From 997664c9490c8b4ad8c71c8eb2a50d43230866a4 Mon Sep 17 00:00:00 2001 From: Jim Anderson Date: Tue, 19 Aug 2025 11:32:05 -0500 Subject: [PATCH 1/9] docs: add open telemetry example --- .gitignore | 6 + examples/opentelemetry/.env.example | 19 + examples/opentelemetry/README.md | 485 ++++++++++++++++++ examples/opentelemetry/build.gradle | 103 ++++ .../gradle/wrapper/gradle-wrapper.properties | 7 + examples/opentelemetry/gradlew | 249 +++++++++ examples/opentelemetry/gradlew.bat | 92 ++++ examples/opentelemetry/settings.gradle | 4 + .../opentelemetry/OpenTelemetryExample.java | 413 +++++++++++++++ 9 files changed, 1378 insertions(+) create mode 100644 examples/opentelemetry/.env.example create mode 100644 examples/opentelemetry/README.md create mode 100644 examples/opentelemetry/build.gradle create mode 100644 examples/opentelemetry/gradle/wrapper/gradle-wrapper.properties create mode 100755 examples/opentelemetry/gradlew create mode 100644 examples/opentelemetry/gradlew.bat create mode 100644 examples/opentelemetry/settings.gradle create mode 100644 examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java diff --git a/.gitignore b/.gitignore index c3784f2d..7da40f54 100644 --- a/.gitignore +++ b/.gitignore @@ -30,3 +30,9 @@ VERSION.txt # VSCode IDE /.vscode + +# env files +.env + +# mac +.DS_Store \ No newline at end of file diff --git a/examples/opentelemetry/.env.example b/examples/opentelemetry/.env.example new file mode 100644 index 00000000..66de874e --- /dev/null +++ b/examples/opentelemetry/.env.example @@ -0,0 +1,19 @@ +# OpenFGA Configuration (REQUIRED) +FGA_API_URL=api_url_here +FGA_STORE_ID=store_id_here +FGA_MODEL_ID=model_id_here + +# Authentication (optional - for authenticated OpenFGA instances) +FGA_CLIENT_ID=client_id_here +FGA_CLIENT_SECRET=client_secret_here +FGA_API_AUDIENCE=api_audience_here +FGA_API_TOKEN_ISSUER=api_issuer_here + +# OpenTelemetry Configuration (for manual configuration mode - ./gradlew run) +# These are used when running with manual OpenTelemetry setup +# Note: When using the Java agent (./gradlew runWithAgent), +# these values are overridden by the JVM arguments in build.gradle +OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317 +OTEL_SERVICE_NAME=openfga-java-sdk-example +OTEL_SERVICE_VERSION=1.0.0 + diff --git a/examples/opentelemetry/README.md b/examples/opentelemetry/README.md new file mode 100644 index 00000000..5e14327e --- /dev/null +++ b/examples/opentelemetry/README.md @@ -0,0 +1,485 @@ +# OpenTelemetry Example for OpenFGA Java SDK + +This example demonstrates two approaches for using OpenTelemetry metrics with the OpenFGA Java SDK: + +1. **Manual Configuration** (`./gradlew run`) - Code-based OpenTelemetry setup +2. **Java Agent** (`./gradlew runWithAgent`) - Zero-code automatic instrumentation + +Both approaches generate the same metrics: +- `fga-client.request.duration` - Total request time for FGA requests +- `fga-client.query.duration` - Time taken by FGA server to process requests +- `fga-client.credentials.request` - Number of token requests (if using client credentials) + +## Prerequisites + +- Java 11 or higher +- Docker and Docker Compose +- OpenFGA server running (or use the provided docker-compose setup) + +## Quick Start + +### 1. Start the OpenTelemetry Stack + +```bash +# Clone the OpenTelemetry Collector setup +git clone https://github.com/ewanharris/opentelemetry-collector-dev-setup.git otel-collector +cd otel-collector + +# Start the services +docker-compose up -d +``` + +This provides: +- **Jaeger** at http://localhost:16686 - Distributed tracing UI +- **Prometheus** at http://localhost:9090 - Metrics collection and querying +- **Grafana** at http://localhost:3001 - Metrics visualization (admin:admin) + +### 2. Configure OpenFGA Connection + +Copy and edit the environment file: +```bash +cp .env.example .env +# Edit .env with your OpenFGA store details +``` + +### 3. Choose Your Approach + +#### Option A: Manual Configuration (./gradlew run) +```bash +./gradlew run +``` + +**Pros:** +- Full control over OpenTelemetry configuration +- Can customize metrics, exporters, and resources in code +- No external dependencies beyond your application + +**Cons:** +- Requires OpenTelemetry SDK dependencies in your application +- More code to write and maintain + +#### Option B: Java Agent (./gradlew runWithAgent) +```bash +./gradlew runWithAgent +``` + +**Pros:** +- Zero code changes required - completely automatic +- No OpenTelemetry dependencies needed in your application +- Easy to enable/disable by adding/removing the agent + +**Cons:** +- Less control over configuration +- Requires downloading and managing the agent JAR + +## Viewing Metrics + +Both approaches export metrics to the same OTLP endpoint. View them in: + +- **Prometheus**: http://localhost:9090/graph + - Query: `fga_client_request_duration_bucket` + - Query: `fga_client_query_duration_bucket` + - Query: `fga_client_credentials_request_total` + +- **Grafana**: http://localhost:3001 (admin:admin) + - Import dashboard from `grafana/` directory + - Or create custom dashboards with the FGA metrics + +## Architecture + +### Manual Configuration Mode +``` +Your App → OpenTelemetry SDK → OTLP Exporter → Collector → Prometheus/Jaeger +``` + +The application code: +1. Configures OpenTelemetry SDK with OTLP exporter +2. Creates OpenFGA client with default telemetry enabled +3. Performs FGA operations which generate metrics +4. Metrics are exported to the OTLP collector + +### Java Agent Mode +``` +Your App → OpenTelemetry Agent → OTLP Exporter → Collector → Prometheus/Jaeger +``` + +The OpenTelemetry agent: +1. Automatically detects and instruments the OpenFGA SDK +2. Configures exporters based on system properties +3. Collects metrics without any code changes +4. Exports to the same OTLP collector + +## Customization + +### Manual Configuration +Edit the code in `OpenTelemetryExample.java`: +- Modify `configureOpenTelemetryManually()` to change exporters +- Add custom resource attributes +- Configure different metric readers + +### Java Agent +Modify the `runWithAgent` task in `build.gradle`: +- Change OTEL system properties +- Add custom resource attributes via `-Dotel.resource.attributes` +- Configure different exporters via `-Dotel.exporter.*` + +## Dependencies + +### Always Required +```gradle +implementation("dev.openfga:openfga-sdk") +implementation("io.github.cdimascio:dotenv-java:3.0.0") +``` + +### Manual Configuration Only +```gradle +implementation("io.opentelemetry:opentelemetry-sdk:1.32.0") +implementation("io.opentelemetry:opentelemetry-exporter-otlp:1.32.0") +implementation("io.opentelemetry.semconv:opentelemetry-semconv:1.21.0-alpha") +``` + +### Java Agent Only +- No additional dependencies required +- The agent JAR is automatically downloaded by the `runWithAgent` task + +## Troubleshooting + +### No Metrics Appearing +1. Verify OTLP collector is running on localhost:4317 +2. Check the application logs for OpenTelemetry initialization messages +3. Ensure FGA operations are actually being performed + +### Manual Configuration Issues +- Verify all OpenTelemetry dependencies are included +- Check that `buildAndRegisterGlobal()` is called before creating the FGA client + +### Java Agent Issues +- Verify the agent JAR was downloaded successfully +- Check that OTEL system properties are set correctly +- Ensure the agent is being loaded (look for agent startup messages) + +### Connection Issues +- Verify your `.env` file has correct FGA_STORE_ID and FGA_MODEL_ID +- Check that your OpenFGA server is accessible +- Verify authentication credentials if using a protected OpenFGA instance + +## Next Steps + +- Explore the metrics in Grafana with custom dashboards +- Try different telemetry configurations to see what works best for your use case +- Consider which approach (manual vs agent) fits better with your deployment strategy + +### 4. Configure Environment Variables + +Copy the example environment file and configure it: + +```bash +cp .env.example .env +``` + +### Step 1: Create Store and Authorization Model + +You need to create a store and authorization model in your OpenFGA instance: + +1. **Create a store** using the OpenFGA CLI, API, or dashboard +2. **Create an authorization model** using the JSON structure provided in `authorization-model.json`: + ```bash + # Using OpenFGA CLI (if you have it installed) + fga store create --name "OpenTelemetry Example Store" + fga model write --file authorization-model.json + ``` + + Or use the OpenFGA API directly to create the store and model. + +3. **Note the Store ID and Authorization Model ID** from the responses + +### Step 2: Configure Environment Variables + +Edit `.env` with your OpenFGA server details and the IDs from Step 1: + +```bash +# OpenFGA Configuration +FGA_API_URL=https://api.us1.fga.dev # Or your OpenFGA server URL +FGA_STORE_ID=01ARZ3NDEKTSV4RRFFQ69G5FAV # Your actual store ID +FGA_MODEL_ID=01ARZ3NDEKTSV4RRFFQ69G5FAV # Your actual authorization model ID + +# OpenFGA Authentication (required for hosted service) +FGA_CLIENT_ID=your_client_id +FGA_CLIENT_SECRET=your_client_secret + +# OpenTelemetry Configuration +OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317 +OTEL_SERVICE_NAME=openfga-java-sdk-example +OTEL_SERVICE_VERSION=1.0.0 +``` + +### Demo Mode (No Store Required) + +If you don't want to create a store, you can run the demo in configuration-only mode by leaving `FGA_STORE_ID` empty. The example will show telemetry configuration without performing actual operations: + +```bash +./gradlew runDemo # Shows telemetry configuration only +``` + +## Running the Example + +### From the examples/opentelemetry directory: + +```bash +# Build and run the example +./gradlew run +``` + +### From the root SDK directory: + +```bash +# Build and run the opentelemetry example +./gradlew :examples:opentelemetry:run +``` + +## What the Example Does + +The example performs the following operations to generate telemetry data: + +1. **Configures OpenTelemetry** with OTLP gRPC exporter pointing to the local collector +2. **Creates OpenFGA client** with default telemetry configuration +3. **Sets up test environment**: + - Creates a new store + - Creates an authorization model with `user` and `document` types +4. **Performs various operations** with default telemetry: + - Writes relationship tuples + - Performs check operations + - Lists objects + - Reads tuples +5. **Recreates client** with custom telemetry configuration (fewer attributes) +6. **Performs additional operations** with custom telemetry: + - Batch check operations + - Lists users + - Writes and deletes tuples + +## Observing Metrics + +### Prometheus (http://localhost:9090) + +Query for OpenFGA metrics: +- `fga_client_request_duration_bucket` - Request duration histogram +- `fga_client_query_duration_bucket` - Query duration histogram +- `fga_client_credentials_request_total` - Credentials request counter + +Example queries: +```promql +# Average request duration by method +rate(fga_client_request_duration_sum[5m]) / rate(fga_client_request_duration_count[5m]) + +# Request rate by HTTP status code +rate(fga_client_request_duration_count[5m]) + +# 95th percentile request duration +histogram_quantile(0.95, rate(fga_client_request_duration_bucket[5m])) +``` + +### Grafana (http://localhost:3001) + +Login with `admin:admin`. The collector setup includes pre-configured dashboards for OpenFGA metrics. + +### Jaeger (http://localhost:16686) + +While this example focuses on metrics, you can also observe any traces if tracing is configured. + +## Supported Metrics and Attributes + +### Metrics + +| Metric Name | Type | Description | +|-------------|------|-------------| +| `fga-client.request.duration` | Histogram | Total request time for FGA requests, in milliseconds | +| `fga-client.query.duration` | Histogram | Time taken by the FGA server to process and evaluate the request, in milliseconds | +| `fga-client.credentials.request` | Counter | Total number of new token requests initiated using the Client Credentials flow | + +### Attributes + +| Attribute Name | Type | Description | +|----------------|------|-------------| +| `fga-client.request.client_id` | string | Client ID associated with the request, if any | +| `fga-client.request.method` | string | FGA method/action that was performed (e.g., Check, ListObjects) | +| `fga-client.request.model_id` | string | Authorization model ID that was sent as part of the request, if any | +| `fga-client.request.store_id` | string | Store ID that was sent as part of the request | +| `fga-client.response.model_id` | string | Authorization model ID that the FGA server used | +| `http.host` | string | Host identifier of the origin the request was sent to | +| `http.request.method` | string | HTTP method for the request | +| `http.request.resend_count` | int | Number of retries attempted, if any | +| `http.response.status_code` | int | Status code of the response (e.g., `200` for success) | +| `url.scheme` | string | HTTP scheme of the request (`http`/`https`) | +| `url.full` | string | Full URL of the request | +| `user_agent.original` | string | User Agent used in the query | + +## Telemetry Configuration + +### Default Configuration + +The SDK includes a default telemetry configuration that enables all metrics with all default attributes: + +```java +// Uses default telemetry configuration +OpenFgaClient client = new OpenFgaClient(new ClientConfiguration() + .apiUrl("http://localhost:8080")); +``` + +### Custom Configuration + +You can customize which metrics and attributes are collected: + +```java +// Create custom telemetry configuration +Map> customAttributes = new HashMap<>(); +customAttributes.put(Attributes.FGA_CLIENT_REQUEST_METHOD, Optional.empty()); +customAttributes.put(Attributes.FGA_CLIENT_REQUEST_STORE_ID, Optional.empty()); +customAttributes.put(Attributes.HTTP_RESPONSE_STATUS_CODE, Optional.empty()); + +Map>> metrics = new HashMap<>(); +metrics.put(Histograms.REQUEST_DURATION, customAttributes); +metrics.put(Histograms.QUERY_DURATION, customAttributes); + +TelemetryConfiguration telemetryConfig = new TelemetryConfiguration(metrics); + +OpenFgaClient client = new OpenFgaClient(new ClientConfiguration() + .apiUrl("http://localhost:8080") + .telemetryConfiguration(telemetryConfig)); +``` + +## Troubleshooting + +### No Metrics Appearing + +1. **Check OpenTelemetry collector is running**: + ```bash + docker-compose ps + ``` + +2. **Verify OTLP endpoint is correct** in your `.env` file: + ```bash + OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317 + ``` + +3. **Check collector logs**: + ```bash + docker-compose logs otel-collector + ``` + +### Connection Issues + +1. **Ensure OpenFGA server is running** on the configured port +2. **Check firewall settings** - ensure ports 4317 (OTLP), 9090 (Prometheus), 3001 (Grafana) are accessible +3. **Verify network connectivity** between the example application and the collector + +### Authentication Issues + +If using client credentials authentication: +1. **Verify client ID and secret** are correct +2. **Check the token issuer URL** matches your OpenFGA server +3. **Ensure the API audience** is configured correctly + +## Cleanup + +To stop the OpenTelemetry stack: + +```bash +cd otel-collector +docker-compose down +``` + +## Learn More + +- [OpenFGA Documentation](https://openfga.dev/docs) +- [OpenFGA Java SDK Documentation](../../README.md) +- [OpenTelemetry Java Documentation](https://opentelemetry.io/docs/languages/java/) +- [OpenFGA Telemetry Documentation](../../docs/OpenTelemetry.md) + +# OpenTelemetry Manual Configuration Example + +This example demonstrates how to use OpenTelemetry with the OpenFGA Java SDK using **manual configuration** with code-based setup. + +## Prerequisites + +- Java 11 or higher +- OpenFGA server running with existing store and authorization model + +## Setup + +### Configure Environment Variables + +Copy `.env.example` to `.env` and update with your values: + +```bash +cp .env.example .env +# Edit .env with your actual FGA store ID, model ID, and credentials +``` + +The `.env` file should contain: + +```bash +# FGA Configuration (REQUIRED) +FGA_API_URL=http://localhost:8080 +FGA_STORE_ID=your-actual-store-id +FGA_MODEL_ID=your-actual-model-id + +# Authentication (optional) +FGA_CLIENT_ID=your-client-id +FGA_CLIENT_SECRET=your-client-secret +FGA_API_AUDIENCE=https://api.fga.example +FGA_API_TOKEN_ISSUER=auth.fga.example +``` + +## Running the Example + +### Option 1: Using Gradle Wrapper (if available) +```bash +./gradlew run +``` + +### Option 2: Using Gradle directly +```bash +gradle run +``` + +### Option 3: Regenerate Gradle Wrapper (if needed) +```bash +gradle wrapper --gradle-version 8.5 +./gradlew run +``` + +## What It Does + +The example runs continuously, performing these operations every 5 seconds: + +1. **Manual OpenTelemetry setup** - Configures OpenTelemetry SDK with Prometheus exporter +2. **Read authorization model** - Gets the existing authorization model +3. **Read existing tuples** - Reads all tuples from the store +4. **Check operations** - Tests specific user permissions: + - `user:anne` can `viewer` `document:2021-budget` + - `user:beth` can `writer` `document:2021-budget` + - `user:anne` can `viewer` `document:2022-budget` +5. **Batch check** - Same checks but in a single batch request +6. **List objects** - Lists documents that `user:anne` can view + +## Viewing Metrics + +The example starts a Prometheus metrics server on port 9090. Metrics will be available at: +http://localhost:9090/metrics + +Look for metrics prefixed with `fga_client_`: +- `fga_client_request_duration_seconds` - Total request duration +- `fga_client_query_duration_seconds` - Server processing time +- `fga_client_credentials_request_total` - Authentication requests + +## How It Works + +- **Code-based configuration** - OpenTelemetry is configured programmatically in the application +- **Prometheus exporter** - Metrics are exported via HTTP server on port 9090 +- **SDK metrics enabled** - The FGA SDK uses the configured OpenTelemetry instance + +## Comparison with No-Code Example + +- **Manual**: Requires explicit OpenTelemetry configuration in code, full control +- **No-Code**: Uses Java agent, no configuration code needed +- **Both**: Same FGA operations, same metrics generated, same authentication support diff --git a/examples/opentelemetry/build.gradle b/examples/opentelemetry/build.gradle new file mode 100644 index 00000000..69b7cce2 --- /dev/null +++ b/examples/opentelemetry/build.gradle @@ -0,0 +1,103 @@ +plugins { + id 'application' + id 'com.diffplug.spotless' version '7.2.1' +} + +application { + mainClass = 'dev.openfga.sdk.example.opentelemetry.OpenTelemetryExample' +} + +// Override the default run task to pass manual config flag +run { + args = ['--mode=manual'] +} + +// Task to download OpenTelemetry Java agent if not present +task downloadAgent { + group = 'setup' + description = 'Download OpenTelemetry Java agent if not present' + + doLast { + def agentFile = file('opentelemetry-javaagent.jar') + if (!agentFile.exists()) { + println "Downloading OpenTelemetry Java agent..." + def agentUrl = 'https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/latest/download/opentelemetry-javaagent.jar' + new URL(agentUrl).withInputStream { i -> + agentFile.withOutputStream { it << i } + } + println "Downloaded opentelemetry-javaagent.jar" + } else { + println "OpenTelemetry agent already exists" + } + } +} + +// Task to run with OpenTelemetry agent (no-code approach) +task runWithAgent(type: JavaExec) { + group = 'application' + description = 'Run the OpenTelemetry example with Java agent (no-code approach)' + dependsOn downloadAgent + classpath = sourceSets.main.runtimeClasspath + mainClass = 'dev.openfga.sdk.example.opentelemetry.OpenTelemetryExample' + + // Add JVM arguments for OpenTelemetry agent with configuration + jvmArgs = [ + '-javaagent:opentelemetry-javaagent.jar', + '-Dotel.service.name=openfga-java-sdk-agent-example', + '-Dotel.service.version=1.0.0', + '-Dotel.exporter.otlp.endpoint=http://localhost:4317', + '-Dotel.exporter.otlp.protocol=grpc' + ] + + // Pass agent mode flag to the application + args = ['--mode=agent'] + + doFirst { + println "🤖 Running with OpenTelemetry Java agent (no-code approach)..." + println "Service Name: openfga-java-sdk-agent-example" + println "Service Version: 1.0.0" + println "Exporter Endpoint: http://localhost:4317" + println "Exporter Protocol: grpc" + println "" + println "Make sure you have an OTLP collector running on localhost:4317" + println "The agent automatically instruments the application - no code changes needed!" + } +} + +repositories { + mavenCentral() +} + +ext { + openTelemetryVersion = "1.32.0" + openTelemetryAlphaVersion = "1.32.0-alpha" +} + +dependencies { + // Core FGA SDK (always required) + implementation("dev.openfga:openfga-sdk") + + // OpenTelemetry SDK dependencies - ONLY NEEDED FOR MANUAL CONFIGURATION (./gradlew run) + // When using the Java agent (./gradlew runWithAgent), these dependencies are not required + // The agent provides all OpenTelemetry functionality automatically + implementation("io.opentelemetry:opentelemetry-sdk:$openTelemetryVersion") + implementation("io.opentelemetry:opentelemetry-exporter-prometheus:$openTelemetryAlphaVersion") + implementation("io.opentelemetry:opentelemetry-exporter-otlp:$openTelemetryVersion") + implementation("io.opentelemetry:opentelemetry-sdk-extension-autoconfigure:$openTelemetryVersion") + implementation("io.opentelemetry.semconv:opentelemetry-semconv:1.21.0-alpha") + + // Environment variables for this example + implementation("io.github.cdimascio:dotenv-java:3.2.0") +} + +// Use spotless plugin to automatically format code +spotless { + enforceCheck false + java { + palantirJavaFormat() + removeUnusedImports() + importOrder() + } +} + + diff --git a/examples/opentelemetry/gradle/wrapper/gradle-wrapper.properties b/examples/opentelemetry/gradle/wrapper/gradle-wrapper.properties new file mode 100644 index 00000000..a80b22ce --- /dev/null +++ b/examples/opentelemetry/gradle/wrapper/gradle-wrapper.properties @@ -0,0 +1,7 @@ +distributionBase=GRADLE_USER_HOME +distributionPath=wrapper/dists +distributionUrl=https\://services.gradle.org/distributions/gradle-8.6-bin.zip +networkTimeout=10000 +validateDistributionUrl=true +zipStoreBase=GRADLE_USER_HOME +zipStorePath=wrapper/dists diff --git a/examples/opentelemetry/gradlew b/examples/opentelemetry/gradlew new file mode 100755 index 00000000..1aa94a42 --- /dev/null +++ b/examples/opentelemetry/gradlew @@ -0,0 +1,249 @@ +#!/bin/sh + +# +# Copyright © 2015-2021 the original authors. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# https://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +# See the License for the specific language governing permissions and +# limitations under the License. +# + +############################################################################## +# +# Gradle start up script for POSIX generated by Gradle. +# +# Important for running: +# +# (1) You need a POSIX-compliant shell to run this script. If your /bin/sh is +# noncompliant, but you have some other compliant shell such as ksh or +# bash, then to run this script, type that shell name before the whole +# command line, like: +# +# ksh Gradle +# +# Busybox and similar reduced shells will NOT work, because this script +# requires all of these POSIX shell features: +# * functions; +# * expansions «$var», «${var}», «${var:-default}», «${var+SET}», +# «${var#prefix}», «${var%suffix}», and «$( cmd )»; +# * compound commands having a testable exit status, especially «case»; +# * various built-in commands including «command», «set», and «ulimit». +# +# Important for patching: +# +# (2) This script targets any POSIX shell, so it avoids extensions provided +# by Bash, Ksh, etc; in particular arrays are avoided. +# +# The "traditional" practice of packing multiple parameters into a +# space-separated string is a well documented source of bugs and security +# problems, so this is (mostly) avoided, by progressively accumulating +# options in "$@", and eventually passing that to Java. +# +# Where the inherited environment variables (DEFAULT_JVM_OPTS, JAVA_OPTS, +# and GRADLE_OPTS) rely on word-splitting, this is performed explicitly; +# see the in-line comments for details. +# +# There are tweaks for specific operating systems such as AIX, CygWin, +# Darwin, MinGW, and NonStop. +# +# (3) This script is generated from the Groovy template +# https://github.com/gradle/gradle/blob/HEAD/subprojects/plugins/src/main/resources/org/gradle/api/internal/plugins/unixStartScript.txt +# within the Gradle project. +# +# You can find Gradle at https://github.com/gradle/gradle/. +# +############################################################################## + +# Attempt to set APP_HOME + +# Resolve links: $0 may be a link +app_path=$0 + +# Need this for daisy-chained symlinks. +while + APP_HOME=${app_path%"${app_path##*/}"} # leaves a trailing /; empty if no leading path + [ -h "$app_path" ] +do + ls=$( ls -ld "$app_path" ) + link=${ls#*' -> '} + case $link in #( + /*) app_path=$link ;; #( + *) app_path=$APP_HOME$link ;; + esac +done + +# This is normally unused +# shellcheck disable=SC2034 +APP_BASE_NAME=${0##*/} +# Discard cd standard output in case $CDPATH is set (https://github.com/gradle/gradle/issues/25036) +APP_HOME=$( cd "${APP_HOME:-./}" > /dev/null && pwd -P ) || exit + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD=maximum + +warn () { + echo "$*" +} >&2 + +die () { + echo + echo "$*" + echo + exit 1 +} >&2 + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "$( uname )" in #( + CYGWIN* ) cygwin=true ;; #( + Darwin* ) darwin=true ;; #( + MSYS* | MINGW* ) msys=true ;; #( + NONSTOP* ) nonstop=true ;; +esac + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD=$JAVA_HOME/jre/sh/java + else + JAVACMD=$JAVA_HOME/bin/java + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD=java + if ! command -v java >/dev/null 2>&1 + then + die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +fi + +# Increase the maximum file descriptors if we can. +if ! "$cygwin" && ! "$darwin" && ! "$nonstop" ; then + case $MAX_FD in #( + max*) + # In POSIX sh, ulimit -H is undefined. That's why the result is checked to see if it worked. + # shellcheck disable=SC2039,SC3045 + MAX_FD=$( ulimit -H -n ) || + warn "Could not query maximum file descriptor limit" + esac + case $MAX_FD in #( + '' | soft) :;; #( + *) + # In POSIX sh, ulimit -n is undefined. That's why the result is checked to see if it worked. + # shellcheck disable=SC2039,SC3045 + ulimit -n "$MAX_FD" || + warn "Could not set maximum file descriptor limit to $MAX_FD" + esac +fi + +# Collect all arguments for the java command, stacking in reverse order: +# * args from the command line +# * the main class name +# * -classpath +# * -D...appname settings +# * --module-path (only if needed) +# * DEFAULT_JVM_OPTS, JAVA_OPTS, and GRADLE_OPTS environment variables. + +# For Cygwin or MSYS, switch paths to Windows format before running java +if "$cygwin" || "$msys" ; then + APP_HOME=$( cygpath --path --mixed "$APP_HOME" ) + CLASSPATH=$( cygpath --path --mixed "$CLASSPATH" ) + + JAVACMD=$( cygpath --unix "$JAVACMD" ) + + # Now convert the arguments - kludge to limit ourselves to /bin/sh + for arg do + if + case $arg in #( + -*) false ;; # don't mess with options #( + /?*) t=${arg#/} t=/${t%%/*} # looks like a POSIX filepath + [ -e "$t" ] ;; #( + *) false ;; + esac + then + arg=$( cygpath --path --ignore --mixed "$arg" ) + fi + # Roll the args list around exactly as many times as the number of + # args, so each arg winds up back in the position where it started, but + # possibly modified. + # + # NB: a `for` loop captures its iteration list before it begins, so + # changing the positional parameters here affects neither the number of + # iterations, nor the values presented in `arg`. + shift # remove old arg + set -- "$@" "$arg" # push replacement arg + done +fi + + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m" "-Xms64m"' + +# Collect all arguments for the java command: +# * DEFAULT_JVM_OPTS, JAVA_OPTS, JAVA_OPTS, and optsEnvironmentVar are not allowed to contain shell fragments, +# and any embedded shellness will be escaped. +# * For example: A user cannot expect ${Hostname} to be expanded, as it is an environment variable and will be +# treated as '${Hostname}' itself on the command line. + +set -- \ + "-Dorg.gradle.appname=$APP_BASE_NAME" \ + -classpath "$CLASSPATH" \ + org.gradle.wrapper.GradleWrapperMain \ + "$@" + +# Stop when "xargs" is not available. +if ! command -v xargs >/dev/null 2>&1 +then + die "xargs is not available" +fi + +# Use "xargs" to parse quoted args. +# +# With -n1 it outputs one arg per line, with the quotes and backslashes removed. +# +# In Bash we could simply go: +# +# readarray ARGS < <( xargs -n1 <<<"$var" ) && +# set -- "${ARGS[@]}" "$@" +# +# but POSIX shell has neither arrays nor command substitution, so instead we +# post-process each arg (as a line of input to sed) to backslash-escape any +# character that might be a shell metacharacter, then use eval to reverse +# that process (while maintaining the separation between arguments), and wrap +# the whole thing up as a single "set" statement. +# +# This will of course break if any of these variables contains a newline or +# an unmatched quote. +# + +eval "set -- $( + printf '%s\n' "$DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS" | + xargs -n1 | + sed ' s~[^-[:alnum:]+,./:=@_]~\\&~g; ' | + tr '\n' ' ' + )" '"$@"' + +exec "$JAVACMD" "$@" diff --git a/examples/opentelemetry/gradlew.bat b/examples/opentelemetry/gradlew.bat new file mode 100644 index 00000000..7101f8e4 --- /dev/null +++ b/examples/opentelemetry/gradlew.bat @@ -0,0 +1,92 @@ +@rem +@rem Copyright 2015 the original author or authors. +@rem +@rem Licensed under the Apache License, Version 2.0 (the "License"); +@rem you may not use this file except in compliance with the License. +@rem You may obtain a copy of the License at +@rem +@rem https://www.apache.org/licenses/LICENSE-2.0 +@rem +@rem Unless required by applicable law or agreed to in writing, software +@rem distributed under the License is distributed on an "AS IS" BASIS, +@rem WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. +@rem See the License for the specific language governing permissions and +@rem limitations under the License. +@rem + +@if "%DEBUG%"=="" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%"=="" set DIRNAME=. +@rem This is normally unused +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Resolve any "." and ".." in APP_HOME to make it shorter. +for %%i in ("%APP_HOME%") do set APP_HOME=%%~fi + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" "-Xms64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if %ERRORLEVEL% equ 0 goto execute + +echo. 1>&2 +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. 1>&2 +echo. 1>&2 +echo Please set the JAVA_HOME variable in your environment to match the 1>&2 +echo location of your Java installation. 1>&2 + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto execute + +echo. 1>&2 +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% 1>&2 +echo. 1>&2 +echo Please set the JAVA_HOME variable in your environment to match the 1>&2 +echo location of your Java installation. 1>&2 + +goto fail + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %* + +:end +@rem End local scope for the variables with windows NT shell +if %ERRORLEVEL% equ 0 goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +set EXIT_CODE=%ERRORLEVEL% +if %EXIT_CODE% equ 0 set EXIT_CODE=1 +if not ""=="%GRADLE_EXIT_CONSOLE%" exit %EXIT_CODE% +exit /b %EXIT_CODE% + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/examples/opentelemetry/settings.gradle b/examples/opentelemetry/settings.gradle new file mode 100644 index 00000000..77d9fe40 --- /dev/null +++ b/examples/opentelemetry/settings.gradle @@ -0,0 +1,4 @@ +rootProject.name = 'opentelemetry-example' + +// Include the main SDK project as a dependency +includeBuild '../..' diff --git a/examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java b/examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java new file mode 100644 index 00000000..ed7ecc54 --- /dev/null +++ b/examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java @@ -0,0 +1,413 @@ +/* + * OpenFGA + * A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. + * + * The version of the OpenAPI document: 1.x + * Contact: community@openfga.dev + * + * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech). + * https://openapi-generator.tech + * Do not edit the class manually. + */ + +package dev.openfga.sdk.example.opentelemetry; + +import dev.openfga.sdk.api.client.OpenFgaClient; +import dev.openfga.sdk.api.configuration.ClientConfiguration; +import dev.openfga.sdk.api.configuration.Credentials; +import dev.openfga.sdk.api.configuration.ClientCredentials; +import dev.openfga.sdk.api.configuration.TelemetryConfiguration; +import dev.openfga.sdk.api.client.model.*; +import dev.openfga.sdk.api.model.*; +import dev.openfga.sdk.telemetry.Attribute; +import dev.openfga.sdk.telemetry.Attributes; +import dev.openfga.sdk.telemetry.Counters; +import dev.openfga.sdk.telemetry.Histograms; +import dev.openfga.sdk.telemetry.Metric; +import io.github.cdimascio.dotenv.Dotenv; + +// OpenTelemetry imports - ONLY NEEDED FOR MANUAL CONFIGURATION (./gradlew run) +// When using the Java agent (./gradlew runWithAgent), these are not required +import io.opentelemetry.api.OpenTelemetry; +import io.opentelemetry.api.common.AttributeKey; +import io.opentelemetry.exporter.otlp.metrics.OtlpGrpcMetricExporter; +import io.opentelemetry.exporter.prometheus.PrometheusHttpServer; +import io.opentelemetry.sdk.OpenTelemetrySdk; +import io.opentelemetry.sdk.metrics.SdkMeterProvider; +import io.opentelemetry.sdk.metrics.export.PeriodicMetricReader; +import io.opentelemetry.sdk.resources.Resource; +import io.opentelemetry.semconv.ResourceAttributes; + +import java.time.Duration; +import java.util.HashMap; +import java.util.List; +import java.util.Map; +import java.util.Optional; +import java.util.concurrent.CompletableFuture; +import java.util.concurrent.TimeUnit; + +/** + * OpenFGA Java SDK - Combined OpenTelemetry Example + * + * This example demonstrates two approaches for using OpenTelemetry metrics with the OpenFGA Java SDK: + * + * 1. MANUAL CONFIGURATION (./gradlew run): + * - Uses code-based OpenTelemetry setup + * - Requires OpenTelemetry SDK dependencies + * - Full control over configuration + * + * 2. JAVA AGENT (./gradlew runWithAgent): + * - Uses OpenTelemetry Java agent for automatic instrumentation + * - No OpenTelemetry dependencies required in your application + * - Zero-code configuration approach + * + * Both approaches generate the same metrics: + * - fga-client.request.duration (histogram) - Total request time including network latency + * - fga-client.query.duration (histogram) - FGA server processing time only + * - fga-client.credentials.request (counter) - Number of authentication token requests + * + * The example also demonstrates: + * - Comprehensive telemetry configuration with ALL available SDK attributes (14 total) + * - Clear distinction between default attributes (12) and additional ones (2) + * - Privacy and performance considerations for telemetry attribute selection + * - Proper OpenTelemetry setup for both manual and agent modes + * - Real-world FGA operations that generate meaningful telemetry data + */ +public class OpenTelemetryExample { + + private static Dotenv dotenv; + private static OpenFgaClient fgaClient; + + public static void main(String[] args) throws Exception { + System.out.println("🚀 OpenFGA Java SDK - OpenTelemetry Example"); + System.out.println("==========================================="); + + // Determine OpenTelemetry mode from command line arguments + boolean isAgentMode = determineOpenTelemetryMode(args); + + // Load environment variables + dotenv = Dotenv.configure().ignoreIfMissing().load(); + + if (isAgentMode) { + System.out.println("🤖 Java Agent Mode"); + System.out.println(" The OpenTelemetry Java agent handles all setup automatically"); + System.out.println(" No configuration code needed in your application"); + } else { + System.out.println("🔧 Manual Configuration Mode"); + System.out.println(" This example shows code-based OpenTelemetry setup"); + System.out.println(" Requires OpenTelemetry SDK dependencies"); + + // Configure OpenTelemetry manually - ONLY NEEDED FOR MANUAL MODE + configureOpenTelemetryManually(); + } + + // Create OpenFGA client (works the same for both modes) + createOpenFgaClient(); + + System.out.println("\n🔄 Starting continuous operations loop..."); + System.out.println(" Operations will run every 5 seconds until stopped (Ctrl+C)"); + System.out.println(" This matches the behavior of other OpenFGA SDK examples"); + + // Run operations continuously + int operationCount = 0; + while (true) { + try { + operationCount++; + System.out.println("\n--- Operation " + operationCount + " ---"); + performOperations(); + + // Wait 5 seconds before next iteration + TimeUnit.SECONDS.sleep(5); + } catch (Exception e) { + System.err.println("Error in operation " + operationCount + ": " + e.getMessage()); + e.printStackTrace(); + TimeUnit.SECONDS.sleep(2); + } + } + } + + /** + * Determine the OpenTelemetry mode from command line arguments + * @param args Command line arguments + * @return true if agent mode, false if manual configuration mode + */ + private static boolean determineOpenTelemetryMode(String[] args) { + System.out.println("🔧 Parsing arguments: " + java.util.Arrays.toString(args)); + + for (String arg : args) { + if ("--mode=agent".equals(arg)) { + System.out.println("✓ Agent mode detected from arguments"); + return true; + } else if ("--mode=manual".equals(arg)) { + System.out.println("✓ Manual mode detected from arguments"); + return false; + } + } + + // Default to manual mode if no argument provided + if (args.length == 0) { + System.out.println("ℹ️ No mode specified, defaulting to manual configuration"); + } + return false; + } + + /** + * MANUAL CONFIGURATION ONLY - configures OpenTelemetry programmatically + * This method is only called when NOT using the Java agent + */ + private static void configureOpenTelemetryManually() { + System.out.println("\n⚙️ Configuring OpenTelemetry manually..."); + + String otlpEndpoint = dotenv.get("OTEL_EXPORTER_OTLP_ENDPOINT", "http://localhost:4317"); + String serviceName = dotenv.get("OTEL_SERVICE_NAME", "openfga-java-sdk-example"); + String serviceVersion = dotenv.get("OTEL_SERVICE_VERSION", "1.0.0"); + + System.out.println(" OTLP Endpoint: " + otlpEndpoint); + System.out.println(" Service Name: " + serviceName); + System.out.println(" Service Version: " + serviceVersion); + + // Create resource with service information + Resource resource = Resource.getDefault().toBuilder() + .put(ResourceAttributes.SERVICE_NAME, serviceName) + .put(ResourceAttributes.SERVICE_VERSION, serviceVersion) + .build(); + + // Configure OTLP metric exporter + OtlpGrpcMetricExporter metricExporter = OtlpGrpcMetricExporter.builder() + .setEndpoint(otlpEndpoint) + .build(); + + // Create meter provider with OTLP exporter + SdkMeterProvider meterProvider = SdkMeterProvider.builder() + .registerMetricReader( + PeriodicMetricReader.builder(metricExporter) + .setInterval(Duration.ofSeconds(10)) // Export metrics every 10 seconds + .build() + ) + .setResource(resource) + .build(); + + // Build and register OpenTelemetry SDK globally + OpenTelemetry openTelemetry = OpenTelemetrySdk.builder() + .setMeterProvider(meterProvider) + .buildAndRegisterGlobal(); + + System.out.println(" ✅ OpenTelemetry SDK configured with OTLP exporter"); + System.out.println(" 📊 Metrics will be exported to OTLP endpoint: " + otlpEndpoint); + } + + /** + * Create a comprehensive telemetry configuration showing all available attributes + * This demonstrates how to customize which telemetry data the SDK collects + */ + private static TelemetryConfiguration createTelemetryConfiguration() { + System.out.println("\n📊 Configuring comprehensive telemetry attributes..."); + + // Create a comprehensive attribute map that includes ALL available attributes + // This goes beyond the default configuration to show every telemetry option + Map> allAttributes = new HashMap<>(); + + // ✅ DEFAULT ATTRIBUTES - These are enabled by default in TelemetryConfiguration() + allAttributes.put(Attributes.FGA_CLIENT_REQUEST_CLIENT_ID, Optional.empty()); + allAttributes.put(Attributes.FGA_CLIENT_REQUEST_METHOD, Optional.empty()); + allAttributes.put(Attributes.FGA_CLIENT_REQUEST_MODEL_ID, Optional.empty()); + allAttributes.put(Attributes.FGA_CLIENT_REQUEST_STORE_ID, Optional.empty()); + allAttributes.put(Attributes.FGA_CLIENT_RESPONSE_MODEL_ID, Optional.empty()); + allAttributes.put(Attributes.HTTP_HOST, Optional.empty()); + allAttributes.put(Attributes.HTTP_REQUEST_METHOD, Optional.empty()); + allAttributes.put(Attributes.HTTP_REQUEST_RESEND_COUNT, Optional.empty()); + allAttributes.put(Attributes.HTTP_RESPONSE_STATUS_CODE, Optional.empty()); + allAttributes.put(Attributes.URL_FULL, Optional.empty()); + allAttributes.put(Attributes.URL_SCHEME, Optional.empty()); + allAttributes.put(Attributes.USER_AGENT, Optional.empty()); + + // 🔧 ADDITIONAL ATTRIBUTES - These are NOT enabled by default + // Adding these shows developers what extra telemetry data is available + + // Batch check size - not enabled by default because it only applies to batch operations + // and could add noise to telemetry for non-batch requests + allAttributes.put(Attributes.FGA_CLIENT_REQUEST_BATCH_CHECK_SIZE, Optional.empty()); + + // User field - not enabled by default for privacy/security reasons + // as it may contain PII (personally identifiable information) + allAttributes.put(Attributes.FGA_CLIENT_USER, Optional.empty()); + + // Create metrics configuration with all attributes + Map>> comprehensiveMetrics = new HashMap<>(); + comprehensiveMetrics.put(Histograms.REQUEST_DURATION, allAttributes); + comprehensiveMetrics.put(Histograms.QUERY_DURATION, allAttributes); + comprehensiveMetrics.put(Counters.CREDENTIALS_REQUEST, allAttributes); + + TelemetryConfiguration telemetryConfig = new TelemetryConfiguration(comprehensiveMetrics); + + System.out.println(" ✅ Enabled all 14 available attributes (12 default + 2 additional):"); + System.out.println(" DEFAULT: client_id, method, model_id, store_id, response.model_id"); + System.out.println(" DEFAULT: host, request.method, resend_count, status_code"); + System.out.println(" DEFAULT: url.full, url.scheme, user_agent"); + System.out.println(" ADDITIONAL: batch_check_size (batch operations only)"); + System.out.println(" ADDITIONAL: user (disabled by default for privacy)"); + System.out.println(" 📊 All SDK metrics: REQUEST_DURATION, QUERY_DURATION, CREDENTIALS_REQUEST"); + + return telemetryConfig; + } + + private static void createOpenFgaClient() throws Exception { + System.out.println("\n🔧 Creating OpenFGA client..."); + + String apiUrl = dotenv.get("FGA_API_URL", "http://localhost:8080"); + String storeId = dotenv.get("FGA_STORE_ID"); + String modelId = dotenv.get("FGA_MODEL_ID"); + + if (storeId == null || modelId == null) { + throw new IllegalStateException("FGA_STORE_ID and FGA_MODEL_ID must be configured in .env file"); + } + + System.out.println(" API URL: " + apiUrl); + System.out.println(" Store ID: " + storeId); + System.out.println(" Model ID: " + modelId); + + // Create client configuration with default telemetry + // The SDK will automatically detect and use either: + // - The globally registered OpenTelemetry instance (manual config) + // - The OpenTelemetry agent instance (agent mode) + ClientConfiguration config = new ClientConfiguration() + .apiUrl(apiUrl) + .storeId(storeId) + .authorizationModelId(modelId) + .telemetryConfiguration(createTelemetryConfiguration()); + + // Configure authentication if credentials are provided + String clientId = dotenv.get("FGA_CLIENT_ID"); + String clientSecret = dotenv.get("FGA_CLIENT_SECRET"); + + if (clientId != null && clientSecret != null) { + String apiAudience = dotenv.get("FGA_API_AUDIENCE", "https://api.fga.example"); + String apiTokenIssuer = dotenv.get("FGA_API_TOKEN_ISSUER", "auth.fga.example"); + + config.credentials(new Credentials( + new ClientCredentials() + .clientId(clientId) + .clientSecret(clientSecret) + .apiAudience(apiAudience) + .apiTokenIssuer(apiTokenIssuer) + )); + + System.out.println(" ✅ Client credentials authentication configured"); + } else { + System.out.println(" ℹ️ No authentication configured (using public API)"); + } + + // Create the client + fgaClient = new OpenFgaClient(config); + + System.out.println("✅ OpenFGA client created with telemetry enabled!"); + System.out.println(" 📊 Metrics will be automatically collected and exported"); + } + + private static void performOperations() throws Exception { + // Read the authorization model + System.out.println("📖 Reading authorization model..."); + ClientReadAuthorizationModelResponse modelResponse = fgaClient.readAuthorizationModel().get(); + System.out.println("✓ Read authorization model: " + modelResponse.getAuthorizationModel().getId()); + + // Write some test tuples first (to ensure we have data to check) + System.out.println("✍️ Writing test tuples..."); + try { + List tuples = List.of( + new ClientTupleKey() + .user("user:anne") + .relation("viewer") + ._object("doc:2021-budget"), + new ClientTupleKey() + .user("user:beth") + .relation("can_write") + ._object("doc:2021-budget"), + new ClientTupleKey() + .user("user:anne") + .relation("viewer") + ._object("doc:2022-budget") + ); + + ClientWriteResponse writeResponse = fgaClient.write(new ClientWriteRequest().writes(tuples)).get(); + System.out.println("✓ Wrote " + tuples.size() + " test tuples"); + } catch (Exception writeError) { + System.out.println("⚠️ Could not write tuples (may not be needed): " + writeError.getMessage()); + } + + // Read existing tuples + System.out.println("📋 Reading existing tuples..."); + ClientReadResponse readResponse = fgaClient.read(new ClientReadRequest()).get(); + System.out.println("✓ Found " + readResponse.getTuples().size() + " existing tuples"); + + // Perform check requests + System.out.println("🔍 Performing check operations..."); + + // Check: user:anne can view doc:2021-budget + ClientCheckRequest check1 = new ClientCheckRequest() + .user("user:anne") + .relation("viewer") + ._object("doc:2021-budget"); + ClientCheckResponse checkResponse1 = fgaClient.check(check1).get(); + System.out.println("✓ Check user:anne can view doc:2021-budget: " + checkResponse1.getAllowed()); + + // Check: user:beth can write doc:2021-budget + ClientCheckRequest check2 = new ClientCheckRequest() + .user("user:beth") + .relation("can_write") + ._object("doc:2021-budget"); + ClientCheckResponse checkResponse2 = fgaClient.check(check2).get(); + System.out.println("✓ Check user:beth can write doc:2021-budget: " + checkResponse2.getAllowed()); + + // Check: user:anne can view doc:2022-budget + ClientCheckRequest check3 = new ClientCheckRequest() + .user("user:anne") + .relation("viewer") + ._object("doc:2022-budget"); + ClientCheckResponse checkResponse3 = fgaClient.check(check3).get(); + System.out.println("✓ Check user:anne can view doc:2022-budget: " + checkResponse3.getAllowed()); + + // Batch check operations + System.out.println("🔍 Performing batch check operations..."); + List batchChecks = List.of( + new ClientCheckRequest() + .user("user:anne") + .relation("viewer") + ._object("doc:2021-budget"), + new ClientCheckRequest() + .user("user:beth") + .relation("can_write") + ._object("doc:2021-budget"), + new ClientCheckRequest() + .user("user:anne") + .relation("viewer") + ._object("doc:2022-budget") + ); + + List batchResponse = fgaClient.clientBatchCheck(batchChecks).get(); + System.out.println("✓ Batch check completed with " + batchResponse.size() + " results:"); + + for (int i = 0; i < batchResponse.size(); i++) { + ClientBatchCheckClientResponse response = batchResponse.get(i); + String correlationId = "check-" + (i + 1); + if (response.getThrowable() == null) { + System.out.println(" - " + correlationId + ": " + response.getAllowed()); + } else { + System.out.println(" - " + correlationId + ": ERROR - " + response.getThrowable().getMessage()); + } + } + + // List objects operation + System.out.println("📋 Listing objects user:anne can view..."); + ClientListObjectsRequest listRequest = new ClientListObjectsRequest() + .user("user:anne") + .relation("viewer") + .type("doc"); + + ClientListObjectsResponse listResponse = fgaClient.listObjects(listRequest).get(); + System.out.println("✓ user:anne can view " + listResponse.getObjects().size() + " documents: " + + String.join(", ", listResponse.getObjects())); + + System.out.println("📊 All operations completed - metrics generated!"); + System.out.println("📊 Generated metrics: request.duration, query.duration, credentials.request"); + } +} From 640cf9cfe6b0fba79990174217498d034a4f13f6 Mon Sep 17 00:00:00 2001 From: Jim Anderson Date: Tue, 19 Aug 2025 12:34:47 -0500 Subject: [PATCH 2/9] use published SDK version by default --- examples/opentelemetry/README.md | 343 +++---------------------- examples/opentelemetry/build.gradle | 9 +- examples/opentelemetry/settings.gradle | 10 +- 3 files changed, 48 insertions(+), 314 deletions(-) diff --git a/examples/opentelemetry/README.md b/examples/opentelemetry/README.md index 5e14327e..02808abb 100644 --- a/examples/opentelemetry/README.md +++ b/examples/opentelemetry/README.md @@ -10,6 +10,34 @@ Both approaches generate the same metrics: - `fga-client.query.duration` - Time taken by FGA server to process requests - `fga-client.credentials.request` - Number of token requests (if using client credentials) +## SDK Version Configuration + +**By default**, this example uses a published version of the OpenFGA Java SDK. + +If you're contributing to the SDK or testing unreleased features: + +1. **Enable local SDK** in `settings.gradle`: + ```gradle + // Uncomment this line: + includeBuild '../..' + ``` + +2. **Update dependency** in `build.gradle`: + ```gradle + // Comment out the versioned dependency: + // implementation("dev.openfga:openfga-sdk:$fgaSdkVersion") + + // Uncomment the local dependency: + implementation("dev.openfga:openfga-sdk") + ``` + +3. **Build the main SDK first** (from repository root): + ```bash + cd ../.. + ./gradlew build + cd examples/opentelemetry + ``` + ## Prerequisites - Java 11 or higher @@ -109,39 +137,6 @@ The OpenTelemetry agent: 3. Collects metrics without any code changes 4. Exports to the same OTLP collector -## Customization - -### Manual Configuration -Edit the code in `OpenTelemetryExample.java`: -- Modify `configureOpenTelemetryManually()` to change exporters -- Add custom resource attributes -- Configure different metric readers - -### Java Agent -Modify the `runWithAgent` task in `build.gradle`: -- Change OTEL system properties -- Add custom resource attributes via `-Dotel.resource.attributes` -- Configure different exporters via `-Dotel.exporter.*` - -## Dependencies - -### Always Required -```gradle -implementation("dev.openfga:openfga-sdk") -implementation("io.github.cdimascio:dotenv-java:3.0.0") -``` - -### Manual Configuration Only -```gradle -implementation("io.opentelemetry:opentelemetry-sdk:1.32.0") -implementation("io.opentelemetry:opentelemetry-exporter-otlp:1.32.0") -implementation("io.opentelemetry.semconv:opentelemetry-semconv:1.21.0-alpha") -``` - -### Java Agent Only -- No additional dependencies required -- The agent JAR is automatically downloaded by the `runWithAgent` task - ## Troubleshooting ### No Metrics Appearing @@ -163,100 +158,6 @@ implementation("io.opentelemetry.semconv:opentelemetry-semconv:1.21.0-alpha") - Check that your OpenFGA server is accessible - Verify authentication credentials if using a protected OpenFGA instance -## Next Steps - -- Explore the metrics in Grafana with custom dashboards -- Try different telemetry configurations to see what works best for your use case -- Consider which approach (manual vs agent) fits better with your deployment strategy - -### 4. Configure Environment Variables - -Copy the example environment file and configure it: - -```bash -cp .env.example .env -``` - -### Step 1: Create Store and Authorization Model - -You need to create a store and authorization model in your OpenFGA instance: - -1. **Create a store** using the OpenFGA CLI, API, or dashboard -2. **Create an authorization model** using the JSON structure provided in `authorization-model.json`: - ```bash - # Using OpenFGA CLI (if you have it installed) - fga store create --name "OpenTelemetry Example Store" - fga model write --file authorization-model.json - ``` - - Or use the OpenFGA API directly to create the store and model. - -3. **Note the Store ID and Authorization Model ID** from the responses - -### Step 2: Configure Environment Variables - -Edit `.env` with your OpenFGA server details and the IDs from Step 1: - -```bash -# OpenFGA Configuration -FGA_API_URL=https://api.us1.fga.dev # Or your OpenFGA server URL -FGA_STORE_ID=01ARZ3NDEKTSV4RRFFQ69G5FAV # Your actual store ID -FGA_MODEL_ID=01ARZ3NDEKTSV4RRFFQ69G5FAV # Your actual authorization model ID - -# OpenFGA Authentication (required for hosted service) -FGA_CLIENT_ID=your_client_id -FGA_CLIENT_SECRET=your_client_secret - -# OpenTelemetry Configuration -OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317 -OTEL_SERVICE_NAME=openfga-java-sdk-example -OTEL_SERVICE_VERSION=1.0.0 -``` - -### Demo Mode (No Store Required) - -If you don't want to create a store, you can run the demo in configuration-only mode by leaving `FGA_STORE_ID` empty. The example will show telemetry configuration without performing actual operations: - -```bash -./gradlew runDemo # Shows telemetry configuration only -``` - -## Running the Example - -### From the examples/opentelemetry directory: - -```bash -# Build and run the example -./gradlew run -``` - -### From the root SDK directory: - -```bash -# Build and run the opentelemetry example -./gradlew :examples:opentelemetry:run -``` - -## What the Example Does - -The example performs the following operations to generate telemetry data: - -1. **Configures OpenTelemetry** with OTLP gRPC exporter pointing to the local collector -2. **Creates OpenFGA client** with default telemetry configuration -3. **Sets up test environment**: - - Creates a new store - - Creates an authorization model with `user` and `document` types -4. **Performs various operations** with default telemetry: - - Writes relationship tuples - - Performs check operations - - Lists objects - - Reads tuples -5. **Recreates client** with custom telemetry configuration (fewer attributes) -6. **Performs additional operations** with custom telemetry: - - Batch check operations - - Lists users - - Writes and deletes tuples - ## Observing Metrics ### Prometheus (http://localhost:9090) @@ -282,102 +183,11 @@ histogram_quantile(0.95, rate(fga_client_request_duration_bucket[5m])) Login with `admin:admin`. The collector setup includes pre-configured dashboards for OpenFGA metrics. -### Jaeger (http://localhost:16686) - -While this example focuses on metrics, you can also observe any traces if tracing is configured. - -## Supported Metrics and Attributes - -### Metrics - -| Metric Name | Type | Description | -|-------------|------|-------------| -| `fga-client.request.duration` | Histogram | Total request time for FGA requests, in milliseconds | -| `fga-client.query.duration` | Histogram | Time taken by the FGA server to process and evaluate the request, in milliseconds | -| `fga-client.credentials.request` | Counter | Total number of new token requests initiated using the Client Credentials flow | - -### Attributes - -| Attribute Name | Type | Description | -|----------------|------|-------------| -| `fga-client.request.client_id` | string | Client ID associated with the request, if any | -| `fga-client.request.method` | string | FGA method/action that was performed (e.g., Check, ListObjects) | -| `fga-client.request.model_id` | string | Authorization model ID that was sent as part of the request, if any | -| `fga-client.request.store_id` | string | Store ID that was sent as part of the request | -| `fga-client.response.model_id` | string | Authorization model ID that the FGA server used | -| `http.host` | string | Host identifier of the origin the request was sent to | -| `http.request.method` | string | HTTP method for the request | -| `http.request.resend_count` | int | Number of retries attempted, if any | -| `http.response.status_code` | int | Status code of the response (e.g., `200` for success) | -| `url.scheme` | string | HTTP scheme of the request (`http`/`https`) | -| `url.full` | string | Full URL of the request | -| `user_agent.original` | string | User Agent used in the query | - -## Telemetry Configuration - -### Default Configuration - -The SDK includes a default telemetry configuration that enables all metrics with all default attributes: - -```java -// Uses default telemetry configuration -OpenFgaClient client = new OpenFgaClient(new ClientConfiguration() - .apiUrl("http://localhost:8080")); -``` - -### Custom Configuration - -You can customize which metrics and attributes are collected: - -```java -// Create custom telemetry configuration -Map> customAttributes = new HashMap<>(); -customAttributes.put(Attributes.FGA_CLIENT_REQUEST_METHOD, Optional.empty()); -customAttributes.put(Attributes.FGA_CLIENT_REQUEST_STORE_ID, Optional.empty()); -customAttributes.put(Attributes.HTTP_RESPONSE_STATUS_CODE, Optional.empty()); - -Map>> metrics = new HashMap<>(); -metrics.put(Histograms.REQUEST_DURATION, customAttributes); -metrics.put(Histograms.QUERY_DURATION, customAttributes); - -TelemetryConfiguration telemetryConfig = new TelemetryConfiguration(metrics); - -OpenFgaClient client = new OpenFgaClient(new ClientConfiguration() - .apiUrl("http://localhost:8080") - .telemetryConfiguration(telemetryConfig)); -``` - -## Troubleshooting - -### No Metrics Appearing - -1. **Check OpenTelemetry collector is running**: - ```bash - docker-compose ps - ``` - -2. **Verify OTLP endpoint is correct** in your `.env` file: - ```bash - OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317 - ``` - -3. **Check collector logs**: - ```bash - docker-compose logs otel-collector - ``` - -### Connection Issues - -1. **Ensure OpenFGA server is running** on the configured port -2. **Check firewall settings** - ensure ports 4317 (OTLP), 9090 (Prometheus), 3001 (Grafana) are accessible -3. **Verify network connectivity** between the example application and the collector - -### Authentication Issues +## Next Steps -If using client credentials authentication: -1. **Verify client ID and secret** are correct -2. **Check the token issuer URL** matches your OpenFGA server -3. **Ensure the API audience** is configured correctly +- Explore the metrics in Grafana with custom dashboards +- Try different telemetry configurations to see what works best for your use case +- Consider which approach (manual vs agent) fits better with your deployment strategy ## Cleanup @@ -394,92 +204,3 @@ docker-compose down - [OpenFGA Java SDK Documentation](../../README.md) - [OpenTelemetry Java Documentation](https://opentelemetry.io/docs/languages/java/) - [OpenFGA Telemetry Documentation](../../docs/OpenTelemetry.md) - -# OpenTelemetry Manual Configuration Example - -This example demonstrates how to use OpenTelemetry with the OpenFGA Java SDK using **manual configuration** with code-based setup. - -## Prerequisites - -- Java 11 or higher -- OpenFGA server running with existing store and authorization model - -## Setup - -### Configure Environment Variables - -Copy `.env.example` to `.env` and update with your values: - -```bash -cp .env.example .env -# Edit .env with your actual FGA store ID, model ID, and credentials -``` - -The `.env` file should contain: - -```bash -# FGA Configuration (REQUIRED) -FGA_API_URL=http://localhost:8080 -FGA_STORE_ID=your-actual-store-id -FGA_MODEL_ID=your-actual-model-id - -# Authentication (optional) -FGA_CLIENT_ID=your-client-id -FGA_CLIENT_SECRET=your-client-secret -FGA_API_AUDIENCE=https://api.fga.example -FGA_API_TOKEN_ISSUER=auth.fga.example -``` - -## Running the Example - -### Option 1: Using Gradle Wrapper (if available) -```bash -./gradlew run -``` - -### Option 2: Using Gradle directly -```bash -gradle run -``` - -### Option 3: Regenerate Gradle Wrapper (if needed) -```bash -gradle wrapper --gradle-version 8.5 -./gradlew run -``` - -## What It Does - -The example runs continuously, performing these operations every 5 seconds: - -1. **Manual OpenTelemetry setup** - Configures OpenTelemetry SDK with Prometheus exporter -2. **Read authorization model** - Gets the existing authorization model -3. **Read existing tuples** - Reads all tuples from the store -4. **Check operations** - Tests specific user permissions: - - `user:anne` can `viewer` `document:2021-budget` - - `user:beth` can `writer` `document:2021-budget` - - `user:anne` can `viewer` `document:2022-budget` -5. **Batch check** - Same checks but in a single batch request -6. **List objects** - Lists documents that `user:anne` can view - -## Viewing Metrics - -The example starts a Prometheus metrics server on port 9090. Metrics will be available at: -http://localhost:9090/metrics - -Look for metrics prefixed with `fga_client_`: -- `fga_client_request_duration_seconds` - Total request duration -- `fga_client_query_duration_seconds` - Server processing time -- `fga_client_credentials_request_total` - Authentication requests - -## How It Works - -- **Code-based configuration** - OpenTelemetry is configured programmatically in the application -- **Prometheus exporter** - Metrics are exported via HTTP server on port 9090 -- **SDK metrics enabled** - The FGA SDK uses the configured OpenTelemetry instance - -## Comparison with No-Code Example - -- **Manual**: Requires explicit OpenTelemetry configuration in code, full control -- **No-Code**: Uses Java agent, no configuration code needed -- **Both**: Same FGA operations, same metrics generated, same authentication support diff --git a/examples/opentelemetry/build.gradle b/examples/opentelemetry/build.gradle index 69b7cce2..b81da9eb 100644 --- a/examples/opentelemetry/build.gradle +++ b/examples/opentelemetry/build.gradle @@ -69,13 +69,20 @@ repositories { } ext { + fgaSdkVersion = "0.9.0" openTelemetryVersion = "1.32.0" openTelemetryAlphaVersion = "1.32.0-alpha" } dependencies { // Core FGA SDK (always required) - implementation("dev.openfga:openfga-sdk") + // By default, uses the published SDK from Maven Central + implementation("dev.openfga:openfga-sdk:$fgaSdkVersion") + + // For local development using the SDK source code: + // 1. Uncomment the includeBuild line in settings.gradle + // 2. Comment out the line above and uncomment the line below: + // implementation("dev.openfga:openfga-sdk") // OpenTelemetry SDK dependencies - ONLY NEEDED FOR MANUAL CONFIGURATION (./gradlew run) // When using the Java agent (./gradlew runWithAgent), these dependencies are not required diff --git a/examples/opentelemetry/settings.gradle b/examples/opentelemetry/settings.gradle index 77d9fe40..b73b6150 100644 --- a/examples/opentelemetry/settings.gradle +++ b/examples/opentelemetry/settings.gradle @@ -1,4 +1,10 @@ rootProject.name = 'opentelemetry-example' -// Include the main SDK project as a dependency -includeBuild '../..' +// By default, this example uses the published SDK from Maven Central. +// To use the local SDK source code instead: +// 1. Uncomment the includeBuild line below +// 2. Remove the version number from the SDK dependency in build.gradle + +// includeBuild '../..' + + From 3d61cc012c4e0af7425bb29c43345c6208d7b152 Mon Sep 17 00:00:00 2001 From: Jim Anderson Date: Tue, 19 Aug 2025 13:03:28 -0500 Subject: [PATCH 3/9] add makefile --- examples/opentelemetry/Makefile | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 examples/opentelemetry/Makefile diff --git a/examples/opentelemetry/Makefile b/examples/opentelemetry/Makefile new file mode 100644 index 00000000..fbff300d --- /dev/null +++ b/examples/opentelemetry/Makefile @@ -0,0 +1,16 @@ +all: build + +openfga_version=latest + +build: + ./gradlew build + +run: + ./gradlew run + +run-with-agent: + ./gradlew runWithAgent + +run-openfga: + docker pull docker.io/openfga/openfga:${openfga_version} && \ + docker run -p 8080:8080 docker.io/openfga/openfga:${openfga_version} run From 4cb1be5fabce26308f114f155fefa9ca087967df Mon Sep 17 00:00:00 2001 From: Jim Anderson Date: Tue, 19 Aug 2025 13:03:40 -0500 Subject: [PATCH 4/9] add top-level README --- examples/README.md | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 examples/README.md diff --git a/examples/README.md b/examples/README.md new file mode 100644 index 00000000..47238df4 --- /dev/null +++ b/examples/README.md @@ -0,0 +1,11 @@ +## Examples of using the OpenFGA Java SDK + +A collection of examples demonstrating how to use the OpenFGA Java SDK in different scenarios. + +### Available Examples + +#### Basic Examples (`basic-examples/`) +A simple example that creates a store, runs a set of calls against it including creating a model, writing tuples and checking for access. This example is implemented in both Java and Kotlin. + +#### OpenTelemetry Examples +- `opentelemetry/` - Demonstrates OpenTelemetry integration both via manual code configuration, as well as no-code instrumentation using the OpenTelemetry java agent From c1a3b8f31954bfa8583606dfc41ea7ceac6fcc6b Mon Sep 17 00:00:00 2001 From: Jim Anderson Date: Tue, 19 Aug 2025 13:25:43 -0500 Subject: [PATCH 5/9] code cleanup --- .../opentelemetry/OpenTelemetryExample.java | 293 ++++++++---------- 1 file changed, 135 insertions(+), 158 deletions(-) diff --git a/examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java b/examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java index ed7ecc54..a6c0ef28 100644 --- a/examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java +++ b/examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java @@ -13,11 +13,11 @@ package dev.openfga.sdk.example.opentelemetry; import dev.openfga.sdk.api.client.OpenFgaClient; +import dev.openfga.sdk.api.client.model.*; import dev.openfga.sdk.api.configuration.ClientConfiguration; -import dev.openfga.sdk.api.configuration.Credentials; import dev.openfga.sdk.api.configuration.ClientCredentials; +import dev.openfga.sdk.api.configuration.Credentials; import dev.openfga.sdk.api.configuration.TelemetryConfiguration; -import dev.openfga.sdk.api.client.model.*; import dev.openfga.sdk.api.model.*; import dev.openfga.sdk.telemetry.Attribute; import dev.openfga.sdk.telemetry.Attributes; @@ -25,69 +25,84 @@ import dev.openfga.sdk.telemetry.Histograms; import dev.openfga.sdk.telemetry.Metric; import io.github.cdimascio.dotenv.Dotenv; - -// OpenTelemetry imports - ONLY NEEDED FOR MANUAL CONFIGURATION (./gradlew run) -// When using the Java agent (./gradlew runWithAgent), these are not required import io.opentelemetry.api.OpenTelemetry; -import io.opentelemetry.api.common.AttributeKey; import io.opentelemetry.exporter.otlp.metrics.OtlpGrpcMetricExporter; -import io.opentelemetry.exporter.prometheus.PrometheusHttpServer; import io.opentelemetry.sdk.OpenTelemetrySdk; import io.opentelemetry.sdk.metrics.SdkMeterProvider; import io.opentelemetry.sdk.metrics.export.PeriodicMetricReader; import io.opentelemetry.sdk.resources.Resource; import io.opentelemetry.semconv.ResourceAttributes; - import java.time.Duration; import java.util.HashMap; import java.util.List; import java.util.Map; import java.util.Optional; -import java.util.concurrent.CompletableFuture; import java.util.concurrent.TimeUnit; /** * OpenFGA Java SDK - Combined OpenTelemetry Example - * + * * This example demonstrates two approaches for using OpenTelemetry metrics with the OpenFGA Java SDK: - * + * * 1. MANUAL CONFIGURATION (./gradlew run): * - Uses code-based OpenTelemetry setup * - Requires OpenTelemetry SDK dependencies * - Full control over configuration - * + * * 2. JAVA AGENT (./gradlew runWithAgent): * - Uses OpenTelemetry Java agent for automatic instrumentation * - No OpenTelemetry dependencies required in your application * - Zero-code configuration approach - * + * * Both approaches generate the same metrics: * - fga-client.request.duration (histogram) - Total request time including network latency * - fga-client.query.duration (histogram) - FGA server processing time only * - fga-client.credentials.request (counter) - Number of authentication token requests - * - * The example also demonstrates: - * - Comprehensive telemetry configuration with ALL available SDK attributes (14 total) - * - Clear distinction between default attributes (12) and additional ones (2) - * - Privacy and performance considerations for telemetry attribute selection - * - Proper OpenTelemetry setup for both manual and agent modes - * - Real-world FGA operations that generate meaningful telemetry data */ public class OpenTelemetryExample { + // Application Configuration + private static final int OPERATION_LOOP_INTERVAL_SECONDS = 20; + private static final int ERROR_RETRY_INTERVAL_SECONDS = 2; + private static final int METRICS_EXPORT_INTERVAL_SECONDS = 10; + + // Command Line Arguments + private static final String ARG_MODE_AGENT = "--mode=agent"; + private static final String ARG_MODE_MANUAL = "--mode=manual"; + + // Environment Variable Names + private static final String ENV_OTEL_EXPORTER_OTLP_ENDPOINT = "OTEL_EXPORTER_OTLP_ENDPOINT"; + private static final String ENV_OTEL_SERVICE_NAME = "OTEL_SERVICE_NAME"; + private static final String ENV_OTEL_SERVICE_VERSION = "OTEL_SERVICE_VERSION"; + private static final String ENV_FGA_API_URL = "FGA_API_URL"; + private static final String ENV_FGA_STORE_ID = "FGA_STORE_ID"; + private static final String ENV_FGA_MODEL_ID = "FGA_MODEL_ID"; + private static final String ENV_FGA_CLIENT_ID = "FGA_CLIENT_ID"; + private static final String ENV_FGA_CLIENT_SECRET = "FGA_CLIENT_SECRET"; + private static final String ENV_FGA_API_AUDIENCE = "FGA_API_AUDIENCE"; + private static final String ENV_FGA_API_TOKEN_ISSUER = "FGA_API_TOKEN_ISSUER"; + + // Default Values + private static final String DEFAULT_OTLP_ENDPOINT = "http://localhost:4317"; + private static final String DEFAULT_SERVICE_NAME = "openfga-java-sdk-example"; + private static final String DEFAULT_SERVICE_VERSION = "1.0.0"; + private static final String DEFAULT_FGA_API_URL = "http://localhost:8080"; + private static final String DEFAULT_API_AUDIENCE = "https://api.fga.example"; + private static final String DEFAULT_API_TOKEN_ISSUER = "auth.fga.example"; + private static Dotenv dotenv; private static OpenFgaClient fgaClient; - + public static void main(String[] args) throws Exception { System.out.println("🚀 OpenFGA Java SDK - OpenTelemetry Example"); System.out.println("==========================================="); - + // Determine OpenTelemetry mode from command line arguments boolean isAgentMode = determineOpenTelemetryMode(args); - + // Load environment variables dotenv = Dotenv.configure().ignoreIfMissing().load(); - + if (isAgentMode) { System.out.println("🤖 Java Agent Mode"); System.out.println(" The OpenTelemetry Java agent handles all setup automatically"); @@ -96,18 +111,18 @@ public static void main(String[] args) throws Exception { System.out.println("🔧 Manual Configuration Mode"); System.out.println(" This example shows code-based OpenTelemetry setup"); System.out.println(" Requires OpenTelemetry SDK dependencies"); - + // Configure OpenTelemetry manually - ONLY NEEDED FOR MANUAL MODE configureOpenTelemetryManually(); } - + // Create OpenFGA client (works the same for both modes) createOpenFgaClient(); - + System.out.println("\n🔄 Starting continuous operations loop..."); - System.out.println(" Operations will run every 5 seconds until stopped (Ctrl+C)"); + System.out.println(" Operations will run every " + OPERATION_LOOP_INTERVAL_SECONDS + " seconds until stopped (Ctrl+C)"); System.out.println(" This matches the behavior of other OpenFGA SDK examples"); - + // Run operations continuously int operationCount = 0; while (true) { @@ -115,13 +130,13 @@ public static void main(String[] args) throws Exception { operationCount++; System.out.println("\n--- Operation " + operationCount + " ---"); performOperations(); - - // Wait 5 seconds before next iteration - TimeUnit.SECONDS.sleep(5); + + // Wait before next iteration + TimeUnit.SECONDS.sleep(OPERATION_LOOP_INTERVAL_SECONDS); } catch (Exception e) { System.err.println("Error in operation " + operationCount + ": " + e.getMessage()); e.printStackTrace(); - TimeUnit.SECONDS.sleep(2); + TimeUnit.SECONDS.sleep(ERROR_RETRY_INTERVAL_SECONDS); } } } @@ -133,17 +148,17 @@ public static void main(String[] args) throws Exception { */ private static boolean determineOpenTelemetryMode(String[] args) { System.out.println("🔧 Parsing arguments: " + java.util.Arrays.toString(args)); - + for (String arg : args) { - if ("--mode=agent".equals(arg)) { + if (ARG_MODE_AGENT.equals(arg)) { System.out.println("✓ Agent mode detected from arguments"); return true; - } else if ("--mode=manual".equals(arg)) { + } else if (ARG_MODE_MANUAL.equals(arg)) { System.out.println("✓ Manual mode detected from arguments"); return false; } } - + // Default to manual mode if no argument provided if (args.length == 0) { System.out.println("ℹ️ No mode specified, defaulting to manual configuration"); @@ -157,40 +172,36 @@ private static boolean determineOpenTelemetryMode(String[] args) { */ private static void configureOpenTelemetryManually() { System.out.println("\n⚙️ Configuring OpenTelemetry manually..."); - - String otlpEndpoint = dotenv.get("OTEL_EXPORTER_OTLP_ENDPOINT", "http://localhost:4317"); - String serviceName = dotenv.get("OTEL_SERVICE_NAME", "openfga-java-sdk-example"); - String serviceVersion = dotenv.get("OTEL_SERVICE_VERSION", "1.0.0"); + + String otlpEndpoint = dotenv.get(ENV_OTEL_EXPORTER_OTLP_ENDPOINT, DEFAULT_OTLP_ENDPOINT); + String serviceName = dotenv.get(ENV_OTEL_SERVICE_NAME, DEFAULT_SERVICE_NAME); + String serviceVersion = dotenv.get(ENV_OTEL_SERVICE_VERSION, DEFAULT_SERVICE_VERSION); System.out.println(" OTLP Endpoint: " + otlpEndpoint); System.out.println(" Service Name: " + serviceName); System.out.println(" Service Version: " + serviceVersion); - + // Create resource with service information Resource resource = Resource.getDefault().toBuilder() - .put(ResourceAttributes.SERVICE_NAME, serviceName) - .put(ResourceAttributes.SERVICE_VERSION, serviceVersion) - .build(); + .put(ResourceAttributes.SERVICE_NAME, serviceName) + .put(ResourceAttributes.SERVICE_VERSION, serviceVersion) + .build(); // Configure OTLP metric exporter - OtlpGrpcMetricExporter metricExporter = OtlpGrpcMetricExporter.builder() - .setEndpoint(otlpEndpoint) - .build(); + OtlpGrpcMetricExporter metricExporter = + OtlpGrpcMetricExporter.builder().setEndpoint(otlpEndpoint).build(); // Create meter provider with OTLP exporter SdkMeterProvider meterProvider = SdkMeterProvider.builder() - .registerMetricReader( - PeriodicMetricReader.builder(metricExporter) - .setInterval(Duration.ofSeconds(10)) // Export metrics every 10 seconds - .build() - ) - .setResource(resource) - .build(); + .registerMetricReader(PeriodicMetricReader.builder(metricExporter) + .setInterval(Duration.ofSeconds(METRICS_EXPORT_INTERVAL_SECONDS)) // Export metrics every 10 seconds + .build()) + .setResource(resource) + .build(); // Build and register OpenTelemetry SDK globally - OpenTelemetry openTelemetry = OpenTelemetrySdk.builder() - .setMeterProvider(meterProvider) - .buildAndRegisterGlobal(); + OpenTelemetry openTelemetry = + OpenTelemetrySdk.builder().setMeterProvider(meterProvider).buildAndRegisterGlobal(); System.out.println(" ✅ OpenTelemetry SDK configured with OTLP exporter"); System.out.println(" 📊 Metrics will be exported to OTLP endpoint: " + otlpEndpoint); @@ -202,11 +213,11 @@ private static void configureOpenTelemetryManually() { */ private static TelemetryConfiguration createTelemetryConfiguration() { System.out.println("\n📊 Configuring comprehensive telemetry attributes..."); - + // Create a comprehensive attribute map that includes ALL available attributes // This goes beyond the default configuration to show every telemetry option Map> allAttributes = new HashMap<>(); - + // ✅ DEFAULT ATTRIBUTES - These are enabled by default in TelemetryConfiguration() allAttributes.put(Attributes.FGA_CLIENT_REQUEST_CLIENT_ID, Optional.empty()); allAttributes.put(Attributes.FGA_CLIENT_REQUEST_METHOD, Optional.empty()); @@ -220,16 +231,9 @@ private static TelemetryConfiguration createTelemetryConfiguration() { allAttributes.put(Attributes.URL_FULL, Optional.empty()); allAttributes.put(Attributes.URL_SCHEME, Optional.empty()); allAttributes.put(Attributes.USER_AGENT, Optional.empty()); - + // 🔧 ADDITIONAL ATTRIBUTES - These are NOT enabled by default - // Adding these shows developers what extra telemetry data is available - - // Batch check size - not enabled by default because it only applies to batch operations - // and could add noise to telemetry for non-batch requests allAttributes.put(Attributes.FGA_CLIENT_REQUEST_BATCH_CHECK_SIZE, Optional.empty()); - - // User field - not enabled by default for privacy/security reasons - // as it may contain PII (personally identifiable information) allAttributes.put(Attributes.FGA_CLIENT_USER, Optional.empty()); // Create metrics configuration with all attributes @@ -237,35 +241,29 @@ private static TelemetryConfiguration createTelemetryConfiguration() { comprehensiveMetrics.put(Histograms.REQUEST_DURATION, allAttributes); comprehensiveMetrics.put(Histograms.QUERY_DURATION, allAttributes); comprehensiveMetrics.put(Counters.CREDENTIALS_REQUEST, allAttributes); - + TelemetryConfiguration telemetryConfig = new TelemetryConfiguration(comprehensiveMetrics); - System.out.println(" ✅ Enabled all 14 available attributes (12 default + 2 additional):"); - System.out.println(" DEFAULT: client_id, method, model_id, store_id, response.model_id"); - System.out.println(" DEFAULT: host, request.method, resend_count, status_code"); - System.out.println(" DEFAULT: url.full, url.scheme, user_agent"); - System.out.println(" ADDITIONAL: batch_check_size (batch operations only)"); - System.out.println(" ADDITIONAL: user (disabled by default for privacy)"); - System.out.println(" 📊 All SDK metrics: REQUEST_DURATION, QUERY_DURATION, CREDENTIALS_REQUEST"); - + System.out.println(" 📊 All SDK metrics enabled: REQUEST_DURATION, QUERY_DURATION, CREDENTIALS_REQUEST"); + return telemetryConfig; } private static void createOpenFgaClient() throws Exception { System.out.println("\n🔧 Creating OpenFGA client..."); - - String apiUrl = dotenv.get("FGA_API_URL", "http://localhost:8080"); - String storeId = dotenv.get("FGA_STORE_ID"); - String modelId = dotenv.get("FGA_MODEL_ID"); - + + String apiUrl = dotenv.get(ENV_FGA_API_URL, DEFAULT_FGA_API_URL); + String storeId = dotenv.get(ENV_FGA_STORE_ID); + String modelId = dotenv.get(ENV_FGA_MODEL_ID); + if (storeId == null || modelId == null) { - throw new IllegalStateException("FGA_STORE_ID and FGA_MODEL_ID must be configured in .env file"); + throw new IllegalStateException(ENV_FGA_STORE_ID + " and " + ENV_FGA_MODEL_ID + " must be configured in .env file"); } - + System.out.println(" API URL: " + apiUrl); System.out.println(" Store ID: " + storeId); System.out.println(" Model ID: " + modelId); - + // Create client configuration with default telemetry // The SDK will automatically detect and use either: // - The globally registered OpenTelemetry instance (manual config) @@ -275,31 +273,29 @@ private static void createOpenFgaClient() throws Exception { .storeId(storeId) .authorizationModelId(modelId) .telemetryConfiguration(createTelemetryConfiguration()); - + // Configure authentication if credentials are provided - String clientId = dotenv.get("FGA_CLIENT_ID"); - String clientSecret = dotenv.get("FGA_CLIENT_SECRET"); - + String clientId = dotenv.get(ENV_FGA_CLIENT_ID); + String clientSecret = dotenv.get(ENV_FGA_CLIENT_SECRET); + if (clientId != null && clientSecret != null) { - String apiAudience = dotenv.get("FGA_API_AUDIENCE", "https://api.fga.example"); - String apiTokenIssuer = dotenv.get("FGA_API_TOKEN_ISSUER", "auth.fga.example"); - - config.credentials(new Credentials( - new ClientCredentials() + String apiAudience = dotenv.get(ENV_FGA_API_AUDIENCE, DEFAULT_API_AUDIENCE); + String apiTokenIssuer = dotenv.get(ENV_FGA_API_TOKEN_ISSUER, DEFAULT_API_TOKEN_ISSUER); + + config.credentials(new Credentials(new ClientCredentials() .clientId(clientId) .clientSecret(clientSecret) .apiAudience(apiAudience) - .apiTokenIssuer(apiTokenIssuer) - )); - + .apiTokenIssuer(apiTokenIssuer))); + System.out.println(" ✅ Client credentials authentication configured"); } else { System.out.println(" ℹ️ No authentication configured (using public API)"); } - + // Create the client fgaClient = new OpenFgaClient(config); - + System.out.println("✅ OpenFGA client created with telemetry enabled!"); System.out.println(" 📊 Metrics will be automatically collected and exported"); } @@ -307,105 +303,86 @@ private static void createOpenFgaClient() throws Exception { private static void performOperations() throws Exception { // Read the authorization model System.out.println("📖 Reading authorization model..."); - ClientReadAuthorizationModelResponse modelResponse = fgaClient.readAuthorizationModel().get(); - System.out.println("✓ Read authorization model: " + modelResponse.getAuthorizationModel().getId()); - + ClientReadAuthorizationModelResponse modelResponse = + fgaClient.readAuthorizationModel().get(); + System.out.println("✓ Read authorization model: " + + modelResponse.getAuthorizationModel().getId()); + // Write some test tuples first (to ensure we have data to check) System.out.println("✍️ Writing test tuples..."); try { List tuples = List.of( - new ClientTupleKey() - .user("user:anne") - .relation("viewer") - ._object("doc:2021-budget"), - new ClientTupleKey() - .user("user:beth") - .relation("can_write") - ._object("doc:2021-budget"), - new ClientTupleKey() - .user("user:anne") - .relation("viewer") - ._object("doc:2022-budget") - ); - - ClientWriteResponse writeResponse = fgaClient.write(new ClientWriteRequest().writes(tuples)).get(); + new ClientTupleKey().user("user:anne").relation("viewer")._object("doc:2021-budget"), + new ClientTupleKey().user("user:beth").relation("can_write")._object("doc:2021-budget"), + new ClientTupleKey().user("user:anne").relation("viewer")._object("doc:2022-budget")); + + ClientWriteResponse writeResponse = + fgaClient.write(new ClientWriteRequest().writes(tuples)).get(); System.out.println("✓ Wrote " + tuples.size() + " test tuples"); } catch (Exception writeError) { System.out.println("⚠️ Could not write tuples (may not be needed): " + writeError.getMessage()); } - + // Read existing tuples System.out.println("📋 Reading existing tuples..."); - ClientReadResponse readResponse = fgaClient.read(new ClientReadRequest()).get(); + ClientReadResponse readResponse = + fgaClient.read(new ClientReadRequest()).get(); System.out.println("✓ Found " + readResponse.getTuples().size() + " existing tuples"); - + // Perform check requests System.out.println("🔍 Performing check operations..."); - + // Check: user:anne can view doc:2021-budget - ClientCheckRequest check1 = new ClientCheckRequest() - .user("user:anne") - .relation("viewer") - ._object("doc:2021-budget"); + ClientCheckRequest check1 = + new ClientCheckRequest().user("user:anne").relation("viewer")._object("doc:2021-budget"); ClientCheckResponse checkResponse1 = fgaClient.check(check1).get(); System.out.println("✓ Check user:anne can view doc:2021-budget: " + checkResponse1.getAllowed()); - + // Check: user:beth can write doc:2021-budget - ClientCheckRequest check2 = new ClientCheckRequest() - .user("user:beth") - .relation("can_write") - ._object("doc:2021-budget"); + ClientCheckRequest check2 = + new ClientCheckRequest().user("user:beth").relation("can_write")._object("doc:2021-budget"); ClientCheckResponse checkResponse2 = fgaClient.check(check2).get(); System.out.println("✓ Check user:beth can write doc:2021-budget: " + checkResponse2.getAllowed()); - + // Check: user:anne can view doc:2022-budget - ClientCheckRequest check3 = new ClientCheckRequest() - .user("user:anne") - .relation("viewer") - ._object("doc:2022-budget"); + ClientCheckRequest check3 = + new ClientCheckRequest().user("user:anne").relation("viewer")._object("doc:2022-budget"); ClientCheckResponse checkResponse3 = fgaClient.check(check3).get(); System.out.println("✓ Check user:anne can view doc:2022-budget: " + checkResponse3.getAllowed()); // Batch check operations System.out.println("🔍 Performing batch check operations..."); List batchChecks = List.of( - new ClientCheckRequest() - .user("user:anne") - .relation("viewer") - ._object("doc:2021-budget"), - new ClientCheckRequest() - .user("user:beth") - .relation("can_write") - ._object("doc:2021-budget"), - new ClientCheckRequest() - .user("user:anne") - .relation("viewer") - ._object("doc:2022-budget") - ); + new ClientCheckRequest().user("user:anne").relation("viewer")._object("doc:2021-budget"), + new ClientCheckRequest().user("user:beth").relation("can_write")._object("doc:2021-budget"), + new ClientCheckRequest().user("user:anne").relation("viewer")._object("doc:2022-budget")); - List batchResponse = fgaClient.clientBatchCheck(batchChecks).get(); + List batchResponse = + fgaClient.clientBatchCheck(batchChecks).get(); System.out.println("✓ Batch check completed with " + batchResponse.size() + " results:"); - + for (int i = 0; i < batchResponse.size(); i++) { ClientBatchCheckClientResponse response = batchResponse.get(i); String correlationId = "check-" + (i + 1); if (response.getThrowable() == null) { System.out.println(" - " + correlationId + ": " + response.getAllowed()); } else { - System.out.println(" - " + correlationId + ": ERROR - " + response.getThrowable().getMessage()); + System.out.println(" - " + correlationId + ": ERROR - " + + response.getThrowable().getMessage()); } } // List objects operation System.out.println("📋 Listing objects user:anne can view..."); ClientListObjectsRequest listRequest = new ClientListObjectsRequest() - .user("user:anne") - .relation("viewer") - .type("doc"); - - ClientListObjectsResponse listResponse = fgaClient.listObjects(listRequest).get(); - System.out.println("✓ user:anne can view " + listResponse.getObjects().size() + " documents: " + - String.join(", ", listResponse.getObjects())); + .user("user:anne") + .relation("viewer") + .type("doc"); + + ClientListObjectsResponse listResponse = + fgaClient.listObjects(listRequest).get(); + System.out.println("✓ user:anne can view " + listResponse.getObjects().size() + " documents: " + + String.join(", ", listResponse.getObjects())); System.out.println("📊 All operations completed - metrics generated!"); System.out.println("📊 Generated metrics: request.duration, query.duration, credentials.request"); From 826cdd8d6a4b1f18290c997db8d82579377e3883 Mon Sep 17 00:00:00 2001 From: Jim Anderson Date: Tue, 19 Aug 2025 14:03:58 -0500 Subject: [PATCH 6/9] update dependabot --- .github/dependabot.yaml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.github/dependabot.yaml b/.github/dependabot.yaml index 06fb8172..31015910 100644 --- a/.github/dependabot.yaml +++ b/.github/dependabot.yaml @@ -20,6 +20,15 @@ updates: patterns: - "*" + - package-ecosystem: "gradle" + directory: "/examples/opentelemetry" + schedule: + interval: "monthly" + groups: + dependencies: + patterns: + - "*" + - package-ecosystem: "github-actions" directory: "/" schedule: From 11271b09210295fcdff203ef5410de2c08482c49 Mon Sep 17 00:00:00 2001 From: Jim Anderson Date: Tue, 19 Aug 2025 14:22:49 -0500 Subject: [PATCH 7/9] add gradle wrapper jar --- .../gradle/wrapper/gradle-wrapper.jar | Bin 0 -> 43462 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100644 examples/opentelemetry/gradle/wrapper/gradle-wrapper.jar diff --git a/examples/opentelemetry/gradle/wrapper/gradle-wrapper.jar b/examples/opentelemetry/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 0000000000000000000000000000000000000000..d64cd4917707c1f8861d8cb53dd15194d4248596 GIT binary patch literal 43462 zcma&NWl&^owk(X(xVyW%ySuwf;qI=D6|RlDJ2cR^yEKh!@I- zp9QeisK*rlxC>+~7Dk4IxIRsKBHqdR9b3+fyL=ynHmIDe&|>O*VlvO+%z5;9Z$|DJ zb4dO}-R=MKr^6EKJiOrJdLnCJn>np?~vU-1sSFgPu;pthGwf}bG z(1db%xwr#x)r+`4AGu$j7~u2MpVs3VpLp|mx&;>`0p0vH6kF+D2CY0fVdQOZ@h;A` z{infNyvmFUiu*XG}RNMNwXrbec_*a3N=2zJ|Wh5z* z5rAX$JJR{#zP>KY**>xHTuw?|-Rg|o24V)74HcfVT;WtQHXlE+_4iPE8QE#DUm%x0 zEKr75ur~W%w#-My3Tj`hH6EuEW+8K-^5P62$7Sc5OK+22qj&Pd1;)1#4tKihi=~8C zHiQSst0cpri6%OeaR`PY>HH_;CPaRNty%WTm4{wDK8V6gCZlG@U3$~JQZ;HPvDJcT1V{ z?>H@13MJcCNe#5z+MecYNi@VT5|&UiN1D4ATT+%M+h4c$t;C#UAs3O_q=GxK0}8%8 z8J(_M9bayxN}69ex4dzM_P3oh@ZGREjVvn%%r7=xjkqxJP4kj}5tlf;QosR=%4L5y zWhgejO=vao5oX%mOHbhJ8V+SG&K5dABn6!WiKl{|oPkq(9z8l&Mm%(=qGcFzI=eLu zWc_oCLyf;hVlB@dnwY98?75B20=n$>u3b|NB28H0u-6Rpl((%KWEBOfElVWJx+5yg z#SGqwza7f}$z;n~g%4HDU{;V{gXIhft*q2=4zSezGK~nBgu9-Q*rZ#2f=Q}i2|qOp z!!y4p)4o=LVUNhlkp#JL{tfkhXNbB=Ox>M=n6soptJw-IDI|_$is2w}(XY>a=H52d z3zE$tjPUhWWS+5h=KVH&uqQS=$v3nRs&p$%11b%5qtF}S2#Pc`IiyBIF4%A!;AVoI zXU8-Rpv!DQNcF~(qQnyyMy=-AN~U>#&X1j5BLDP{?K!%h!;hfJI>$mdLSvktEr*89 zdJHvby^$xEX0^l9g$xW-d?J;L0#(`UT~zpL&*cEh$L|HPAu=P8`OQZV!-}l`noSp_ zQ-1$q$R-gDL)?6YaM!=8H=QGW$NT2SeZlb8PKJdc=F-cT@j7Xags+Pr*jPtlHFnf- zh?q<6;)27IdPc^Wdy-mX%2s84C1xZq9Xms+==F4);O`VUASmu3(RlgE#0+#giLh-& zcxm3_e}n4{%|X zJp{G_j+%`j_q5}k{eW&TlP}J2wtZ2^<^E(O)4OQX8FDp6RJq!F{(6eHWSD3=f~(h} zJXCf7=r<16X{pHkm%yzYI_=VDP&9bmI1*)YXZeB}F? z(%QsB5fo*FUZxK$oX~X^69;x~j7ms8xlzpt-T15e9}$4T-pC z6PFg@;B-j|Ywajpe4~bk#S6(fO^|mm1hKOPfA%8-_iGCfICE|=P_~e;Wz6my&)h_~ zkv&_xSAw7AZ%ThYF(4jADW4vg=oEdJGVOs>FqamoL3Np8>?!W#!R-0%2Bg4h?kz5I zKV-rKN2n(vUL%D<4oj@|`eJ>0i#TmYBtYmfla;c!ATW%;xGQ0*TW@PTlGG><@dxUI zg>+3SiGdZ%?5N=8uoLA|$4isK$aJ%i{hECP$bK{J#0W2gQ3YEa zZQ50Stn6hqdfxJ*9#NuSLwKFCUGk@c=(igyVL;;2^wi4o30YXSIb2g_ud$ zgpCr@H0qWtk2hK8Q|&wx)}4+hTYlf;$a4#oUM=V@Cw#!$(nOFFpZ;0lc!qd=c$S}Z zGGI-0jg~S~cgVT=4Vo)b)|4phjStD49*EqC)IPwyeKBLcN;Wu@Aeph;emROAwJ-0< z_#>wVm$)ygH|qyxZaet&(Vf%pVdnvKWJn9`%DAxj3ot;v>S$I}jJ$FLBF*~iZ!ZXE zkvui&p}fI0Y=IDX)mm0@tAd|fEHl~J&K}ZX(Mm3cm1UAuwJ42+AO5@HwYfDH7ipIc zmI;1J;J@+aCNG1M`Btf>YT>~c&3j~Qi@Py5JT6;zjx$cvOQW@3oQ>|}GH?TW-E z1R;q^QFjm5W~7f}c3Ww|awg1BAJ^slEV~Pk`Kd`PS$7;SqJZNj->it4DW2l15}xP6 zoCl$kyEF%yJni0(L!Z&14m!1urXh6Btj_5JYt1{#+H8w?5QI%% zo-$KYWNMJVH?Hh@1n7OSu~QhSswL8x0=$<8QG_zepi_`y_79=nK=_ZP_`Em2UI*tyQoB+r{1QYZCpb?2OrgUw#oRH$?^Tj!Req>XiE#~B|~ z+%HB;=ic+R@px4Ld8mwpY;W^A%8%l8$@B@1m5n`TlKI6bz2mp*^^^1mK$COW$HOfp zUGTz-cN9?BGEp}5A!mDFjaiWa2_J2Iq8qj0mXzk; z66JBKRP{p%wN7XobR0YjhAuW9T1Gw3FDvR5dWJ8ElNYF94eF3ebu+QwKjtvVu4L zI9ip#mQ@4uqVdkl-TUQMb^XBJVLW(-$s;Nq;@5gr4`UfLgF$adIhd?rHOa%D);whv z=;krPp~@I+-Z|r#s3yCH+c1US?dnm+C*)r{m+86sTJusLdNu^sqLrfWed^ndHXH`m zd3#cOe3>w-ga(Dus_^ppG9AC>Iq{y%%CK+Cro_sqLCs{VLuK=dev>OL1dis4(PQ5R zcz)>DjEkfV+MO;~>VUlYF00SgfUo~@(&9$Iy2|G0T9BSP?&T22>K46D zL*~j#yJ?)^*%J3!16f)@Y2Z^kS*BzwfAQ7K96rFRIh>#$*$_Io;z>ux@}G98!fWR@ zGTFxv4r~v)Gsd|pF91*-eaZ3Qw1MH$K^7JhWIdX%o$2kCbvGDXy)a?@8T&1dY4`;L z4Kn+f%SSFWE_rpEpL9bnlmYq`D!6F%di<&Hh=+!VI~j)2mfil03T#jJ_s?}VV0_hp z7T9bWxc>Jm2Z0WMU?`Z$xE74Gu~%s{mW!d4uvKCx@WD+gPUQ zV0vQS(Ig++z=EHN)BR44*EDSWIyT~R4$FcF*VEY*8@l=218Q05D2$|fXKFhRgBIEE zdDFB}1dKkoO^7}{5crKX!p?dZWNz$m>1icsXG2N+((x0OIST9Zo^DW_tytvlwXGpn zs8?pJXjEG;T@qrZi%#h93?FP$!&P4JA(&H61tqQi=opRzNpm zkrG}$^t9&XduK*Qa1?355wd8G2CI6QEh@Ua>AsD;7oRUNLPb76m4HG3K?)wF~IyS3`fXuNM>${?wmB zpVz;?6_(Fiadfd{vUCBM*_kt$+F3J+IojI;9L(gc9n3{sEZyzR9o!_mOwFC#tQ{Q~ zP3-`#uK#tP3Q7~Q;4H|wjZHO8h7e4IuBxl&vz2w~D8)w=Wtg31zpZhz%+kzSzL*dV zwp@{WU4i;hJ7c2f1O;7Mz6qRKeASoIv0_bV=i@NMG*l<#+;INk-^`5w@}Dj~;k=|}qM1vq_P z|GpBGe_IKq|LNy9SJhKOQ$c=5L{Dv|Q_lZl=-ky*BFBJLW9&y_C|!vyM~rQx=!vun z?rZJQB5t}Dctmui5i31C_;_}CEn}_W%>oSXtt>@kE1=JW*4*v4tPp;O6 zmAk{)m!)}34pTWg8{i>($%NQ(Tl;QC@J@FfBoc%Gr&m560^kgSfodAFrIjF}aIw)X zoXZ`@IsMkc8_=w%-7`D6Y4e*CG8k%Ud=GXhsTR50jUnm+R*0A(O3UKFg0`K;qp1bl z7``HN=?39ic_kR|^R^~w-*pa?Vj#7|e9F1iRx{GN2?wK!xR1GW!qa=~pjJb-#u1K8 zeR?Y2i-pt}yJq;SCiVHODIvQJX|ZJaT8nO+(?HXbLefulKKgM^B(UIO1r+S=7;kLJ zcH}1J=Px2jsh3Tec&v8Jcbng8;V-`#*UHt?hB(pmOipKwf3Lz8rG$heEB30Sg*2rx zV<|KN86$soN(I!BwO`1n^^uF2*x&vJ$2d$>+`(romzHP|)K_KkO6Hc>_dwMW-M(#S zK(~SiXT1@fvc#U+?|?PniDRm01)f^#55;nhM|wi?oG>yBsa?~?^xTU|fX-R(sTA+5 zaq}-8Tx7zrOy#3*JLIIVsBmHYLdD}!0NP!+ITW+Thn0)8SS!$@)HXwB3tY!fMxc#1 zMp3H?q3eD?u&Njx4;KQ5G>32+GRp1Ee5qMO0lZjaRRu&{W<&~DoJNGkcYF<5(Ab+J zgO>VhBl{okDPn78<%&e2mR{jwVCz5Og;*Z;;3%VvoGo_;HaGLWYF7q#jDX=Z#Ml`H z858YVV$%J|e<1n`%6Vsvq7GmnAV0wW4$5qQ3uR@1i>tW{xrl|ExywIc?fNgYlA?C5 zh$ezAFb5{rQu6i7BSS5*J-|9DQ{6^BVQ{b*lq`xS@RyrsJN?-t=MTMPY;WYeKBCNg z^2|pN!Q^WPJuuO4!|P@jzt&tY1Y8d%FNK5xK(!@`jO2aEA*4 zkO6b|UVBipci?){-Ke=+1;mGlND8)6+P;8sq}UXw2hn;fc7nM>g}GSMWu&v&fqh

iViYT=fZ(|3Ox^$aWPp4a8h24tD<|8-!aK0lHgL$N7Efw}J zVIB!7=T$U`ao1?upi5V4Et*-lTG0XvExbf!ya{cua==$WJyVG(CmA6Of*8E@DSE%L z`V^$qz&RU$7G5mg;8;=#`@rRG`-uS18$0WPN@!v2d{H2sOqP|!(cQ@ zUHo!d>>yFArLPf1q`uBvY32miqShLT1B@gDL4XoVTK&@owOoD)OIHXrYK-a1d$B{v zF^}8D3Y^g%^cnvScOSJR5QNH+BI%d|;J;wWM3~l>${fb8DNPg)wrf|GBP8p%LNGN# z3EaIiItgwtGgT&iYCFy9-LG}bMI|4LdmmJt@V@% zb6B)1kc=T)(|L@0;wr<>=?r04N;E&ef+7C^`wPWtyQe(*pD1pI_&XHy|0gIGHMekd zF_*M4yi6J&Z4LQj65)S zXwdM{SwUo%3SbPwFsHgqF@V|6afT|R6?&S;lw=8% z3}@9B=#JI3@B*#4s!O))~z zc>2_4Q_#&+5V`GFd?88^;c1i7;Vv_I*qt!_Yx*n=;rj!82rrR2rQ8u5(Ejlo{15P% zs~!{%XJ>FmJ})H^I9bn^Re&38H{xA!0l3^89k(oU;bZWXM@kn$#aoS&Y4l^-WEn-fH39Jb9lA%s*WsKJQl?n9B7_~P z-XM&WL7Z!PcoF6_D>V@$CvUIEy=+Z&0kt{szMk=f1|M+r*a43^$$B^MidrT0J;RI` z(?f!O<8UZkm$_Ny$Hth1J#^4ni+im8M9mr&k|3cIgwvjAgjH z8`N&h25xV#v*d$qBX5jkI|xOhQn!>IYZK7l5#^P4M&twe9&Ey@@GxYMxBZq2e7?`q z$~Szs0!g{2fGcp9PZEt|rdQ6bhAgpcLHPz?f-vB?$dc*!9OL?Q8mn7->bFD2Si60* z!O%y)fCdMSV|lkF9w%x~J*A&srMyYY3{=&$}H zGQ4VG_?$2X(0|vT0{=;W$~icCI{b6W{B!Q8xdGhF|D{25G_5_+%s(46lhvNLkik~R z>nr(&C#5wwOzJZQo9m|U<;&Wk!_#q|V>fsmj1g<6%hB{jGoNUPjgJslld>xmODzGjYc?7JSuA?A_QzjDw5AsRgi@Y|Z0{F{!1=!NES-#*f^s4l0Hu zz468))2IY5dmD9pa*(yT5{EyP^G>@ZWumealS-*WeRcZ}B%gxq{MiJ|RyX-^C1V=0 z@iKdrGi1jTe8Ya^x7yyH$kBNvM4R~`fbPq$BzHum-3Zo8C6=KW@||>zsA8-Y9uV5V z#oq-f5L5}V<&wF4@X@<3^C%ptp6+Ce)~hGl`kwj)bsAjmo_GU^r940Z-|`<)oGnh7 zFF0Tde3>ui?8Yj{sF-Z@)yQd~CGZ*w-6p2U<8}JO-sRsVI5dBji`01W8A&3$?}lxBaC&vn0E$c5tW* zX>5(zzZ=qn&!J~KdsPl;P@bmA-Pr8T*)eh_+Dv5=Ma|XSle6t(k8qcgNyar{*ReQ8 zTXwi=8vr>!3Ywr+BhggHDw8ke==NTQVMCK`$69fhzEFB*4+H9LIvdt-#IbhZvpS}} zO3lz;P?zr0*0$%-Rq_y^k(?I{Mk}h@w}cZpMUp|ucs55bcloL2)($u%mXQw({Wzc~ z;6nu5MkjP)0C(@%6Q_I_vsWrfhl7Zpoxw#WoE~r&GOSCz;_ro6i(^hM>I$8y>`!wW z*U^@?B!MMmb89I}2(hcE4zN2G^kwyWCZp5JG>$Ez7zP~D=J^LMjSM)27_0B_X^C(M z`fFT+%DcKlu?^)FCK>QzSnV%IsXVcUFhFdBP!6~se&xxrIxsvySAWu++IrH;FbcY$ z2DWTvSBRfLwdhr0nMx+URA$j3i7_*6BWv#DXfym?ZRDcX9C?cY9sD3q)uBDR3uWg= z(lUIzB)G$Hr!){>E{s4Dew+tb9kvToZp-1&c?y2wn@Z~(VBhqz`cB;{E4(P3N2*nJ z_>~g@;UF2iG{Kt(<1PyePTKahF8<)pozZ*xH~U-kfoAayCwJViIrnqwqO}7{0pHw$ zs2Kx?s#vQr7XZ264>5RNKSL8|Ty^=PsIx^}QqOOcfpGUU4tRkUc|kc7-!Ae6!+B{o~7nFpm3|G5^=0#Bnm6`V}oSQlrX(u%OWnC zoLPy&Q;1Jui&7ST0~#+}I^&?vcE*t47~Xq#YwvA^6^} z`WkC)$AkNub|t@S!$8CBlwbV~?yp&@9h{D|3z-vJXgzRC5^nYm+PyPcgRzAnEi6Q^gslXYRv4nycsy-SJu?lMps-? zV`U*#WnFsdPLL)Q$AmD|0`UaC4ND07+&UmOu!eHruzV|OUox<+Jl|Mr@6~C`T@P%s zW7sgXLF2SSe9Fl^O(I*{9wsFSYb2l%-;&Pi^dpv!{)C3d0AlNY6!4fgmSgj_wQ*7Am7&$z;Jg&wgR-Ih;lUvWS|KTSg!&s_E9_bXBkZvGiC6bFKDWZxsD$*NZ#_8bl zG1P-#@?OQzED7@jlMJTH@V!6k;W>auvft)}g zhoV{7$q=*;=l{O>Q4a@ ziMjf_u*o^PsO)#BjC%0^h>Xp@;5$p{JSYDt)zbb}s{Kbt!T*I@Pk@X0zds6wsefuU zW$XY%yyRGC94=6mf?x+bbA5CDQ2AgW1T-jVAJbm7K(gp+;v6E0WI#kuACgV$r}6L? zd|Tj?^%^*N&b>Dd{Wr$FS2qI#Ucs1yd4N+RBUQiSZGujH`#I)mG&VKoDh=KKFl4=G z&MagXl6*<)$6P}*Tiebpz5L=oMaPrN+caUXRJ`D?=K9!e0f{@D&cZLKN?iNP@X0aF zE(^pl+;*T5qt?1jRC=5PMgV!XNITRLS_=9{CJExaQj;lt!&pdzpK?8p>%Mb+D z?yO*uSung=-`QQ@yX@Hyd4@CI^r{2oiu`%^bNkz+Nkk!IunjwNC|WcqvX~k=><-I3 zDQdbdb|!v+Iz01$w@aMl!R)koD77Xp;eZwzSl-AT zr@Vu{=xvgfq9akRrrM)}=!=xcs+U1JO}{t(avgz`6RqiiX<|hGG1pmop8k6Q+G_mv zJv|RfDheUp2L3=^C=4aCBMBn0aRCU(DQwX-W(RkRwmLeuJYF<0urcaf(=7)JPg<3P zQs!~G)9CT18o!J4{zX{_e}4eS)U-E)0FAt}wEI(c0%HkxgggW;(1E=>J17_hsH^sP z%lT0LGgbUXHx-K*CI-MCrP66UP0PvGqM$MkeLyqHdbgP|_Cm!7te~b8p+e6sQ_3k| zVcwTh6d83ltdnR>D^)BYQpDKlLk3g0Hdcgz2}%qUs9~~Rie)A-BV1mS&naYai#xcZ z(d{8=-LVpTp}2*y)|gR~;qc7fp26}lPcLZ#=JpYcn3AT9(UIdOyg+d(P5T7D&*P}# zQCYplZO5|7+r19%9e`v^vfSS1sbX1c%=w1;oyruXB%Kl$ACgKQ6=qNWLsc=28xJjg zwvsI5-%SGU|3p>&zXVl^vVtQT3o-#$UT9LI@Npz~6=4!>mc431VRNN8od&Ul^+G_kHC`G=6WVWM z%9eWNyy(FTO|A+@x}Ou3CH)oi;t#7rAxdIXfNFwOj_@Y&TGz6P_sqiB`Q6Lxy|Q{`|fgmRG(k+!#b*M+Z9zFce)f-7;?Km5O=LHV9f9_87; zF7%R2B+$?@sH&&-$@tzaPYkw0;=i|;vWdI|Wl3q_Zu>l;XdIw2FjV=;Mq5t1Q0|f< zs08j54Bp`3RzqE=2enlkZxmX6OF+@|2<)A^RNQpBd6o@OXl+i)zO%D4iGiQNuXd+zIR{_lb96{lc~bxsBveIw6umhShTX+3@ZJ=YHh@ zWY3(d0azg;7oHn>H<>?4@*RQbi>SmM=JrHvIG(~BrvI)#W(EAeO6fS+}mxxcc+X~W6&YVl86W9WFSS}Vz-f9vS?XUDBk)3TcF z8V?$4Q)`uKFq>xT=)Y9mMFVTUk*NIA!0$?RP6Ig0TBmUFrq*Q-Agq~DzxjStQyJ({ zBeZ;o5qUUKg=4Hypm|}>>L=XKsZ!F$yNTDO)jt4H0gdQ5$f|d&bnVCMMXhNh)~mN z@_UV6D7MVlsWz+zM+inZZp&P4fj=tm6fX)SG5H>OsQf_I8c~uGCig$GzuwViK54bcgL;VN|FnyQl>Ed7(@>=8$a_UKIz|V6CeVSd2(P z0Uu>A8A+muM%HLFJQ9UZ5c)BSAv_zH#1f02x?h9C}@pN@6{>UiAp>({Fn(T9Q8B z^`zB;kJ5b`>%dLm+Ol}ty!3;8f1XDSVX0AUe5P#@I+FQ-`$(a;zNgz)4x5hz$Hfbg z!Q(z26wHLXko(1`;(BAOg_wShpX0ixfWq3ponndY+u%1gyX)_h=v1zR#V}#q{au6; z!3K=7fQwnRfg6FXtNQmP>`<;!N137paFS%y?;lb1@BEdbvQHYC{976l`cLqn;b8lp zIDY>~m{gDj(wfnK!lpW6pli)HyLEiUrNc%eXTil|F2s(AY+LW5hkKb>TQ3|Q4S9rr zpDs4uK_co6XPsn_z$LeS{K4jFF`2>U`tbgKdyDne`xmR<@6AA+_hPNKCOR-Zqv;xk zu5!HsBUb^!4uJ7v0RuH-7?l?}b=w5lzzXJ~gZcxRKOovSk@|#V+MuX%Y+=;14i*%{)_gSW9(#4%)AV#3__kac1|qUy!uyP{>?U#5wYNq}y$S9pCc zFc~4mgSC*G~j0u#qqp9 z${>3HV~@->GqEhr_Xwoxq?Hjn#=s2;i~g^&Hn|aDKpA>Oc%HlW(KA1?BXqpxB;Ydx)w;2z^MpjJ(Qi(X!$5RC z*P{~%JGDQqojV>2JbEeCE*OEu!$XJ>bWA9Oa_Hd;y)F%MhBRi*LPcdqR8X`NQ&1L# z5#9L*@qxrx8n}LfeB^J{%-?SU{FCwiWyHp682F+|pa+CQa3ZLzBqN1{)h4d6+vBbV zC#NEbQLC;}me3eeYnOG*nXOJZEU$xLZ1<1Y=7r0(-U0P6-AqwMAM`a(Ed#7vJkn6plb4eI4?2y3yOTGmmDQ!z9`wzbf z_OY#0@5=bnep;MV0X_;;SJJWEf^E6Bd^tVJ9znWx&Ks8t*B>AM@?;D4oWUGc z!H*`6d7Cxo6VuyS4Eye&L1ZRhrRmN6Lr`{NL(wDbif|y&z)JN>Fl5#Wi&mMIr5i;x zBx}3YfF>>8EC(fYnmpu~)CYHuHCyr5*`ECap%t@y=jD>!_%3iiE|LN$mK9>- zHdtpy8fGZtkZF?%TW~29JIAfi2jZT8>OA7=h;8T{{k?c2`nCEx9$r zS+*&vt~2o^^J+}RDG@+9&M^K*z4p{5#IEVbz`1%`m5c2};aGt=V?~vIM}ZdPECDI)47|CWBCfDWUbxBCnmYivQ*0Nu_xb*C>~C9(VjHM zxe<*D<#dQ8TlpMX2c@M<9$w!RP$hpG4cs%AI){jp*Sj|*`m)5(Bw*A0$*i-(CA5#%>a)$+jI2C9r6|(>J8InryENI z$NohnxDUB;wAYDwrb*!N3noBTKPpPN}~09SEL18tkG zxgz(RYU_;DPT{l?Q$+eaZaxnsWCA^ds^0PVRkIM%bOd|G2IEBBiz{&^JtNsODs;5z zICt_Zj8wo^KT$7Bg4H+y!Df#3mbl%%?|EXe!&(Vmac1DJ*y~3+kRKAD=Ovde4^^%~ zw<9av18HLyrf*_>Slp;^i`Uy~`mvBjZ|?Ad63yQa#YK`4+c6;pW4?XIY9G1(Xh9WO8{F-Aju+nS9Vmv=$Ac0ienZ+p9*O%NG zMZKy5?%Z6TAJTE?o5vEr0r>f>hb#2w2U3DL64*au_@P!J!TL`oH2r*{>ffu6|A7tv zL4juf$DZ1MW5ZPsG!5)`k8d8c$J$o;%EIL0va9&GzWvkS%ZsGb#S(?{!UFOZ9<$a| zY|a+5kmD5N&{vRqkgY>aHsBT&`rg|&kezoD)gP0fsNYHsO#TRc_$n6Lf1Z{?+DLziXlHrq4sf(!>O{?Tj;Eh@%)+nRE_2VxbN&&%%caU#JDU%vL3}Cb zsb4AazPI{>8H&d=jUaZDS$-0^AxE@utGs;-Ez_F(qC9T=UZX=>ok2k2 ziTn{K?y~a5reD2A)P${NoI^>JXn>`IeArow(41c-Wm~)wiryEP(OS{YXWi7;%dG9v zI?mwu1MxD{yp_rrk!j^cKM)dc4@p4Ezyo%lRN|XyD}}>v=Xoib0gOcdXrQ^*61HNj z=NP|pd>@yfvr-=m{8$3A8TQGMTE7g=z!%yt`8`Bk-0MMwW~h^++;qyUP!J~ykh1GO z(FZ59xuFR$(WE;F@UUyE@Sp>`aVNjyj=Ty>_Vo}xf`e7`F;j-IgL5`1~-#70$9_=uBMq!2&1l zomRgpD58@)YYfvLtPW}{C5B35R;ZVvB<<#)x%srmc_S=A7F@DW8>QOEGwD6suhwCg z>Pa+YyULhmw%BA*4yjDp|2{!T98~<6Yfd(wo1mQ!KWwq0eg+6)o1>W~f~kL<-S+P@$wx*zeI|1t7z#Sxr5 zt6w+;YblPQNplq4Z#T$GLX#j6yldXAqj>4gAnnWtBICUnA&-dtnlh=t0Ho_vEKwV` z)DlJi#!@nkYV#$!)@>udAU*hF?V`2$Hf=V&6PP_|r#Iv*J$9)pF@X3`k;5})9^o4y z&)~?EjX5yX12O(BsFy-l6}nYeuKkiq`u9145&3Ssg^y{5G3Pse z9w(YVa0)N-fLaBq1`P!_#>SS(8fh_5!f{UrgZ~uEdeMJIz7DzI5!NHHqQtm~#CPij z?=N|J>nPR6_sL7!f4hD_|KH`vf8(Wpnj-(gPWH+ZvID}%?~68SwhPTC3u1_cB`otq z)U?6qo!ZLi5b>*KnYHWW=3F!p%h1;h{L&(Q&{qY6)_qxNfbP6E3yYpW!EO+IW3?@J z);4>g4gnl^8klu7uA>eGF6rIGSynacogr)KUwE_R4E5Xzi*Qir@b-jy55-JPC8c~( zo!W8y9OGZ&`xmc8;=4-U9=h{vCqfCNzYirONmGbRQlR`WWlgnY+1wCXbMz&NT~9*| z6@FrzP!LX&{no2!Ln_3|I==_4`@}V?4a;YZKTdw;vT<+K+z=uWbW(&bXEaWJ^W8Td z-3&1bY^Z*oM<=M}LVt>_j+p=2Iu7pZmbXrhQ_k)ysE9yXKygFNw$5hwDn(M>H+e1&9BM5!|81vd%r%vEm zqxY3?F@fb6O#5UunwgAHR9jp_W2zZ}NGp2%mTW@(hz7$^+a`A?mb8|_G*GNMJ) zjqegXQio=i@AINre&%ofexAr95aop5C+0MZ0m-l=MeO8m3epm7U%vZB8+I+C*iNFM z#T3l`gknX;D$-`2XT^Cg*vrv=RH+P;_dfF++cP?B_msQI4j+lt&rX2)3GaJx%W*Nn zkML%D{z5tpHH=dksQ*gzc|}gzW;lwAbxoR07VNgS*-c3d&8J|;@3t^ zVUz*J*&r7DFRuFVDCJDK8V9NN5hvpgGjwx+5n)qa;YCKe8TKtdnh{I7NU9BCN!0dq zczrBk8pE{{@vJa9ywR@mq*J=v+PG;?fwqlJVhijG!3VmIKs>9T6r7MJpC)m!Tc#>g zMtVsU>wbwFJEfwZ{vB|ZlttNe83)$iz`~#8UJ^r)lJ@HA&G#}W&ZH*;k{=TavpjWE z7hdyLZPf*X%Gm}i`Y{OGeeu^~nB8=`{r#TUrM-`;1cBvEd#d!kPqIgYySYhN-*1;L z^byj%Yi}Gx)Wnkosi337BKs}+5H5dth1JA{Ir-JKN$7zC)*}hqeoD(WfaUDPT>0`- z(6sa0AoIqASwF`>hP}^|)a_j2s^PQn*qVC{Q}htR z5-)duBFXT_V56-+UohKXlq~^6uf!6sA#ttk1o~*QEy_Y-S$gAvq47J9Vtk$5oA$Ct zYhYJ@8{hsC^98${!#Ho?4y5MCa7iGnfz}b9jE~h%EAAv~Qxu)_rAV;^cygV~5r_~?l=B`zObj7S=H=~$W zPtI_m%g$`kL_fVUk9J@>EiBH zOO&jtn~&`hIFMS5S`g8w94R4H40mdNUH4W@@XQk1sr17b{@y|JB*G9z1|CrQjd+GX z6+KyURG3;!*BQrentw{B2R&@2&`2}n(z-2&X7#r!{yg@Soy}cRD~j zj9@UBW+N|4HW4AWapy4wfUI- zZ`gSL6DUlgj*f1hSOGXG0IVH8HxK?o2|3HZ;KW{K+yPAlxtb)NV_2AwJm|E)FRs&& z=c^e7bvUsztY|+f^k7NXs$o1EUq>cR7C0$UKi6IooHWlK_#?IWDkvywnzg&ThWo^? z2O_N{5X39#?eV9l)xI(>@!vSB{DLt*oY!K1R8}_?%+0^C{d9a%N4 zoxHVT1&Lm|uDX%$QrBun5e-F`HJ^T$ zmzv)p@4ZHd_w9!%Hf9UYNvGCw2TTTbrj9pl+T9%-_-}L(tES>Or-}Z4F*{##n3~L~TuxjirGuIY#H7{%$E${?p{Q01 zi6T`n;rbK1yIB9jmQNycD~yZq&mbIsFWHo|ZAChSFPQa<(%d8mGw*V3fh|yFoxOOiWJd(qvVb!Z$b88cg->N=qO*4k~6;R==|9ihg&riu#P~s4Oap9O7f%crSr^rljeIfXDEg>wi)&v*a%7zpz<9w z*r!3q9J|390x`Zk;g$&OeN&ctp)VKRpDSV@kU2Q>jtok($Y-*x8_$2piTxun81@vt z!Vj?COa0fg2RPXMSIo26T=~0d`{oGP*eV+$!0I<(4azk&Vj3SiG=Q!6mX0p$z7I}; z9BJUFgT-K9MQQ-0@Z=^7R<{bn2Fm48endsSs`V7_@%8?Bxkqv>BDoVcj?K#dV#uUP zL1ND~?D-|VGKe3Rw_7-Idpht>H6XRLh*U7epS6byiGvJpr%d}XwfusjH9g;Z98H`x zyde%%5mhGOiL4wljCaWCk-&uE4_OOccb9c!ZaWt4B(wYl!?vyzl%7n~QepN&eFUrw zFIOl9c({``6~QD+43*_tzP{f2x41h(?b43^y6=iwyB)2os5hBE!@YUS5?N_tXd=h( z)WE286Fbd>R4M^P{!G)f;h<3Q>Fipuy+d2q-)!RyTgt;wr$(?9ox3;q+{E*ZQHhOn;lM`cjnu9 zXa48ks-v(~b*;MAI<>YZH(^NV8vjb34beE<_cwKlJoR;k6lJNSP6v}uiyRD?|0w+X@o1ONrH8a$fCxXpf? z?$DL0)7|X}Oc%h^zrMKWc-NS9I0Utu@>*j}b@tJ=ixQSJ={4@854wzW@E>VSL+Y{i z#0b=WpbCZS>kUCO_iQz)LoE>P5LIG-hv9E+oG}DtlIDF>$tJ1aw9^LuhLEHt?BCj& z(O4I8v1s#HUi5A>nIS-JK{v!7dJx)^Yg%XjNmlkWAq2*cv#tHgz`Y(bETc6CuO1VkN^L-L3j_x<4NqYb5rzrLC-7uOv z!5e`GZt%B782C5-fGnn*GhDF$%(qP<74Z}3xx+{$4cYKy2ikxI7B2N+2r07DN;|-T->nU&!=Cm#rZt%O_5c&1Z%nlWq3TKAW0w zQqemZw_ue--2uKQsx+niCUou?HjD`xhEjjQd3%rrBi82crq*~#uA4+>vR<_S{~5ce z-2EIl?~s z1=GVL{NxP1N3%=AOaC}j_Fv=ur&THz zyO!d9kHq|c73kpq`$+t+8Bw7MgeR5~`d7ChYyGCBWSteTB>8WAU(NPYt2Dk`@#+}= zI4SvLlyk#pBgVigEe`?NG*vl7V6m+<}%FwPV=~PvvA)=#ths==DRTDEYh4V5}Cf$z@#;< zyWfLY_5sP$gc3LLl2x+Ii)#b2nhNXJ{R~vk`s5U7Nyu^3yFg&D%Txwj6QezMX`V(x z=C`{76*mNb!qHHs)#GgGZ_7|vkt9izl_&PBrsu@}L`X{95-2jf99K)0=*N)VxBX2q z((vkpP2RneSIiIUEnGb?VqbMb=Zia+rF~+iqslydE34cSLJ&BJW^3knX@M;t*b=EA zNvGzv41Ld_T+WT#XjDB840vovUU^FtN_)G}7v)1lPetgpEK9YS^OWFkPoE{ovj^=@ zO9N$S=G$1ecndT_=5ehth2Lmd1II-PuT~C9`XVePw$y8J#dpZ?Tss<6wtVglm(Ok7 z3?^oi@pPio6l&!z8JY(pJvG=*pI?GIOu}e^EB6QYk$#FJQ%^AIK$I4epJ+9t?KjqA+bkj&PQ*|vLttme+`9G=L% ziadyMw_7-M)hS(3E$QGNCu|o23|%O+VN7;Qggp?PB3K-iSeBa2b}V4_wY`G1Jsfz4 z9|SdB^;|I8E8gWqHKx!vj_@SMY^hLEIbSMCuE?WKq=c2mJK z8LoG-pnY!uhqFv&L?yEuxo{dpMTsmCn)95xanqBrNPTgXP((H$9N${Ow~Is-FBg%h z53;|Y5$MUN)9W2HBe2TD`ct^LHI<(xWrw}$qSoei?}s)&w$;&!14w6B6>Yr6Y8b)S z0r71`WmAvJJ`1h&poLftLUS6Ir zC$bG9!Im_4Zjse)#K=oJM9mHW1{%l8sz$1o?ltdKlLTxWWPB>Vk22czVt|1%^wnN@*!l)}?EgtvhC>vlHm^t+ogpgHI1_$1ox9e;>0!+b(tBrmXRB`PY1vp-R**8N7 zGP|QqI$m(Rdu#=(?!(N}G9QhQ%o!aXE=aN{&wtGP8|_qh+7a_j_sU5|J^)vxq;# zjvzLn%_QPHZZIWu1&mRAj;Sa_97p_lLq_{~j!M9N^1yp3U_SxRqK&JnR%6VI#^E12 z>CdOVI^_9aPK2eZ4h&^{pQs}xsijXgFYRIxJ~N7&BB9jUR1fm!(xl)mvy|3e6-B3j zJn#ajL;bFTYJ2+Q)tDjx=3IklO@Q+FFM}6UJr6km7hj7th9n_&JR7fnqC!hTZoM~T zBeaVFp%)0cbPhejX<8pf5HyRUj2>aXnXBqDJe73~J%P(2C?-RT{c3NjE`)om! zl$uewSgWkE66$Kb34+QZZvRn`fob~Cl9=cRk@Es}KQm=?E~CE%spXaMO6YmrMl%9Q zlA3Q$3|L1QJ4?->UjT&CBd!~ru{Ih^in&JXO=|<6J!&qp zRe*OZ*cj5bHYlz!!~iEKcuE|;U4vN1rk$xq6>bUWD*u(V@8sG^7>kVuo(QL@Ki;yL zWC!FT(q{E8#on>%1iAS0HMZDJg{Z{^!De(vSIq&;1$+b)oRMwA3nc3mdTSG#3uYO_ z>+x;7p4I;uHz?ZB>dA-BKl+t-3IB!jBRgdvAbW!aJ(Q{aT>+iz?91`C-xbe)IBoND z9_Xth{6?(y3rddwY$GD65IT#f3<(0o#`di{sh2gm{dw*#-Vnc3r=4==&PU^hCv$qd zjw;>i&?L*Wq#TxG$mFIUf>eK+170KG;~+o&1;Tom9}}mKo23KwdEM6UonXgc z!6N(@k8q@HPw{O8O!lAyi{rZv|DpgfU{py+j(X_cwpKqcalcqKIr0kM^%Br3SdeD> zHSKV94Yxw;pjzDHo!Q?8^0bb%L|wC;4U^9I#pd5O&eexX+Im{ z?jKnCcsE|H?{uGMqVie_C~w7GX)kYGWAg%-?8|N_1#W-|4F)3YTDC+QSq1s!DnOML3@d`mG%o2YbYd#jww|jD$gotpa)kntakp#K;+yo-_ZF9qrNZw<%#C zuPE@#3RocLgPyiBZ+R_-FJ_$xP!RzWm|aN)S+{$LY9vvN+IW~Kf3TsEIvP+B9Mtm! zpfNNxObWQpLoaO&cJh5>%slZnHl_Q~(-Tfh!DMz(dTWld@LG1VRF`9`DYKhyNv z2pU|UZ$#_yUx_B_|MxUq^glT}O5Xt(Vm4Mr02><%C)@v;vPb@pT$*yzJ4aPc_FZ3z z3}PLoMBIM>q_9U2rl^sGhk1VUJ89=*?7|v`{!Z{6bqFMq(mYiA?%KbsI~JwuqVA9$H5vDE+VocjX+G^%bieqx->s;XWlKcuv(s%y%D5Xbc9+ zc(_2nYS1&^yL*ey664&4`IoOeDIig}y-E~_GS?m;D!xv5-xwz+G`5l6V+}CpeJDi^ z%4ed$qowm88=iYG+(`ld5Uh&>Dgs4uPHSJ^TngXP_V6fPyl~>2bhi20QB%lSd#yYn zO05?KT1z@?^-bqO8Cg`;ft>ilejsw@2%RR7;`$Vs;FmO(Yr3Fp`pHGr@P2hC%QcA|X&N2Dn zYf`MqXdHi%cGR@%y7Rg7?d3?an){s$zA{!H;Ie5exE#c~@NhQUFG8V=SQh%UxUeiV zd7#UcYqD=lk-}sEwlpu&H^T_V0{#G?lZMxL7ih_&{(g)MWBnCZxtXg znr#}>U^6!jA%e}@Gj49LWG@*&t0V>Cxc3?oO7LSG%~)Y5}f7vqUUnQ;STjdDU}P9IF9d9<$;=QaXc zL1^X7>fa^jHBu_}9}J~#-oz3Oq^JmGR#?GO7b9a(=R@fw@}Q{{@`Wy1vIQ#Bw?>@X z-_RGG@wt|%u`XUc%W{J z>iSeiz8C3H7@St3mOr_mU+&bL#Uif;+Xw-aZdNYUpdf>Rvu0i0t6k*}vwU`XNO2he z%miH|1tQ8~ZK!zmL&wa3E;l?!!XzgV#%PMVU!0xrDsNNZUWKlbiOjzH-1Uoxm8E#r`#2Sz;-o&qcqB zC-O_R{QGuynW14@)7&@yw1U}uP(1cov)twxeLus0s|7ayrtT8c#`&2~Fiu2=R;1_4bCaD=*E@cYI>7YSnt)nQc zohw5CsK%m?8Ack)qNx`W0_v$5S}nO|(V|RZKBD+btO?JXe|~^Qqur%@eO~<8-L^9d z=GA3-V14ng9L29~XJ>a5k~xT2152zLhM*@zlp2P5Eu}bywkcqR;ISbas&#T#;HZSf z2m69qTV(V@EkY(1Dk3`}j)JMo%ZVJ*5eB zYOjIisi+igK0#yW*gBGj?@I{~mUOvRFQR^pJbEbzFxTubnrw(Muk%}jI+vXmJ;{Q6 zrSobKD>T%}jV4Ub?L1+MGOD~0Ir%-`iTnWZN^~YPrcP5y3VMAzQ+&en^VzKEb$K!Q z<7Dbg&DNXuow*eD5yMr+#08nF!;%4vGrJI++5HdCFcGLfMW!KS*Oi@=7hFwDG!h2< zPunUEAF+HncQkbfFj&pbzp|MU*~60Z(|Ik%Tn{BXMN!hZOosNIseT?R;A`W?=d?5X zK(FB=9mZusYahp|K-wyb={rOpdn=@;4YI2W0EcbMKyo~-#^?h`BA9~o285%oY zfifCh5Lk$SY@|2A@a!T2V+{^!psQkx4?x0HSV`(w9{l75QxMk!)U52Lbhn{8ol?S) zCKo*7R(z!uk<6*qO=wh!Pul{(qq6g6xW;X68GI_CXp`XwO zxuSgPRAtM8K7}5E#-GM!*ydOOG_{A{)hkCII<|2=ma*71ci_-}VPARm3crFQjLYV! z9zbz82$|l01mv`$WahE2$=fAGWkd^X2kY(J7iz}WGS z@%MyBEO=A?HB9=^?nX`@nh;7;laAjs+fbo!|K^mE!tOB>$2a_O0y-*uaIn8k^6Y zSbuv;5~##*4Y~+y7Z5O*3w4qgI5V^17u*ZeupVGH^nM&$qmAk|anf*>r zWc5CV;-JY-Z@Uq1Irpb^O`L_7AGiqd*YpGUShb==os$uN3yYvb`wm6d=?T*it&pDk zo`vhw)RZX|91^^Wa_ti2zBFyWy4cJu#g)_S6~jT}CC{DJ_kKpT`$oAL%b^!2M;JgT zM3ZNbUB?}kP(*YYvXDIH8^7LUxz5oE%kMhF!rnPqv!GiY0o}NR$OD=ITDo9r%4E>E0Y^R(rS^~XjWyVI6 zMOR5rPXhTp*G*M&X#NTL`Hu*R+u*QNoiOKg4CtNPrjgH>c?Hi4MUG#I917fx**+pJfOo!zFM&*da&G_x)L(`k&TPI*t3e^{crd zX<4I$5nBQ8Ax_lmNRa~E*zS-R0sxkz`|>7q_?*e%7bxqNm3_eRG#1ae3gtV9!fQpY z+!^a38o4ZGy9!J5sylDxZTx$JmG!wg7;>&5H1)>f4dXj;B+@6tMlL=)cLl={jLMxY zbbf1ax3S4>bwB9-$;SN2?+GULu;UA-35;VY*^9Blx)Jwyb$=U!D>HhB&=jSsd^6yw zL)?a|>GxU!W}ocTC(?-%z3!IUhw^uzc`Vz_g>-tv)(XA#JK^)ZnC|l1`@CdX1@|!| z_9gQ)7uOf?cR@KDp97*>6X|;t@Y`k_N@)aH7gY27)COv^P3ya9I{4z~vUjLR9~z1Z z5=G{mVtKH*&$*t0@}-i_v|3B$AHHYale7>E+jP`ClqG%L{u;*ff_h@)al?RuL7tOO z->;I}>%WI{;vbLP3VIQ^iA$4wl6@0sDj|~112Y4OFjMs`13!$JGkp%b&E8QzJw_L5 zOnw9joc0^;O%OpF$Qp)W1HI!$4BaXX84`%@#^dk^hFp^pQ@rx4g(8Xjy#!X%+X5Jd@fs3amGT`}mhq#L97R>OwT5-m|h#yT_-v@(k$q7P*9X~T*3)LTdzP!*B} z+SldbVWrrwQo9wX*%FyK+sRXTa@O?WM^FGWOE?S`R(0P{<6p#f?0NJvnBia?k^fX2 zNQs7K-?EijgHJY}&zsr;qJ<*PCZUd*x|dD=IQPUK_nn)@X4KWtqoJNHkT?ZWL_hF? zS8lp2(q>;RXR|F;1O}EE#}gCrY~#n^O`_I&?&z5~7N;zL0)3Tup`%)oHMK-^r$NT% zbFg|o?b9w(q@)6w5V%si<$!U<#}s#x@0aX-hP>zwS#9*75VXA4K*%gUc>+yzupTDBOKH8WR4V0pM(HrfbQ&eJ79>HdCvE=F z|J>s;;iDLB^3(9}?biKbxf1$lI!*Z%*0&8UUq}wMyPs_hclyQQi4;NUY+x2qy|0J; zhn8;5)4ED1oHwg+VZF|80<4MrL97tGGXc5Sw$wAI#|2*cvQ=jB5+{AjMiDHmhUC*a zlmiZ`LAuAn_}hftXh;`Kq0zblDk8?O-`tnilIh|;3lZp@F_osJUV9`*R29M?7H{Fy z`nfVEIDIWXmU&YW;NjU8)EJpXhxe5t+scf|VXM!^bBlwNh)~7|3?fWwo_~ZFk(22% zTMesYw+LNx3J-_|DM~`v93yXe=jPD{q;li;5PD?Dyk+b? zo21|XpT@)$BM$%F=P9J19Vi&1#{jM3!^Y&fr&_`toi`XB1!n>sbL%U9I5<7!@?t)~ z;&H%z>bAaQ4f$wIzkjH70;<8tpUoxzKrPhn#IQfS%9l5=Iu))^XC<58D!-O z{B+o5R^Z21H0T9JQ5gNJnqh#qH^na|z92=hONIM~@_iuOi|F>jBh-?aA20}Qx~EpDGElELNn~|7WRXRFnw+Wdo`|# zBpU=Cz3z%cUJ0mx_1($X<40XEIYz(`noWeO+x#yb_pwj6)R(__%@_Cf>txOQ74wSJ z0#F3(zWWaR-jMEY$7C*3HJrohc79>MCUu26mfYN)f4M~4gD`}EX4e}A!U}QV8!S47 z6y-U-%+h`1n`*pQuKE%Av0@)+wBZr9mH}@vH@i{v(m-6QK7Ncf17x_D=)32`FOjjo zg|^VPf5c6-!FxN{25dvVh#fog=NNpXz zfB$o+0jbRkHH{!TKhE709f+jI^$3#v1Nmf80w`@7-5$1Iv_`)W^px8P-({xwb;D0y z7LKDAHgX<84?l!I*Dvi2#D@oAE^J|g$3!)x1Ua;_;<@#l1fD}lqU2_tS^6Ht$1Wl} zBESo7o^)9-Tjuz$8YQSGhfs{BQV6zW7dA?0b(Dbt=UnQs&4zHfe_sj{RJ4uS-vQpC zX;Bbsuju4%!o8?&m4UZU@~ZZjeFF6ex2ss5_60_JS_|iNc+R0GIjH1@Z z=rLT9%B|WWgOrR7IiIwr2=T;Ne?30M!@{%Qf8o`!>=s<2CBpCK_TWc(DX51>e^xh8 z&@$^b6CgOd7KXQV&Y4%}_#uN*mbanXq(2=Nj`L7H7*k(6F8s6{FOw@(DzU`4-*77{ zF+dxpv}%mFpYK?>N_2*#Y?oB*qEKB}VoQ@bzm>ptmVS_EC(#}Lxxx730trt0G)#$b zE=wVvtqOct1%*9}U{q<)2?{+0TzZzP0jgf9*)arV)*e!f`|jgT{7_9iS@e)recI#z zbzolURQ+TOzE!ymqvBY7+5NnAbWxvMLsLTwEbFqW=CPyCsmJ}P1^V30|D5E|p3BC5 z)3|qgw@ra7aXb-wsa|l^in~1_fm{7bS9jhVRkYVO#U{qMp z)Wce+|DJ}4<2gp8r0_xfZpMo#{Hl2MfjLcZdRB9(B(A(f;+4s*FxV{1F|4d`*sRNd zp4#@sEY|?^FIJ;tmH{@keZ$P(sLh5IdOk@k^0uB^BWr@pk6mHy$qf&~rI>P*a;h0C{%oA*i!VjWn&D~O#MxN&f@1Po# zKN+ zrGrkSjcr?^R#nGl<#Q722^wbYcgW@{+6CBS<1@%dPA8HC!~a`jTz<`g_l5N1M@9wn9GOAZ>nqNgq!yOCbZ@1z`U_N`Z>}+1HIZxk*5RDc&rd5{3qjRh8QmT$VyS;jK z;AF+r6XnnCp=wQYoG|rT2@8&IvKq*IB_WvS%nt%e{MCFm`&W*#LXc|HrD?nVBo=(8*=Aq?u$sDA_sC_RPDUiQ+wnIJET8vx$&fxkW~kP9qXKt zozR)@xGC!P)CTkjeWvXW5&@2?)qt)jiYWWBU?AUtzAN}{JE1I)dfz~7$;}~BmQF`k zpn11qmObXwRB8&rnEG*#4Xax3XBkKlw(;tb?Np^i+H8m(Wyz9k{~ogba@laiEk;2! zV*QV^6g6(QG%vX5Um#^sT&_e`B1pBW5yVth~xUs#0}nv?~C#l?W+9Lsb_5)!71rirGvY zTIJ$OPOY516Y|_014sNv+Z8cc5t_V=i>lWV=vNu#!58y9Zl&GsMEW#pPYPYGHQ|;vFvd*9eM==$_=vc7xnyz0~ zY}r??$<`wAO?JQk@?RGvkWVJlq2dk9vB(yV^vm{=NVI8dhsX<)O(#nr9YD?I?(VmQ z^r7VfUBn<~p3()8yOBjm$#KWx!5hRW)5Jl7wY@ky9lNM^jaT##8QGVsYeaVywmpv>X|Xj7gWE1Ezai&wVLt3p)k4w~yrskT-!PR!kiyQlaxl(( zXhF%Q9x}1TMt3~u@|#wWm-Vq?ZerK={8@~&@9r5JW}r#45#rWii};t`{5#&3$W)|@ zbAf2yDNe0q}NEUvq_Quq3cTjcw z@H_;$hu&xllCI9CFDLuScEMg|x{S7GdV8<&Mq=ezDnRZAyX-8gv97YTm0bg=d)(>N z+B2FcqvI9>jGtnK%eO%y zoBPkJTk%y`8TLf4)IXPBn`U|9>O~WL2C~C$z~9|0m*YH<-vg2CD^SX#&)B4ngOSG$ zV^wmy_iQk>dfN@Pv(ckfy&#ak@MLC7&Q6Ro#!ezM*VEh`+b3Jt%m(^T&p&WJ2Oqvj zs-4nq0TW6cv~(YI$n0UkfwN}kg3_fp?(ijSV#tR9L0}l2qjc7W?i*q01=St0eZ=4h zyGQbEw`9OEH>NMuIe)hVwYHsGERWOD;JxEiO7cQv%pFCeR+IyhwQ|y@&^24k+|8fD zLiOWFNJ2&vu2&`Jv96_z-Cd5RLgmeY3*4rDOQo?Jm`;I_(+ejsPM03!ly!*Cu}Cco zrQSrEDHNyzT(D5s1rZq!8#?f6@v6dB7a-aWs(Qk>N?UGAo{gytlh$%_IhyL7h?DLXDGx zgxGEBQoCAWo-$LRvM=F5MTle`M})t3vVv;2j0HZY&G z22^iGhV@uaJh(XyyY%} zd4iH_UfdV#T=3n}(Lj^|n;O4|$;xhu*8T3hR1mc_A}fK}jfZ7LX~*n5+`8N2q#rI$ z@<_2VANlYF$vIH$ zl<)+*tIWW78IIINA7Rr7i{<;#^yzxoLNkXL)eSs=%|P>$YQIh+ea_3k z_s7r4%j7%&*NHSl?R4k%1>Z=M9o#zxY!n8sL5>BO-ZP;T3Gut>iLS@U%IBrX6BA3k z)&@q}V8a{X<5B}K5s(c(LQ=%v1ocr`t$EqqY0EqVjr65usa=0bkf|O#ky{j3)WBR(((L^wmyHRzoWuL2~WTC=`yZ zn%VX`L=|Ok0v7?s>IHg?yArBcync5rG#^+u)>a%qjES%dRZoIyA8gQ;StH z1Ao7{<&}6U=5}4v<)1T7t!J_CL%U}CKNs-0xWoTTeqj{5{?Be$L0_tk>M9o8 zo371}S#30rKZFM{`H_(L`EM9DGp+Mifk&IP|C2Zu_)Ghr4Qtpmkm1osCf@%Z$%t+7 zYH$Cr)Ro@3-QDeQJ8m+x6%;?YYT;k6Z0E-?kr>x33`H%*ueBD7Zx~3&HtWn0?2Wt} zTG}*|v?{$ajzt}xPzV%lL1t-URi8*Zn)YljXNGDb>;!905Td|mpa@mHjIH%VIiGx- zd@MqhpYFu4_?y5N4xiHn3vX&|e6r~Xt> zZG`aGq|yTNjv;9E+Txuoa@A(9V7g?1_T5FzRI;!=NP1Kqou1z5?%X~Wwb{trRfd>i z8&y^H)8YnKyA_Fyx>}RNmQIczT?w2J4SNvI{5J&}Wto|8FR(W;Qw#b1G<1%#tmYzQ zQ2mZA-PAdi%RQOhkHy9Ea#TPSw?WxwL@H@cbkZwIq0B!@ns}niALidmn&W?!Vd4Gj zO7FiuV4*6Mr^2xlFSvM;Cp_#r8UaqIzHJQg_z^rEJw&OMm_8NGAY2)rKvki|o1bH~ z$2IbfVeY2L(^*rMRU1lM5Y_sgrDS`Z??nR2lX;zyR=c%UyGb*%TC-Dil?SihkjrQy~TMv6;BMs7P8il`H7DmpVm@rJ;b)hW)BL)GjS154b*xq-NXq2cwE z^;VP7ua2pxvCmxrnqUYQMH%a%nHmwmI33nJM(>4LznvY*k&C0{8f*%?zggpDgkuz&JBx{9mfb@wegEl2v!=}Sq2Gaty0<)UrOT0{MZtZ~j5y&w zXlYa_jY)I_+VA-^#mEox#+G>UgvM!Ac8zI<%JRXM_73Q!#i3O|)lOP*qBeJG#BST0 zqohi)O!|$|2SeJQo(w6w7%*92S})XfnhrH_Z8qe!G5>CglP=nI7JAOW?(Z29;pXJ9 zR9`KzQ=WEhy*)WH>$;7Cdz|>*i>=##0bB)oU0OR>>N<21e4rMCHDemNi2LD>Nc$;& zQRFthpWniC1J6@Zh~iJCoLOxN`oCKD5Q4r%ynwgUKPlIEd#?QViIqovY|czyK8>6B zSP%{2-<;%;1`#0mG^B(8KbtXF;Nf>K#Di72UWE4gQ%(_26Koiad)q$xRL~?pN71ZZ zujaaCx~jXjygw;rI!WB=xrOJO6HJ!!w}7eiivtCg5K|F6$EXa)=xUC za^JXSX98W`7g-tm@uo|BKj39Dl;sg5ta;4qjo^pCh~{-HdLl6qI9Ix6f$+qiZ$}s= zNguKrU;u+T@ko(Vr1>)Q%h$?UKXCY>3se%&;h2osl2D zE4A9bd7_|^njDd)6cI*FupHpE3){4NQ*$k*cOWZ_?CZ>Z4_fl@n(mMnYK62Q1d@+I zr&O))G4hMihgBqRIAJkLdk(p(D~X{-oBUA+If@B}j& zsHbeJ3RzTq96lB7d($h$xTeZ^gP0c{t!Y0c)aQE;$FY2!mACg!GDEMKXFOPI^)nHZ z`aSPJpvV0|bbrzhWWkuPURlDeN%VT8tndV8?d)eN*i4I@u zVKl^6{?}A?P)Fsy?3oi#clf}L18t;TjNI2>eI&(ezDK7RyqFxcv%>?oxUlonv(px) z$vnPzRH`y5A(x!yOIfL0bmgeMQB$H5wenx~!ujQK*nUBW;@Em&6Xv2%s(~H5WcU2R z;%Nw<$tI)a`Ve!>x+qegJnQsN2N7HaKzrFqM>`6R*gvh%O*-%THt zrB$Nk;lE;z{s{r^PPm5qz(&lM{sO*g+W{sK+m3M_z=4=&CC>T`{X}1Vg2PEfSj2x_ zmT*(x;ov%3F?qoEeeM>dUn$a*?SIGyO8m806J1W1o+4HRhc2`9$s6hM#qAm zChQ87b~GEw{ADfs+5}FJ8+|bIlIv(jT$Ap#hSHoXdd9#w<#cA<1Rkq^*EEkknUd4& zoIWIY)sAswy6fSERVm&!SO~#iN$OgOX*{9@_BWFyJTvC%S++ilSfCrO(?u=Dc?CXZ zzCG&0yVR{Z`|ZF0eEApWEo#s9osV>F{uK{QA@BES#&;#KsScf>y zvs?vIbI>VrT<*!;XmQS=bhq%46-aambZ(8KU-wOO2=en~D}MCToB_u;Yz{)1ySrPZ z@=$}EvjTdzTWU7c0ZI6L8=yP+YRD_eMMos}b5vY^S*~VZysrkq<`cK3>>v%uy7jgq z0ilW9KjVDHLv0b<1K_`1IkbTOINs0=m-22c%M~l=^S}%hbli-3?BnNq?b`hx^HX2J zIe6ECljRL0uBWb`%{EA=%!i^4sMcj+U_TaTZRb+~GOk z^ZW!nky0n*Wb*r+Q|9H@ml@Z5gU&W`(z4-j!OzC1wOke`TRAYGZVl$PmQ16{3196( zO*?`--I}Qf(2HIwb2&1FB^!faPA2=sLg(@6P4mN)>Dc3i(B0;@O-y2;lM4akD>@^v z=u>*|!s&9zem70g7zfw9FXl1bpJW(C#5w#uy5!V?Q(U35A~$dR%LDVnq@}kQm13{} zd53q3N(s$Eu{R}k2esbftfjfOITCL;jWa$}(mmm}d(&7JZ6d3%IABCapFFYjdEjdK z&4Edqf$G^MNAtL=uCDRs&Fu@FXRgX{*0<(@c3|PNHa>L%zvxWS={L8%qw`STm+=Rd zA}FLspESSIpE_^41~#5yI2bJ=9`oc;GIL!JuW&7YetZ?0H}$$%8rW@*J37L-~Rsx!)8($nI4 zZhcZ2^=Y+p4YPl%j!nFJA|*M^gc(0o$i3nlphe+~-_m}jVkRN{spFs(o0ajW@f3K{ zDV!#BwL322CET$}Y}^0ixYj2w>&Xh12|R8&yEw|wLDvF!lZ#dOTHM9pK6@Nm-@9Lnng4ZHBgBSrr7KI8YCC9DX5Kg|`HsiwJHg2(7#nS;A{b3tVO?Z% za{m5b3rFV6EpX;=;n#wltDv1LE*|g5pQ+OY&*6qCJZc5oDS6Z6JD#6F)bWxZSF@q% z+1WV;m!lRB!n^PC>RgQCI#D1br_o^#iPk>;K2hB~0^<~)?p}LG%kigm@moD#q3PE+ zA^Qca)(xnqw6x>XFhV6ku9r$E>bWNrVH9fum0?4s?Rn2LG{Vm_+QJHse6xa%nzQ?k zKug4PW~#Gtb;#5+9!QBgyB@q=sk9=$S{4T>wjFICStOM?__fr+Kei1 z3j~xPqW;W@YkiUM;HngG!;>@AITg}vAE`M2Pj9Irl4w1fo4w<|Bu!%rh%a(Ai^Zhi zs92>v5;@Y(Zi#RI*ua*h`d_7;byQSa*v9E{2x$<-_=5Z<7{%)}4XExANcz@rK69T0x3%H<@frW>RA8^swA+^a(FxK| zFl3LD*ImHN=XDUkrRhp6RY5$rQ{bRgSO*(vEHYV)3Mo6Jy3puiLmU&g82p{qr0F?ohmbz)f2r{X2|T2 z$4fdQ=>0BeKbiVM!e-lIIs8wVTuC_m7}y4A_%ikI;Wm5$9j(^Y z(cD%U%k)X>_>9~t8;pGzL6L-fmQO@K; zo&vQzMlgY95;1BSkngY)e{`n0!NfVgf}2mB3t}D9@*N;FQ{HZ3Pb%BK6;5#-O|WI( zb6h@qTLU~AbVW#_6?c!?Dj65Now7*pU{h!1+eCV^KCuPAGs28~3k@ueL5+u|Z-7}t z9|lskE`4B7W8wMs@xJa{#bsCGDFoRSNSnmNYB&U7 zVGKWe%+kFB6kb)e;TyHfqtU6~fRg)f|>=5(N36)0+C z`hv65J<$B}WUc!wFAb^QtY31yNleq4dzmG`1wHTj=c*=hay9iD071Hc?oYoUk|M*_ zU1GihAMBsM@5rUJ(qS?9ZYJ6@{bNqJ`2Mr+5#hKf?doa?F|+^IR!8lq9)wS3tF_9n zW_?hm)G(M+MYb?V9YoX^_mu5h-LP^TL^!Q9Z7|@sO(rg_4+@=PdI)WL(B7`!K^ND- z-uIuVDCVEdH_C@c71YGYT^_Scf_dhB8Z2Xy6vGtBSlYud9vggOqv^L~F{BraSE_t} zIkP+Hp2&nH^-MNEs}^`oMLy11`PQW$T|K(`Bu*(f@)mv1-qY(_YG&J2M2<7k;;RK~ zL{Fqj9yCz8(S{}@c)S!65aF<=&eLI{hAMErCx&>i7OeDN>okvegO87OaG{Jmi<|}D zaT@b|0X{d@OIJ7zvT>r+eTzgLq~|Dpu)Z&db-P4z*`M$UL51lf>FLlq6rfG)%doyp z)3kk_YIM!03eQ8Vu_2fg{+osaEJPtJ-s36R+5_AEG12`NG)IQ#TF9c@$99%0iye+ zUzZ57=m2)$D(5Nx!n)=5Au&O0BBgwxIBaeI(mro$#&UGCr<;C{UjJVAbVi%|+WP(a zL$U@TYCxJ=1{Z~}rnW;7UVb7+ZnzgmrogDxhjLGo>c~MiJAWs&&;AGg@%U?Y^0JhL ze(x6Z74JG6FlOFK(T}SXQfhr}RIFl@QXKnIcXYF)5|V~e-}suHILKT-k|<*~Ij|VF zC;t@=uj=hot~*!C68G8hTA%8SzOfETOXQ|3FSaIEjvBJp(A)7SWUi5!Eu#yWgY+;n zlm<$+UDou*V+246_o#V4kMdto8hF%%Lki#zPh}KYXmMf?hrN0;>Mv%`@{0Qn`Ujp) z=lZe+13>^Q!9zT);H<(#bIeRWz%#*}sgUX9P|9($kexOyKIOc`dLux}c$7It4u|Rl z6SSkY*V~g_B-hMPo_ak>>z@AVQ(_N)VY2kB3IZ0G(iDUYw+2d7W^~(Jq}KY=JnWS( z#rzEa&0uNhJ>QE8iiyz;n2H|SV#Og+wEZv=f2%1ELX!SX-(d3tEj$5$1}70Mp<&eI zCkfbByL7af=qQE@5vDVxx1}FSGt_a1DoE3SDI+G)mBAna)KBG4p8Epxl9QZ4BfdAN zFnF|Y(umr;gRgG6NLQ$?ZWgllEeeq~z^ZS7L?<(~O&$5|y)Al^iMKy}&W+eMm1W z7EMU)u^ke(A1#XCV>CZ71}P}0x)4wtHO8#JRG3MA-6g=`ZM!FcICCZ{IEw8Dm2&LQ z1|r)BUG^0GzI6f946RrBlfB1Vs)~8toZf~7)+G;pv&XiUO(%5bm)pl=p>nV^o*;&T z;}@oZSibzto$arQgfkp|z4Z($P>dTXE{4O=vY0!)kDO* zGF8a4wq#VaFpLfK!iELy@?-SeRrdz%F*}hjKcA*y@mj~VD3!it9lhRhX}5YOaR9$} z3mS%$2Be7{l(+MVx3 z(4?h;P!jnRmX9J9sYN#7i=iyj_5q7n#X(!cdqI2lnr8T$IfOW<_v`eB!d9xY1P=2q&WtOXY=D9QYteP)De?S4}FK6#6Ma z=E*V+#s8>L;8aVroK^6iKo=MH{4yEZ_>N-N z`(|;aOATba1^asjxlILk<4}f~`39dBFlxj>Dw(hMYKPO3EEt1@S`1lxFNM+J@uB7T zZ8WKjz7HF1-5&2=l=fqF-*@>n5J}jIxdDwpT?oKM3s8Nr`x8JnN-kCE?~aM1H!hAE z%%w(3kHfGwMnMmNj(SU(w42OrC-euI>Dsjk&jz3ts}WHqmMpzQ3vZrsXrZ|}+MHA7 z068obeXZTsO*6RS@o3x80E4ok``rV^Y3hr&C1;|ZZ0|*EKO`$lECUYG2gVFtUTw)R z4Um<0ZzlON`zTdvVdL#KFoMFQX*a5wM0Czp%wTtfK4Sjs)P**RW&?lP$(<}q%r68Z zS53Y!d@&~ne9O)A^tNrXHhXBkj~$8j%pT1%%mypa9AW5E&s9)rjF4@O3ytH{0z6riz|@< zB~UPh*wRFg2^7EbQrHf0y?E~dHlkOxof_a?M{LqQ^C!i2dawHTPYUE=X@2(3<=OOxs8qn_(y>pU>u^}3y&df{JarR0@VJn0f+U%UiF=$Wyq zQvnVHESil@d|8&R<%}uidGh7@u^(%?$#|&J$pvFC-n8&A>utA=n3#)yMkz+qnG3wd zP7xCnF|$9Dif@N~L)Vde3hW8W!UY0BgT2v(wzp;tlLmyk2%N|0jfG$%<;A&IVrOI< z!L)o>j>;dFaqA3pL}b-Je(bB@VJ4%!JeX@3x!i{yIeIso^=n?fDX`3bU=eG7sTc%g%ye8$v8P@yKE^XD=NYxTb zbf!Mk=h|otpqjFaA-vs5YOF-*GwWPc7VbaOW&stlANnCN8iftFMMrUdYNJ_Bnn5Vt zxfz@Ah|+4&P;reZxp;MmEI7C|FOv8NKUm8njF7Wb6Gi7DeODLl&G~}G4be&*Hi0Qw z5}77vL0P+7-B%UL@3n1&JPxW^d@vVwp?u#gVcJqY9#@-3X{ok#UfW3<1fb%FT`|)V~ggq z(3AUoUS-;7)^hCjdT0Kf{i}h)mBg4qhtHHBti=~h^n^OTH5U*XMgDLIR@sre`AaB$ zg)IGBET_4??m@cx&c~bA80O7B8CHR7(LX7%HThkeC*@vi{-pL%e)yXp!B2InafbDF zjPXf1mko3h59{lT6EEbxKO1Z5GF71)WwowO6kY|6tjSVSWdQ}NsK2x{>i|MKZK8%Q zfu&_0D;CO-Jg0#YmyfctyJ!mRJp)e#@O0mYdp|8x;G1%OZQ3Q847YWTyy|%^cpA;m zze0(5p{tMu^lDkpe?HynyO?a1$_LJl2L&mpeKu%8YvgRNr=%2z${%WThHG=vrWY@4 zsA`OP#O&)TetZ>s%h!=+CE15lOOls&nvC~$Qz0Ph7tHiP;O$i|eDwpT{cp>+)0-|; zY$|bB+Gbel>5aRN3>c0x)4U=|X+z+{ zn*_p*EQoquRL+=+p;=lm`d71&1NqBz&_ph)MXu(Nv6&XE7(RsS)^MGj5Q?Fwude-(sq zjJ>aOq!7!EN>@(fK7EE#;i_BGvli`5U;r!YA{JRodLBc6-`n8K+Fjgwb%sX;j=qHQ z7&Tr!)!{HXoO<2BQrV9Sw?JRaLXV8HrsNevvnf>Y-6|{T!pYLl7jp$-nEE z#X!4G4L#K0qG_4Z;Cj6=;b|Be$hi4JvMH!-voxqx^@8cXp`B??eFBz2lLD8RRaRGh zn7kUfy!YV~p(R|p7iC1Rdgt$_24i0cd-S8HpG|`@my70g^y`gu%#Tf_L21-k?sRRZHK&at(*ED0P8iw{7?R$9~OF$Ko;Iu5)ur5<->x!m93Eb zFYpIx60s=Wxxw=`$aS-O&dCO_9?b1yKiPCQmSQb>T)963`*U+Ydj5kI(B(B?HNP8r z*bfSBpSu)w(Z3j7HQoRjUG(+d=IaE~tv}y14zHHs|0UcN52fT8V_<@2ep_ee{QgZG zmgp8iv4V{k;~8@I%M3<#B;2R>Ef(Gg_cQM7%}0s*^)SK6!Ym+~P^58*wnwV1BW@eG z4sZLqsUvBbFsr#8u7S1r4teQ;t)Y@jnn_m5jS$CsW1um!p&PqAcc8!zyiXHVta9QC zY~wCwCF0U%xiQPD_INKtTb;A|Zf29(mu9NI;E zc-e>*1%(LSXB`g}kd`#}O;veb<(sk~RWL|f3ljxCnEZDdNSTDV6#Td({6l&y4IjKF z^}lIUq*ZUqgTPumD)RrCN{M^jhY>E~1pn|KOZ5((%F)G|*ZQ|r4zIbrEiV%42hJV8 z3xS)=!X1+=olbdGJ=yZil?oXLct8FM{(6ikLL3E%=q#O6(H$p~gQu6T8N!plf!96| z&Q3=`L~>U0zZh;z(pGR2^S^{#PrPxTRHD1RQOON&f)Siaf`GLj#UOk&(|@0?zm;Sx ztsGt8=29-MZs5CSf1l1jNFtNt5rFNZxJPvkNu~2}7*9468TWm>nN9TP&^!;J{-h)_ z7WsHH9|F%I`Pb!>KAS3jQWKfGivTVkMJLO-HUGM_a4UQ_%RgL6WZvrW+Z4ujZn;y@ zz9$=oO!7qVTaQAA^BhX&ZxS*|5dj803M=k&2%QrXda`-Q#IoZL6E(g+tN!6CA!CP* zCpWtCujIea)ENl0liwVfj)Nc<9mV%+e@=d`haoZ*`B7+PNjEbXBkv=B+Pi^~L#EO$D$ZqTiD8f<5$eyb54-(=3 zh)6i8i|jp(@OnRrY5B8t|LFXFQVQ895n*P16cEKTrT*~yLH6Z4e*bZ5otpRDri&+A zfNbK1D5@O=sm`fN=WzWyse!za5n%^+6dHPGX#8DyIK>?9qyX}2XvBWVqbP%%D)7$= z=#$WulZlZR<{m#gU7lwqK4WS1Ne$#_P{b17qe$~UOXCl>5b|6WVh;5vVnR<%d+Lnp z$uEmML38}U4vaW8>shm6CzB(Wei3s#NAWE3)a2)z@i{4jTn;;aQS)O@l{rUM`J@K& l00vQ5JBs~;vo!vr%%-k{2_Fq1Mn4QF81S)AQ99zk{{c4yR+0b! literal 0 HcmV?d00001 From 24883ee571c56bcd697603f48f8f253b12ea2c93 Mon Sep 17 00:00:00 2001 From: Jim Anderson Date: Tue, 19 Aug 2025 14:44:49 -0500 Subject: [PATCH 8/9] Update examples/opentelemetry/build.gradle Co-authored-by: coderabbitai[bot] <136622811+coderabbitai[bot]@users.noreply.github.com> --- examples/opentelemetry/build.gradle | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/examples/opentelemetry/build.gradle b/examples/opentelemetry/build.gradle index b81da9eb..f7529990 100644 --- a/examples/opentelemetry/build.gradle +++ b/examples/opentelemetry/build.gradle @@ -22,8 +22,14 @@ task downloadAgent { if (!agentFile.exists()) { println "Downloading OpenTelemetry Java agent..." def agentUrl = 'https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/latest/download/opentelemetry-javaagent.jar' - new URL(agentUrl).withInputStream { i -> - agentFile.withOutputStream { it << i } + def agentUrl = 'https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/latest/download/opentelemetry-javaagent.jar' + try { + new URL(agentUrl).withInputStream { i -> + agentFile.withOutputStream { it << i } + } + println "Downloaded opentelemetry-javaagent.jar" + } catch (Exception e) { + throw new GradleException("Failed to download OpenTelemetry agent: ${e.message}", e) } println "Downloaded opentelemetry-javaagent.jar" } else { From c589608a54448c6a8b7d168c0a11cd79c56d66c6 Mon Sep 17 00:00:00 2001 From: Jim Anderson Date: Wed, 20 Aug 2025 10:45:26 -0500 Subject: [PATCH 9/9] fix build, update otel deps --- examples/opentelemetry/build.gradle | 7 +++--- .../opentelemetry/OpenTelemetryExample.java | 23 +++++++++++-------- 2 files changed, 16 insertions(+), 14 deletions(-) diff --git a/examples/opentelemetry/build.gradle b/examples/opentelemetry/build.gradle index f7529990..c8c76e1c 100644 --- a/examples/opentelemetry/build.gradle +++ b/examples/opentelemetry/build.gradle @@ -22,7 +22,6 @@ task downloadAgent { if (!agentFile.exists()) { println "Downloading OpenTelemetry Java agent..." def agentUrl = 'https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/latest/download/opentelemetry-javaagent.jar' - def agentUrl = 'https://github.com/open-telemetry/opentelemetry-java-instrumentation/releases/latest/download/opentelemetry-javaagent.jar' try { new URL(agentUrl).withInputStream { i -> agentFile.withOutputStream { it << i } @@ -76,8 +75,8 @@ repositories { ext { fgaSdkVersion = "0.9.0" - openTelemetryVersion = "1.32.0" - openTelemetryAlphaVersion = "1.32.0-alpha" + openTelemetryVersion = "1.53.0" + openTelemetryAlphaVersion = "1.53.0-alpha" } dependencies { @@ -97,7 +96,7 @@ dependencies { implementation("io.opentelemetry:opentelemetry-exporter-prometheus:$openTelemetryAlphaVersion") implementation("io.opentelemetry:opentelemetry-exporter-otlp:$openTelemetryVersion") implementation("io.opentelemetry:opentelemetry-sdk-extension-autoconfigure:$openTelemetryVersion") - implementation("io.opentelemetry.semconv:opentelemetry-semconv:1.21.0-alpha") + implementation("io.opentelemetry.semconv:opentelemetry-semconv:1.34.0") // Environment variables for this example implementation("io.github.cdimascio:dotenv-java:3.2.0") diff --git a/examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java b/examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java index a6c0ef28..b85ec980 100644 --- a/examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java +++ b/examples/opentelemetry/src/main/java/dev/openfga/sdk/example/opentelemetry/OpenTelemetryExample.java @@ -31,7 +31,7 @@ import io.opentelemetry.sdk.metrics.SdkMeterProvider; import io.opentelemetry.sdk.metrics.export.PeriodicMetricReader; import io.opentelemetry.sdk.resources.Resource; -import io.opentelemetry.semconv.ResourceAttributes; +import io.opentelemetry.semconv.ServiceAttributes; import java.time.Duration; import java.util.HashMap; import java.util.List; @@ -65,11 +65,11 @@ public class OpenTelemetryExample { private static final int OPERATION_LOOP_INTERVAL_SECONDS = 20; private static final int ERROR_RETRY_INTERVAL_SECONDS = 2; private static final int METRICS_EXPORT_INTERVAL_SECONDS = 10; - + // Command Line Arguments private static final String ARG_MODE_AGENT = "--mode=agent"; private static final String ARG_MODE_MANUAL = "--mode=manual"; - + // Environment Variable Names private static final String ENV_OTEL_EXPORTER_OTLP_ENDPOINT = "OTEL_EXPORTER_OTLP_ENDPOINT"; private static final String ENV_OTEL_SERVICE_NAME = "OTEL_SERVICE_NAME"; @@ -81,7 +81,7 @@ public class OpenTelemetryExample { private static final String ENV_FGA_CLIENT_SECRET = "FGA_CLIENT_SECRET"; private static final String ENV_FGA_API_AUDIENCE = "FGA_API_AUDIENCE"; private static final String ENV_FGA_API_TOKEN_ISSUER = "FGA_API_TOKEN_ISSUER"; - + // Default Values private static final String DEFAULT_OTLP_ENDPOINT = "http://localhost:4317"; private static final String DEFAULT_SERVICE_NAME = "openfga-java-sdk-example"; @@ -89,7 +89,7 @@ public class OpenTelemetryExample { private static final String DEFAULT_FGA_API_URL = "http://localhost:8080"; private static final String DEFAULT_API_AUDIENCE = "https://api.fga.example"; private static final String DEFAULT_API_TOKEN_ISSUER = "auth.fga.example"; - + private static Dotenv dotenv; private static OpenFgaClient fgaClient; @@ -120,7 +120,8 @@ public static void main(String[] args) throws Exception { createOpenFgaClient(); System.out.println("\n🔄 Starting continuous operations loop..."); - System.out.println(" Operations will run every " + OPERATION_LOOP_INTERVAL_SECONDS + " seconds until stopped (Ctrl+C)"); + System.out.println( + " Operations will run every " + OPERATION_LOOP_INTERVAL_SECONDS + " seconds until stopped (Ctrl+C)"); System.out.println(" This matches the behavior of other OpenFGA SDK examples"); // Run operations continuously @@ -183,8 +184,8 @@ private static void configureOpenTelemetryManually() { // Create resource with service information Resource resource = Resource.getDefault().toBuilder() - .put(ResourceAttributes.SERVICE_NAME, serviceName) - .put(ResourceAttributes.SERVICE_VERSION, serviceVersion) + .put(ServiceAttributes.SERVICE_NAME, serviceName) + .put(ServiceAttributes.SERVICE_VERSION, serviceVersion) .build(); // Configure OTLP metric exporter @@ -194,7 +195,8 @@ private static void configureOpenTelemetryManually() { // Create meter provider with OTLP exporter SdkMeterProvider meterProvider = SdkMeterProvider.builder() .registerMetricReader(PeriodicMetricReader.builder(metricExporter) - .setInterval(Duration.ofSeconds(METRICS_EXPORT_INTERVAL_SECONDS)) // Export metrics every 10 seconds + .setInterval( + Duration.ofSeconds(METRICS_EXPORT_INTERVAL_SECONDS)) // Export metrics every 10 seconds .build()) .setResource(resource) .build(); @@ -257,7 +259,8 @@ private static void createOpenFgaClient() throws Exception { String modelId = dotenv.get(ENV_FGA_MODEL_ID); if (storeId == null || modelId == null) { - throw new IllegalStateException(ENV_FGA_STORE_ID + " and " + ENV_FGA_MODEL_ID + " must be configured in .env file"); + throw new IllegalStateException( + ENV_FGA_STORE_ID + " and " + ENV_FGA_MODEL_ID + " must be configured in .env file"); } System.out.println(" API URL: " + apiUrl);