Sandeep
TFDThoughtSpot For Developers
•Created by Mike on 1/17/2025 in #dev-help
Mike - Hi, we're getting this error when creati...
The following command eliminates any limit on tokens being generated. This applies to both BETA and GA endpoints:
tscli --adv service add-javaopt tomcat.tomcat D orion.jwtMinifiedCriteria COMPLETE
Raise a support case to run the above command on the cluster.
Transitioning from BETA to GA Endpoints
When moving from the BETA endpoint (/api/rest/2.0/auth/token/full) to the GA endpoint (/api/rest/2.0/auth/token/custom), keep the following points in mind:
1. Feature Flag Dependency:
Rules set using the GA endpoint will only take effect when the mandatoryTokenFeatureFilterEnabled flag is set to TRUE.
2. Rules from BETA Still Active:
Until the mandatoryTokenFeatureFilterEnabled flag is enabled, rules set through BETA endpoints will continue to be honored.
3. Rule Transition:
Before enabling the mandatoryTokenFeatureFilterEnabled feature, ensure all rules configured via the BETA endpoint are reconfigured through the GA endpoint.
• Note: You can set rules via the GA endpoint even if the mandatoryTokenFeatureFilterEnabled flag is not enabled. This facilitates a smooth transition.
4. Enable Feature Flag:
After migrating the rules from BETA to GA, submit a support case to request that the mandatoryTokenFeatureFilterEnabled flag be turned ON.
Note: Specify the object type as LOGICAL_TABLE. The LIVEBOARD and ANSWER object types are not supported.
If you experience any issues, let us know and we can help out.2 replies
TFDThoughtSpot For Developers
•Created by rumana-hf on 1/6/2025 in #dev-help
Hey Team, We have embedded the App using
This is Early access feature from 10.5.0.cl release, so won't be working. If this can't wait until then, refer to https://developers.thoughtspot.com/docs/selective-user-access and any of the two content:
- Blocking complete access to non-embedded content
- Selective user access to non-embedded content (Early Access) -- This is available from 10.5.0.cl onwards
For your use-case, you can try "Blocking complete access to non-embedded content" for now but we recommend waiting for 10.5.0.cl release
10 replies
TFDThoughtSpot For Developers
•Created by rumana-hf on 1/6/2025 in #dev-help
Hey Team, We have embedded the App using
Hi @rumana-hf : If your cluster instance is on version 10.5.0.cl, could you please file a support case to have this feature turned on.
Feature flag for reference "enableSelectiveUserAccessRestriction"
10 replies
TFDThoughtSpot For Developers
•Created by rumana-hf on 1/6/2025 in #dev-help
Hey Team, We have embedded the App using
Hi @rumana-hf :
We have an EA feature available from 10.5.0.cl release version where this can be controlled on whether the user should be allowed to access main Thoughtspot application. Could you please have a look at the documentation around this and then we can take it forward to enable this feature for your instance.
https://developers.thoughtspot.com/docs/Interface_EmbedConfig#_blocknonembedfullappaccess
cc: @Himanshu Arora
10 replies
TFDThoughtSpot For Developers
•Created by Sean on 1/5/2025 in #dev-help
Hey, having an issue with our embedded
Hi @Sean : Could you please elaborate the error you are observing. We will need the following details to understand the problem:
- What is the implementation of sync. Please share the HAR file
- Are we getting this after any recent upgrades? Release version where we are seeing the problems
- Time stamp when you observe this error so that we can take a look at the logs
- Cluster URL
cc: @Rajkunwer Singh
8 replies
TFDThoughtSpot For Developers
•Created by ThatSpot on 12/20/2024 in #dev-help
TrustedAuthTokenCookieless and JIT
Yes, @ThatSpot, we recommend setting up the init block on the server side. This prevents the cluster secret key from being exposed in the network tab of the browser console.
19 replies
TFDThoughtSpot For Developers
•Created by ferg.rose on 12/19/2024 in #dev-help
Hi - I’m setting up authentication for
Hi @ferg.rose:
Currently, the /api/rest/2.0/auth/token API endpoint supports JIT (Just-In-Time) provisioning only with the REPLACE logic. An enhancement is planned to provide greater flexibility by allowing both appending and replacing groups during token generation. However, this enhancement is scheduled for the 10.7 release.
Until, then the approach which is mentioned by @shikharTS can be followed to unblock your use-case.
Hope this helps.
5 replies
TFDThoughtSpot For Developers
•Created by ivnext on 12/12/2024 in #dev-help
Hi Team! Is there a swagger endpoint for
@ivnext : This is the spec file for the Public Endpoints exposed in Playground.
https://github.com/thoughtspot/rest-api-sdk/blob/release/api-spec/openapiSpecv3-2_0.json
Hope this helps. Let us know if anything else is required from our side.
You can use this spec in any swagger tool for example: https://editor-next.swagger.io/
5 replies
TFDThoughtSpot For Developers
•Created by Jason Lee on 11/26/2024 in #dev-help
Hello,
Hello @Jason Lee,
While creating schedule this is not supported yet. We have another feature which can cover this functionality. Here are the details for the same:
To have different set of filters for different users, we can use the capability of Attribute-Based Access Control (ABAC) Feature, where in the filters can be persisted for individual users.
Please refer to https://developers.thoughtspot.com/docs/api-authv2#_get_tokens_with_custom_rules_and_filter_conditions for more details.
If this doesn't work for your use-case, could you please file a feature request
cc: @Himanshu Arora @Nicolas
3 replies
TFDThoughtSpot For Developers
•Created by rumana-hf on 11/26/2024 in #dev-help
When logging into Thoughtspot
Hi @rumana-hf :
Here are the default configurations:
DEFAULT_ACCOUNT_LOCKOUT_DURATION_MIN = 60 mins.
And the default DEFAULT_MAX_ALLOWED_FAILED_LOGIN_ATTEMPTS is set to 10.
Both of these are configurable and if these needs to be adjusted, support ticket can be raised to honor the new limits.
4 replies
TFDThoughtSpot For Developers
•Created by ketchup on 11/6/2024 in #dev-help
Hi team, I have questions regarding
Hello @ketchup , We checked and can confirm that other than SDK we currently don't have the support to decode, edit and encode back the proto content
Could you add this as a feature request
cc: @Himanshu Arora @Nicolas @utsav.kapoor
6 replies
TFDThoughtSpot For Developers
•Created by ketchup on 11/6/2024 in #dev-help
Hi team, I have questions regarding
yeah if it is the same guid, it will update the existing liveboard but I think here the use-case is to have the the new name for each export. So if we make use of transient content, it will not persist the changes on the actual object and instead return the modified content in exported file
6 replies
TFDThoughtSpot For Developers
•Created by ketchup on 11/6/2024 in #dev-help
Hi team, I have questions regarding
Hi @shikharTS: If we are going with import TML option, it will still be an issue of having duplicate liveboards in the system and as mentioned this will not scale.
Let me check the encoding and decoding functionality available in the system and will get back with details soon.
6 replies
TFDThoughtSpot For Developers
•Created by Nikhil Kumaran S on 10/8/2024 in #dev-help
Hi Team, we are facing this error
Hi @Nikhil Kumaran S : Could you please share the HAR file here
4 replies
TFDThoughtSpot For Developers
•Created by Mohsin Manzoor Bhat on 10/3/2024 in #dev-help
Is Develop tab also visible for
Yes, we are working with IAM team on this and will get back to you as soon as possible.
17 replies