Sandeep
TFDThoughtSpot For Developers
•Created by Regan on 2/19/2025 in #dev-help
Regan - Hi team, I'm using the Rest API v2 to c...
This is the sample which demonstrates how this can be done. Could you please give it a try and let us know if this helps.
2 replies
TFDThoughtSpot For Developers
•Created by sagilaufer on 2/16/2025 in #dev-help
GM.
Hi @sagilaufer : Here is the password policy. We don't have this policy configurable
The password must:
• Be at least 8 characters long.
• Include characters from at least three of the following categories:
• Lowercase letters (e.g., a-z)
• Uppercase letters (e.g., A-Z)
• Numbers (e.g., 0-9)
• Special characters (e.g., ~!@#$%^&_-+=|(){}[]:;”’<>,.?/`)
lower = "(?=.\p{Ll})";
upper = "(?=.\p{Lu})";
digit = "(?=.\p{Digit})";
special = "(?=.[~!@#$%^&_\-+=`|\(){}\[\]:;"'<>,.?/])";
anyLetter = "(?=.\p{Lo})";
length = "(?=^.{8,})";
regex = length + "((" + lower + upper + digit + ")|(" + lower + upper + special + ")|"
+ "(" + lower + upper + anyLetter + ")|(" + lower + digit + special + ")|"
+ "(" + lower + digit + anyLetter + ")|(" + lower + special + anyLetter + ")|"
+ "(" + upper + digit + special + ")|(" + upper + digit + anyLetter + ")|"
+ "(" + upper + special + anyLetter + ")|(" + digit + special + anyLetter + "))^.";
Hope this helps
2 replies
TFDThoughtSpot For Developers
•Created by Regan on 2/19/2025 in #dev-help
Regan - Hi team, I'm using the Rest API v2 to c...
Hi @Regan:
Currently, this is not feasible. Connection APIs are designed specifically for schemas, tables, and columns—they do not support creating relationships. At this time, there are no public APIs available for creating relationships.
Could you please file a feature request for this via Support Case?
My Bad, this is feasible
2 replies
TFDThoughtSpot For Developers
•Created by Mike on 1/17/2025 in #dev-help
Mike - Hi, we're getting this error when creati...
Yes, that's right. the filters set via
/api/rest/2.0/auth/token/custom will have no effect until the mandatoryTokenFilterFeatureEnabled is enabled.6 replies
TFDThoughtSpot For Developers
•Created by Mike on 2/5/2025 in #dev-help
Mike - Hi all, we had an incident recently wher...
Hi @Mike :
Apologies for the oversight in enabling the GA feature flag and disabling the BETA feature flag, which resulted in the incident.
To address this, as you rightly pointed out, these APIs will suffice for monitoring. Additionally, once the GA feature is enabled, we can update the monitoring script with the new filter_rules.
Thank you for your understanding!
2 replies
TFDThoughtSpot For Developers
•Created by Mike on 1/17/2025 in #dev-help
Mike - Hi, we're getting this error when creati...
Hi @Mike:
You can use the /api/rest/2.0/auth/token/custom endpoint to set user parameters without enabling the GA feature. Once you’re confident that all rules are properly configured using the GA endpoint, you should submit a support request to enable the mandatoryTokenFeatureFilterEnabled(GA) flag.
If you need to check the token filters at any point, you can do so through the GA and BET endpoints. Please refer to user_parameters(BETA) and access_control_properties(GA) via the /api/rest/2.0/users/search endpoint.
Let us know if you need further assistance!
6 replies
TFDThoughtSpot For Developers
•Created by Mike on 1/17/2025 in #dev-help
Mike - Hi, we're getting this error when creati...
The following command eliminates any limit on tokens being generated. This applies to both BETA and GA endpoints:
tscli --adv service add-javaopt tomcat.tomcat D orion.jwtMinifiedCriteria COMPLETE
Raise a support case to run the above command on the cluster.
Transitioning from BETA to GA Endpoints
When moving from the BETA endpoint (/api/rest/2.0/auth/token/full) to the GA endpoint (/api/rest/2.0/auth/token/custom), keep the following points in mind:
1. Feature Flag Dependency:
Rules set using the GA endpoint will only take effect when the mandatoryTokenFeatureFilterEnabled flag is set to TRUE.
2. Rules from BETA Still Active:
Until the mandatoryTokenFeatureFilterEnabled flag is enabled, rules set through BETA endpoints will continue to be honored.
3. Rule Transition:
Before enabling the mandatoryTokenFeatureFilterEnabled feature, ensure all rules configured via the BETA endpoint are reconfigured through the GA endpoint.
• Note: You can set rules via the GA endpoint even if the mandatoryTokenFeatureFilterEnabled flag is not enabled. This facilitates a smooth transition.
4. Enable Feature Flag:
After migrating the rules from BETA to GA, submit a support case to request that the mandatoryTokenFeatureFilterEnabled flag be turned ON.
Note: Specify the object type as LOGICAL_TABLE. The LIVEBOARD and ANSWER object types are not supported.
If you experience any issues, let us know and we can help out.6 replies
TFDThoughtSpot For Developers
•Created by rumana-hf on 1/6/2025 in #dev-help
Hey Team, We have embedded the App using
This is Early access feature from 10.5.0.cl release, so won't be working. If this can't wait until then, refer to https://developers.thoughtspot.com/docs/selective-user-access and any of the two content:
- Blocking complete access to non-embedded content
- Selective user access to non-embedded content (Early Access) -- This is available from 10.5.0.cl onwards
For your use-case, you can try "Blocking complete access to non-embedded content" for now but we recommend waiting for 10.5.0.cl release
10 replies
TFDThoughtSpot For Developers
•Created by rumana-hf on 1/6/2025 in #dev-help
Hey Team, We have embedded the App using
Hi @rumana-hf : If your cluster instance is on version 10.5.0.cl, could you please file a support case to have this feature turned on.
Feature flag for reference "enableSelectiveUserAccessRestriction"
10 replies
TFDThoughtSpot For Developers
•Created by rumana-hf on 1/6/2025 in #dev-help
Hey Team, We have embedded the App using
Hi @rumana-hf :
We have an EA feature available from 10.5.0.cl release version where this can be controlled on whether the user should be allowed to access main Thoughtspot application. Could you please have a look at the documentation around this and then we can take it forward to enable this feature for your instance.
https://developers.thoughtspot.com/docs/Interface_EmbedConfig#_blocknonembedfullappaccess
cc: @Himanshu Arora
10 replies
TFDThoughtSpot For Developers
•Created by Sean on 1/5/2025 in #dev-help
Hey, having an issue with our embedded
Hi @Sean : Could you please elaborate the error you are observing. We will need the following details to understand the problem:
- What is the implementation of sync. Please share the HAR file
- Are we getting this after any recent upgrades? Release version where we are seeing the problems
- Time stamp when you observe this error so that we can take a look at the logs
- Cluster URL
cc: @Rajkunwer Singh
8 replies
TFDThoughtSpot For Developers
•Created by ThatSpot on 12/20/2024 in #dev-help
TrustedAuthTokenCookieless and JIT
Yes, @ThatSpot, we recommend setting up the init block on the server side. This prevents the cluster secret key from being exposed in the network tab of the browser console.
19 replies
TFDThoughtSpot For Developers
•Created by ferg.rose on 12/19/2024 in #dev-help
Hi - I’m setting up authentication for
Hi @ferg.rose:
Currently, the /api/rest/2.0/auth/token API endpoint supports JIT (Just-In-Time) provisioning only with the REPLACE logic. An enhancement is planned to provide greater flexibility by allowing both appending and replacing groups during token generation. However, this enhancement is scheduled for the 10.7 release.
Until, then the approach which is mentioned by @shikharTS can be followed to unblock your use-case.
Hope this helps.
5 replies
TFDThoughtSpot For Developers
•Created by ivnext on 12/12/2024 in #dev-help
Hi Team! Is there a swagger endpoint for
@ivnext : This is the spec file for the Public Endpoints exposed in Playground.
https://github.com/thoughtspot/rest-api-sdk/blob/release/api-spec/openapiSpecv3-2_0.json
Hope this helps. Let us know if anything else is required from our side.
You can use this spec in any swagger tool for example: https://editor-next.swagger.io/
5 replies
TFDThoughtSpot For Developers
•Created by Jason Lee on 11/26/2024 in #dev-help
Hello,
Hello @Jason Lee,
While creating schedule this is not supported yet. We have another feature which can cover this functionality. Here are the details for the same:
To have different set of filters for different users, we can use the capability of Attribute-Based Access Control (ABAC) Feature, where in the filters can be persisted for individual users.
Please refer to https://developers.thoughtspot.com/docs/api-authv2#_get_tokens_with_custom_rules_and_filter_conditions for more details.
If this doesn't work for your use-case, could you please file a feature request
cc: @Himanshu Arora @Nicolas
3 replies
TFDThoughtSpot For Developers
•Created by rumana-hf on 11/26/2024 in #dev-help
When logging into Thoughtspot
Hi @rumana-hf :
Here are the default configurations:
DEFAULT_ACCOUNT_LOCKOUT_DURATION_MIN = 60 mins.
And the default DEFAULT_MAX_ALLOWED_FAILED_LOGIN_ATTEMPTS is set to 10.
Both of these are configurable and if these needs to be adjusted, support ticket can be raised to honor the new limits.
4 replies
TFDThoughtSpot For Developers
•Created by ketchup on 11/6/2024 in #dev-help
Hi team, I have questions regarding
Hello @ketchup , We checked and can confirm that other than SDK we currently don't have the support to decode, edit and encode back the proto content
Could you add this as a feature request
cc: @Himanshu Arora @Nicolas @utsav.kapoor
6 replies
TFDThoughtSpot For Developers
•Created by ketchup on 11/6/2024 in #dev-help
Hi team, I have questions regarding
yeah if it is the same guid, it will update the existing liveboard but I think here the use-case is to have the the new name for each export. So if we make use of transient content, it will not persist the changes on the actual object and instead return the modified content in exported file
6 replies