Identity Hub EDC_IH_API_SUPERUSER_KEY env not working

[MartinFerenec]

Does anyone know how to authenticate Identity Hub - Identity API with super-user?

I have followed:

• https://github.com/eclipse-edc/IdentityHub/blob/main/docs/developer/architecture/identity-api.security.md
• feat: add API key override for Super-User #256

This is my docker-compose.yml located in the root directory of repo:

version: '3.9'

services:
  edc-identity-hub:
    build:
      context: ./launcher
    image: identity-hub:latest
    container_name: edc-identity-hub
    environment:
      - WEB_HTTP_PRESENTATION_PORT=10001
      - WEB_HTTP_PRESENTATION_PATH=/api/presentation/
      - WEB_HTTP_PATH=/api
      - WEB_HTTP_PORT=8181
      - WEB_HTTP_IDENTITY_PORT=8182
      - WEB_HTTP_IDENTITY_PATH=/api/identity
      - EDC_IH_API_SUPERUSER_KEY=c3VwZXItdXNlcg==.c3VwZXItc2VjcmV0LWtleQo=
    ports:
      - "8181:8181"
      - "8182:8182"
      - "10001:10001"
    restart: no
    networks:
      - eclipse-edc

networks:
  eclipse-edc:

And the EDC_IH_API_SUPERUSER_KEY env is what I use in header x-api-key:

[paullatzelsperger]

Be advised that your scenario (docker-compose, and apparently a custom postman collection) is not supported here.
That said, if you are using a custom runtime as well, be sure to include the :extensions:superuser-seed extension, and that a log line like the following is emitted:

"Created user 'super-user'. Please take note of the API Key: c3VwZXItdXNlcg==.c3VwZXItc2VjcmV0LWtleQo="

and that no other warnings, errors etc. are present.

[MartinFerenec]

Thank you, I will try including the extension.

Although I would like to mention that this docker-compose is identical to this https://github.com/eclipse-edc/IdentityHub/tree/main?tab=readme-ov-file#create-the-docker-image , it just makes it a bit quicker to spin up and down.

The Postman collection is based on the Swagger doc provided https://eclipse-edc.github.io/IdentityHub/openapi/identity-api/#/ and the response indicates that x-api-key is registered and processed properly, so it is highly unlikely that Postman is the issue.

[paullatzelsperger]

all good, and I agree, just know that technically you are off the supported path here.

[MartinFerenec]

I have tried adding the extension you recommended like this in the ./launcher/build.gradle.kts:

This is the command I use to build the .jar file: ./gradlew :launcher:shadowJar

I get this error, since the extension is missing:

I am using a non-modified version of IdentityHub repo. Branch main. Am I missing something or is there a bug? I also tried running the container with the docker run command from README and I get same results.

EDIT 2: This issue persists even if I use the command, thats available in documentation.

java -Dweb.http.presentation.port=10001 -Dweb.http.presentation.path="/api/presentation" -Dweb.http.port=8181 -Dweb.http.path="/api" -Dweb.http.identity.port=8182 -Dweb.http.identity.path="/api/identity" -Dedc.ih.api.superuser.key="c3VwZXItdXNlcg==.c3VwZXItc2VjcmV0LWtleQo=" -jar launcher/build/libs/identity-hub.jar