, <js>:84:19)
  at Connector.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:23:1, <js>:3:61)
  at Connector.onOffline (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:503:3, <js>:455:17)
  at emitNone (events.js:67:13)
  at Client.emit (events.js:166:7)
  at Client.<anonymous> (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/lib/Client.js:157:12)
  at emitNone (events.js:72:20)
  at Connection.emit (events.js:166:7)
  at emitter.end.emitter.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/node_modules/node-xmpp-core/node_m
odules/reconnect-core/index.js:108:15)
  at Connection.end.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/node_modules/node-xmpp-core/lib/Connect
ion.js:124:5)
  at Client.Session.end (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/lib/session.js:202:21)
  at Connector.module.exports.Connector.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:103:5, <js>:84:19)
  at Connector.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:23:1, <js>:3:61)
  at Connector.onOffline (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:503:3, <js>:455:17)
  at emitNone (events.js:67:13)
  at Client.emit (events.js:166:7)
  at Client.<anonymous> (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/lib/Client.js:157:12)
  at emitNone (events.js:72:20)
  at Connection.emit (events.js:166:7)
  at emitter.end.emitter.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/node_modules/node-xmpp-core/node_m
odules/reconnect-core/index.js:108:15)
  at Connection.end.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/node_modules/node-xmpp-core/lib/Connect
ion.js:124:5)

Package versions
"hubot": "^2.19.0"
"hubot-hipchat": "^2.12.0-6"
node: 4.4.7
npm: 2.15.8

I turned on debug and see below in the log
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] INFO Joining<EMAIL_ADDRESS>[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG  OUT > <presence<EMAIL_ADDRESS>Bot Plugin Tester"><x xmlns="http://jabber.org/protocol/muc"/><history xmlns="http://jabber.org/protocol/muc" maxstanzas="0"/></presence>
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] INFO Joining<EMAIL_ADDRESS>[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG  OUT > <presence<EMAIL_ADDRESS>Bot Plugin Tester"><x xmlns="http://jabber.org/protocol/muc"/><history xmlns="http://jabber.org/protocol/muc" maxstanzas="0"/></presence>
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG No listeners executed; falling back to catch-all
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG No listeners executed; falling back to catch-all
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG No listeners executed; falling back to catch-all
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG No listeners executed; falling back to catch-all
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG No listeners executed; falling back to catch-all
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG No listeners executed; falling back to catch-all
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG No listeners executed; falling back to catch-all
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG No listeners executed; falling back to catch-all
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG No listeners executed; falling back to catch-all
[Tue Nov 08 2016 11:24:52 GMT-0800 (PST)] DEBUG No listeners executed; falling back to catch-all

...

[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] DEBUG Disconnecting here
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] INFO Connection went offline
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] DEBUG Disconnecting here
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] INFO Connection went offline
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] DEBUG Disconnecting here
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] INFO Connection went offline
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] DEBUG Disconnecting here
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] INFO Connection went offline
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] DEBUG Disconnecting here
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] INFO Connection went offline
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] DEBUG Disconnecting here
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] INFO Connection went offline
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] DEBUG Disconnecting here
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] INFO Connection went offline
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] DEBUG Disconnecting here
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] INFO Connection went offline
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] DEBUG Disconnecting here
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] INFO Connection went offline
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] DEBUG Disconnecting here
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] INFO Connection went offline
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] DEBUG Disconnecting here
[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] INFO Connection went offline

...

[Tue Nov 08 2016 11:24:58 GMT-0800 (PST)] ERROR RangeError: Maximum call stack size exceeded
  at Client.emit (events.js:117:44)
  at emitNone (events.js:72:20)
  at Connection.emit (events.js:166:7)
  at emitter.end.emitter.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/node_modules/node-xmpp-core/node_modules/reconnect-core/index.js:108:15)
  at Connection.end.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/node_modules/node-xmpp-core/lib/Connection.js:124:5)
  at Client.Session.end (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/lib/session.js:202:21)
  at Connector.module.exports.Connector.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:103:5, <js>:84:19)
  at Connector.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:23:1, <js>:3:61)
  at Connector.onOffline (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:503:3, <js>:455:17)
  at emitNone (events.js:67:13)
  at Client.emit (events.js:166:7)
  at Client.<anonymous> (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/lib/Client.js:157:12)
  at emitNone (events.js:72:20)
  at Connection.emit (events.js:166:7)
  at emitter.end.emitter.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/node_modules/node-xmpp-core/node_modules/reconnect-core/index.js:108:15)
  at Connection.end.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/node_modules/node-xmpp-core/lib/Connection.js:124:5)
  at Client.Session.end (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/lib/session.js:202:21)
  at Connector.module.exports.Connector.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:103:5, <js>:84:19)
  at Connector.disconnect (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:23:1, <js>:3:61)
  at Connector.onOffline (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/src/connector.coffee:503:3, <js>:455:17)
  at emitNone (events.js:67:13)
  at Client.emit (events.js:166:7)
  at Client.<anonymous> (/home/rjanardhana/ta-hubot/node_modules/hubot-hipchat/node_modules/node-xmpp-client/lib/Client.js:157:12)
  at emitNone (events.js:72:20)
  at Connection.emit (events.js:166:7)

We're seeing the same with ~1100 rooms -- I suspect it may be related to rate limiting (https://developer.atlassian.com/hipchat/guide/hipchat-rest-api/api-rate-limits)

I am seeing the same issue on the latest version of hipchat server.

I ended up opening a ticket with Hipchat support. They were able to look at the logs and realize my issue is that in 2.0.7 and newer server versions XMPP clients are disabled by default. As the Hipchat connector uses the Node JS XMPP Client this is why it started failing after we upgraded.  I was able to enable XMPP protocol by SSH into the server and running "hipchat network --enable-xmpp-ports".  Doesn't resolve the reconnect issue and API limit problem mentioned above, but at least solves my initial problem.

@jbrodley Thank you very much for getting to the bottom of this. Yes, we are on custom hosted hipchat server of 2.0.7+.


Support for making API requests with difference accounts

Currently PGoAuth is a singleton.  It would be nice if it was not a singleton and the library supported making requests using different accounts.  Perhaps PGoApiRequest.makeRequest can be changed to accept a PGoAuth instance w/ the user.  Currently the API seems to be rate limited, and we can only make one request using one account per ~5 seconds.

+1

Great idea, implementing it right now.


[Multi Actions] Fix bug where assistant tries to use tool even if not allowed

Mostly observed on 3.5 sonnet.
Could be related to system prompt
We could decide to:

change system prompt to discourage this (or at least not encourage it when no tools are allowed)
increase max steps to limit cases where we would have this error
check if the "dummy tool" hack is still required, if not remove and see if we still have the issue

It is somewhat similar to https://github.com/dust-tt/tasks/issues/940

Anyway, this starts with a good repro.
We have the run here: https://dust.tt/w/78bda07b39/a/0e9889c787/runs/18eee44fd1511f2c767f031dac494afb588217cffb0a23c0e1c77db32518a24d
Now we need to reproduce it

As per IRL, first step is really to ensure we have a digestible error for users that invites them to retry. Is that the case right now?
From there we can optimize with Anthropic to prevent this as much as possible.

@spolu  we have the one you added here: https://github.com/dust-tt/dust/blob/3e2281e2eb3b6e048a109a318d4c04ded4612f57/front/lib/api/assistant/agent.ts#L650

Maybe we should add a sentence to invite to retry in that case?


[Feature] frontpage

I have created a beautiful frontpage with colorful chips for each player. Player 1 will enter their name, and if not there will be a beautiful alert! If the name is shorter than 3 characters, there will be another beautiful alert!

I'm a poet.


DNA exists! Cant create more then 4 pictures

Hey, where's the error in the code? I can't create more than 4 NFTs. I already tried it with 100 weight, but that didn't work either.

const fs = require("fs");
const width = 3500;
const height = 3500;
const dir = __dirname;
const description = "Ein Projekt, viele Leben!";
const baseImageUri = "https://ana.art/";
const startEditionFrom = 1;
const endEditionAt = 500;
const editionSize = 500;
const raceWeights = [
{
value: "skull",
from: 1,
to: editionSize,
},
];
const races = {
skull: {
name: "Skull",
layers: [
{
name: "Background",
elements: [
{
id: 0,
name: "Orange",
path: ${dir}/1-background/HeartIllustration_0011s_0000_Orange.png,
weight: 8,
},
{
id: 1,
name: "Dark Gray",
path: ${dir}/1-background/HeartIllustration_0011s_0001_Dark-gray.png,
weight: 8,
},
{
id: 2,
name: "Light Gray",
path: ${dir}/1-background/HeartIllustration_0011s_0002_light-gray.png,
weight: 8,
},
{
id: 3,
name: "Brown",
path: ${dir}/1-background/HeartIllustration_0011s_0003_brown.png,
weight: 8,
},
{
id: 4,
name: "Pink",
path: ${dir}/1-background/HeartIllustration_0011s_0004_pink.png,
weight: 8,
},
{
id: 5,
name: "Green",
path: ${dir}/1-background/HeartIllustration_0011s_0005_green.png,
weight: 8,
},
{
id: 6,
name: "Red",
path: ${dir}/1-background/HeartIllustration_0011s_0006_red.png,
weight: 8,
},
{
id: 7,
name: "Colorful",
path: ${dir}/1-background/HeartIllustration_0011s_0007_colourful.png,
weight: 8,
},
{
id: 8,
name: "Blue",
path: ${dir}/1-background/HeartIllustration_0011s_0008_light-blue.png,
weight: 8,
},
{
id: 9,
name: "Black",
path: ${dir}/1-background/HeartIllustration_0011s_0009_black-.png,
weight: 8,
},
{
id: 10,
name: "Exotic",
path: ${dir}/1-background/HeartIllustration_0011s_0008_exotic.png,
weight: 8,
},
{
id: 11,
name: "Afternoon",
path: ${dir}/1-background/HeartIllustration_0011s_0008_afternoon.png,
weight: 1,
},
{
id: 12,
name: "Pastell",
path: ${dir}/1-background/HeartIllustration_0011s_0008_pastell.png,
weight: 8,
},
],
position: { x: 0, y: 0 },
size: { width: width, height: height },
},
{
name: "Plant",
elements: [
{
id: 0,
name: "Plant 1",
path: ${dir}/2-plant/HeartIllustration_0010s_0000_back-vegetation-1.png,
weight: 20,
},
{
id: 1,
name: "Plant 2",
path: ${dir}/2-plant/HeartIllustration_0010s_0001_back-vegetation-2.png,
weight: 20,
},
{
id: 2,
name: "Plant 3",
path: ${dir}/2-plant/HeartIllustration_0010s_0002_back-vegetation-3.png,
weight: 20,
},
{
id: 3,
name: "Plant 4",
path: ${dir}/2-plant/HeartIllustration_0010s_0003_back-vegetation-4.png,
weight: 20,
},
{
id: 4,
name: "Plant 5",
path: ${dir}/2-plant/HeartIllustration_0010s_0004_back-vegetation-5.png,
weight: 20,
},
{
name: "Heart",
elements: [
{
id: 0,
name: "Heart",
path: ${dir}/3-heart/HeartIllustration_0000_heart.png,
weight: 100,
},
],
position: { x: 0, y: 0 },
size: { width: width, height: height },
},
{
name: "Flower",
elements: [
{
id: 0,
name: "Flower 1",
path: ${dir}/4-flower/HeartIllustration_0000s_0000_frontal-flowers-1.png,
weight: 10,
},
{
id: 1,
name: "Flower 2",
path: ${dir}/4-flowerHeartIllustration_0001s_0000_frontal-flowers-2.png,
weight: 10,
},
{
id: 2,
name: "Flower 3",
path: ${dir}/4-flower/HeartIllustration_0002s_0000_frontal-flowers-3.png,
weight: 10,
},
{
id: 3,
name: "Flower 4",
path: ${dir}/4-flower/HeartIllustration_0003s_0000_frontal-flowers-4.png,
weight: 10,
},
{
id: 4,
name: "Flower 5",
path: ${dir}/4-flower/HeartIllustration_0004s_0000_frontal-flowers-5.png,
weight: 10,
},
{
id: 5,
name: "Flower 6",
path: ${dir}/4-flower/HeartIllustration_0005s_0000_frontal-flowers-6.png,
weight: 10,
},
{
id: 6,
name: "Flower 7",
path: ${dir}/4-flower/HeartIllustration_0006s_0000_frontal-flowers-7.png,
weight: 10,
},
{
id: 7,
name: "Flower 8",
path: ${dir}/4-flower/HeartIllustration_0007s_0000_frontal-flowers-8.png,
weight: 10,
},
{
id: 8,
name: "Flower 9",
path: ${dir}/4-flower/HeartIllustration_0008s_0000_frontal-flowers-9.png,
weight: 10,
},
{
id: 9,
name: "Flower 10",
path: ${dir}/4-flower/HeartIllustration_0009s_0000_frontal-flowers-10.png,
weight: 10,
},
],
position: { x: 0, y: 0 },
size: { width: width, height: height },
},
],
position: { x: 0, y: 0 },
size: { width: width, height: height },
},
],
},
};
module.exports = {
width,
height,
description,
baseImageUri,
editionSize,
startEditionFrom,
endEditionAt,
races,
raceWeights,
};

did you find any solution for this?

im having the same issue to but only producing 1