Allow using the proxy/tunnel without temporary API keys

[alnr]

Preflight checklist

• I could not find a solution in the existing issues, docs, nor discussions.
• I agree to follow this project's Code of Conduct.
• I have read and am following this repository's Contribution Guidelines.
• I have joined the Ory Community Slack.
• I am signed up to the Ory Security Patch Newsletter.

Ory Network Project

No response

Describe your problem

Follow-up to #359 (comment)

Describe your ideal solution

Workarounds or alternatives

Version

Additional Context

No response

[nanvenomous]

Is this related to the latest changes of ory proxy which now opens a browser? if so I'm also running into this / could at least use a workaround for local development.

[aeneasr]

You now need to be signed into the Ory CLI, or you need a valid Project API Key. In the current release, there is still a bug preventing the proper use of the project api key - we'll fix that.

The project api key is needed to make social sign in work on the local domain!

[nanvenomous]

@aeneasr Thanks for clarifying. For my use case even a flag like --skip-project-api-keys would simplify local development when the proxy is necessary but maybe some of the cloud features are not.

would this make sense in a new issue?

[ChrisSargent]

@aeneasr - we've updated to v1.0.1 but we're still being prompted to go through oauth flow with the api key set. Was this merged supposed to have fixed this?

[aeneasr]

@aeneasr Thanks for clarifying. For my use case even a flag like --skip-project-api-keys would simplify local development when the proxy is necessary but maybe some of the cloud features are not.

would this make sense in a new issue?

Yes please

[aeneasr]

@aeneasr - we've updated to v1.0.1 but we're still being prompted to go through oauth flow with the api key set. Was this merged supposed to have fixed this?

How did you set your project api key?

Also is the project api key from the project you are trying to proxy/tunnel?

[ChrisSargent]

How did you set your project api key?

I created the api key using the Console UI and then I tried several ways of 'setting' it. At first we were running the tunnel command from an execSync command that we set the env field on. That didn't work so I tried setting it directly in front of the command as in the screenshot above.

ORY_PROJECT_API_KEY=ory_pat....... ory tunnel http://localhost:8000 --dev

Also is the project api key from the project you are trying to proxy/tunnel?

Yes. Well, it's not really possible to do otherwise because if you try to set a --project flag, you get an error like "ORY_PROJECT_API_KEY and 'project' flag can't be both set, please remove one of them"

By virtue of that error, it seems the command is definitely finding ORY_PROJECT_API_KEY but for some reason not applying it later.

[aeneasr]

ORY_PROJECT_API_KEY=ory_pat....... ory tunnel http://localhost:8000 --dev -q

Will do the trick

[ChrisSargent]

thanks!