revocation-grpc-plugin-server-go

flowchart LR
   subgraph AccelByte Gaming Services
   CL[gRPC Client]
   end
   subgraph Extend Override App
   SV["gRPC Server"]
   end
   CL --- SV

Loading

AccelByte Gaming Services (AGS) features can be customized using Extend Override apps. An Extend Override app is basically a gRPC server which contains one or more custom functions which can be called by AGS instead of the default functions.

Overview

This repository provides a project template to create an Extend Override app for revocation function written in Go. It includes an example of how the custom functions can be implemented. It also includes the essential gRPC server authentication and authorization to ensure security. Additionally, it comes with built-in instrumentation for observability, ensuring that metrics, traces, and logs are available upon deployment.

You can clone this repository to begin developing your own Extend Override app for revocation function. Simply modify this project by implementing your own logic for the custom functions.

Prerequisites

Windows 11 WSL2 or Linux Ubuntu 22.04 or macOS 14+ with the following tools installed.

a. Bash
- On Windows WSL2 or Linux Ubuntu:
```
bash --version

GNU bash, version 5.1.16(1)-release (x86_64-pc-linux-gnu)
...
```
- On macOS:
```
bash --version

GNU bash, version 3.2.57(1)-release (arm64-apple-darwin23)
...
```
b. Make
- On Windows WSL2 or Linux Ubuntu:
  
  To install from the Ubuntu repository, run sudo apt update && sudo apt install make.
```
make --version

GNU Make 4.3
...
```
- On macOS:
```
make --version

GNU Make 3.81
...
```
c. Docker (Docker Desktop 4.30+/Docker Engine v23.0+)
- On Linux Ubuntu:
  1. To install from the Ubuntu repository, run sudo apt update && sudo apt install docker.io docker-buildx docker-compose-v2.
  2. Add your user to the docker group: sudo usermod -aG docker $USER.
  3. Log out and log back in to allow the changes to take effect.
- On Windows or macOS:
  
  Follow Docker's documentation on installing the Docker Desktop on Windows or macOS.
```
docker version

...
Server: Docker Desktop
   Engine:
   Version:          24.0.5
...
```
d. Go v1.19
- Follow Go's installation guide.
```
go version

go version go1.19.0 ...
```
e. Postman
- Use the available binary from Postman.
f. ngrok
- Follow ngrok's installation guide.
g. extend-helper-cli
- Use the available binary from extend-helper-cli.
❗ In macOS, you may use Homebrew to easily install some of the tools above.
Access to AccelByte Gaming Services environment.

a. Base URL
- For Shared Cloud tier e.g. https://spaceshooter.prod.gamingservices.accelbyte.io
- For Private Cloud tier e.g. https://dev.accelbyte.io
b. Create a Game Namespace if you don't have one yet. Keep the Namespace ID.

c. Create an OAuth Client with confidential client type. Keep the Client ID and Client Secret.

Setup

To be able to run this app, you will need to follow these setup steps.

Create a docker compose .env file by copying the content of .env.template file.

⚠️ The host OS environment variables have higher precedence compared to .env file variables: If the variables in .env file do not seem to take effect properly, check if there are host OS environment variables with the same name. See documentation about docker compose environment variables precedence for more details.

Fill in the required environment variables in .env file as shown below.

AB_BASE_URL=https://test.accelbyte.io     # Base URL of AccelByte Gaming Services environment
AB_CLIENT_ID='xxxxxxxxxx'                 # Client ID from the Prerequisites section
AB_CLIENT_SECRET='xxxxxxxxxx'             # Client Secret from the Prerequisites section
AB_NAMESPACE='xxxxxxxxxx'                 # Namespace ID from the Prerequisites section
PLUGIN_GRPC_SERVER_AUTH_ENABLED=true      # Enable or disable access token validation

❗ In this app, PLUGIN_GRPC_SERVER_AUTH_ENABLED is true by default: If it is set to false, the gRPC server can be invoked without an AGS access token. This option is provided for development purpose only. It is recommended to enable gRPC server access token validation in production environment.

Building

To build this app, use the following command.

make build

Running

To (build and) run this app in a container, use the following command.

docker compose up --build

Testing

Test in Local Development Environment

⚠️ To perform the following, make sure PLUGIN_GRPC_SERVER_AUTH_ENABLED is set to false: Otherwise, the gRPC request will be rejected by the gRPC server.

This app can be tested locally using postman.

Run this app by using the command below.
```
docker compose up --build
```
Open postman, create a new gRPC request, and enter localhost:6565 as server URL.

⚠️ If you are running grpc-plugin-dependencies stack alongside this project as mentioned in Test Observability: Use localhost:10000 instead of localhost:6565. This way, the gRPC server will be called via Envoy service within grpc-plugin-dependencies stack instead of directly.

In postman, continue by selecting Revocation/Revoke method and invoke it with the sample message below.

{
    "revokeEntryType": "CURRENCY",
    "namespace": "test",
    "userId": "4423f033c38a40b9afdc8844e13647b7",
    "quantity": 1,
    "currency": {
        "namespace": "test",
        "currencyCode": "VCA",
        "balanceOrigin": "SYSTEM"
    }
}

If successful, you will see receive responses like the following.

{
   "status": "SUCCESS",
   "customRevocation": [
      {
         "key": "namespace",
         "value": "test"
      },
      {
         "key": "userId",
         "value": "4423f033c38a40b9afdc8844e13647b7"
      },
      {
         "key": "quantity",
         "value": "1"
      },
      {
         "key": "currencyNamespace",
         "value": "test"
      },
      {
         "key": "currencyCode",
         "value": "VCA"
      },
      {
         "key": "balanceOrigin",
         "value": "SYSTEM"
      }
   ]
}

Test with AccelByte Gaming Services

For testing this app which is running locally with AGS, the gRPC server needs to be exposed to the internet. To do this without requiring public IP, we can use something like ngrok.

Run this app by using command below.
```
docker compose up --build
```
Sign-in/sign-up to ngrok and get your auth token in ngrok dashboard.
In this app root directory, run the following helper command to expose gRPC server port in local development environment to the internet. Take a note of the ngrok forwarding URL e.g. http://0.tcp.ap.ngrok.io:xxxxx.
```
make ngrok NGROK_AUTHTOKEN=xxxxxxxxxxx
```
⚠️ If you are running grpc-plugin-dependencies stack alongside this app as mentioned in Test Observability: Run the above command in grpc-plugin-dependencies directory instead of this app directory. This way, the gRPC server will be called via Envoy service within grpc-plugin-dependencies stack instead of directly.
Create an OAuth Client with confidential client type with the following permissions. Keep the Client ID and Client Secret.
- For AGS Private Cloud customers:
  - ADMIN:NAMESPACE:{namespace}:PLUGIN:REVOCATION [UPDATE,DELETE]
  - ADMIN:NAMESPACE:{namespace}:REVOCATION [UPDATE]
  - ADMIN:NAMESPACE:{namespace}:USER:*:ORDER [CREATE]
  - ADMIN:NAMESPACE:{namespace}:USER:*:REVOCATION [UPDATE]
  - ADMIN:NAMESPACE:{namespace}:STORE [CREATE,READ,UPDATE,DELETE]
  - ADMIN:NAMESPACE:{namespace}:CATEGORY [CREATE]
  - ADMIN:NAMESPACE:{namespace}:CURRENCY [CREATE,READ,DELETE]
  - ADMIN:NAMESPACE:{namespace}:ITEM [CREATE,READ,DELETE]
  - ADMIN:NAMESPACE:{namespace}:USER:{userId}:WALLET [UPDATE]
  - NAMESPACE:{namespace}:WALLET [READ]
- For AGS Shared Cloud customers:
  - Platform Store -> Revocation (Update, Delete)
  - Platform Store -> Service Plugin Config (Read, Update, Delete)
  - Platform Store -> Store (Create, Read, Update, Delete)
  - Platform Store -> Order (Create)
  - Platform Store -> Category (Create)
  - Platform Store -> Currency (Create, Read, Delete)
  - Platform Store -> Item (Create, Read, Delete)
  - Platform Store -> Wallet (Read, Update)
⚠️ Oauth Client created in this step is different from the one from Prerequisites section: It is required by CLI demo app here in the next step to register the gRPC Server URL.

In demo/cli folder, create an .env file by copying the content of .env.template file and set the required environment variables as shown below.

AB_BASE_URL='https://test.accelbyte.io'
AB_CLIENT_ID='xxxxxxxxxx'       # Use Client ID from the previous step
AB_CLIENT_SECRET='xxxxxxxxxx'   # Use Client secret from the previous step
AB_NAMESPACE='xxxxxxxxxx'       # Use your Namespace ID
GRPC_SERVER_URL='0.tcp.ap.ngrok.io:xxxxx'   # Use your ngrok forwarding URL without `https://`

Run the Makefile commands to execute the CLI demo app.

cd demo/cli
make run ENV_FILE_PATH=.env

⚠️ Ngrok free plan has some limitations: You may want to use paid plan if the traffic is high.

Test Observability

To be able to see the how the observability works in this app locally, there are few things that need be setup before performing tests.

Uncomment loki logging driver in docker-compose.yaml
```
 # logging:
 #   driver: loki
 #   options:
 #     loki-url: http://host.docker.internal:3100/loki/api/v1/push
 #     mode: non-blocking
 #     max-buffer-size: 4m
 #     loki-retries: "3"
```
⚠️ Make sure to install docker loki plugin beforehand: Otherwise, this project will not be able to run. This is required so that container logs can flow to the loki service within grpc-plugin-dependencies stack. Use this command to install docker loki plugin: docker plugin install grafana/loki-docker-driver:latest --alias loki --grant-all-permissions.
Clone and run grpc-plugin-dependencies stack alongside this project. After this, Grafana will be accessible at http://localhost:3000.
```
git clone https://github.com/AccelByte/grpc-plugin-dependencies.git
cd grpc-plugin-dependencies
docker-compose up
```
❗ More information about grpc-plugin-dependencies is available here.
Perform testing. For example, by following Test in Local Development Environment or Test with AccelByte Gaming Services.

Deploying

After done testing, you may want to deploy this app to AccelByte Gaming Services.

Create a new Extend Override App on Admin Portal. Keep the Repository URI.
Download and setup extend-helper-cli (only if it has not been done previously).
Perform docker login with extend-helper-cli using the following command.
```
extend-helper-cli dockerlogin --namespace <my-game> --app <my-app> --login
```
❗ For your convenience, the above extend-helper-cli command can also be copied from Repository Authentication Command under the corresponding app detail page.
Build and push this project docker image to AccelByte ECR using the following command.
```
extend-helper-cli image-upload --work-dir <my-project-dir> --namespace <my-game> --app <my-app> --image-tag v0.0.1
```
⚠️ Make sure to perform docker login (step 3) before executing the above command.
Open Admin Portal, go to Extend -> Overridable Features. And then select the extend app.
To deploy selected image tag, click Image Version History and select desired image tag to be deployed.
Click Deploy Image, confirm the deployment and go back to App Detail by clicking Cancel.
Wait until app status is running.

Next Step

Proceed to create your own Extend Override app for revocation function by modifying this project. See here for more details.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

README.md

README.md

revocation-grpc-plugin-server-go

Overview

Prerequisites

Setup

Building

Running

Testing

Test in Local Development Environment

Test with AccelByte Gaming Services

Test Observability

Deploying

Next Step

Files

README.md

Latest commit

History

README.md

File metadata and controls

revocation-grpc-plugin-server-go

Overview

Prerequisites

Setup

Building

Running

Testing

Test in Local Development Environment

Test with AccelByte Gaming Services

Test Observability

Deploying

Next Step