How to obtain guest_token for embedded-sdk after disabling MFA and integrating Okta?

[rick-chou]

[dosubot[bot]]

Hey @rick-chou! I'm here to help you with any bugs or questions you have while waiting for a human maintainer. Let me know how I can assist you!

To obtain a guest_token for the embedded SDK after disabling MFA and integrating Okta, you need to have your backend request the guest token from Superset's POST /security/guest_token endpoint. This token is then passed to the frontend for use with the SDK. Here is a general approach:

1. Ensure your backend is set up to authenticate with Superset and can make HTTP requests.
2. Implement a function in your backend to request the guest token from Superset. Make sure to include the necessary request body as defined by the GuestTokenCreateSchema:

import requests

def fetch_guest_token():
    url = "https://superset.example.com/api/v1/security/guest_token"
    headers = {
        "Content-Type": "application/json",
        "Authorization": "Bearer <your_access_token>"
    }
    payload = {
        "user": {
            "username": "guest_user"
        },
        "resources": [
            {
                "type": "dashboard",
                "id": "your_dashboard_id"
            }
        ],
        "rls": []
    }
    response = requests.post(url, headers=headers, json=payload)
    if response.status_code == 200:
        return response.json().get("token")
    else:
        raise Exception("Failed to obtain guest token: " + response.text)

3. Use this function in your frontend to fetch the guest token:

import { embedDashboard } from "@superset-ui/embedded-sdk";

async function fetchGuestTokenFromBackend() {
  const response = await fetch('/your-backend-endpoint-to-fetch-guest-token');
  const data = await response.json();
  return data.token;
}

embedDashboard({
  id: "abc123",
  supersetDomain: "https://superset.example.com",
  mountPoint: document.getElementById("my-superset-container"),
  fetchGuestToken: fetchGuestTokenFromBackend,
  dashboardUiConfig: {
    hideTitle: true,
    filters: {
      expanded: true,
    },
    urlParams: {
      foo: 'value1',
      bar: 'value2',
    }
  },
  iframeSandboxExtras: ['allow-top-navigation', 'allow-popups-to-escape-sandbox'],
  referrerPolicy: "same-origin"
});

This setup allows your frontend to obtain a guest token from your backend, which in turn requests it from Superset. Ensure that the request payload matches the schema expected by Superset's API, including user and resource details ^[1].

To continue talking to Dosu, mention @dosu.

---

^{Help Dosu learn! Give it feedback: Great Response | Irrelevant Answer | Incorrect Sources | Too Verbose | Hallucination | Bug Report | Other}