app_dev/testing/localnet

[giscus[bot]]

app_dev/testing/localnet

https://dev.network.canton.global/app_dev/testing/localnet.html

[pasindutennage-da]

[minor change] the path should be corrected to

export LOCALNET_DIR=$PWD/splice-node/docker-compose/localnet

[hrischuk-da]

Yes, that update was made last week and the change is propagating through the networks.

[wallacekelly-da]

If you need to create your own JWT tokens against LocalNet, it is helpful to know that unsafe is the default secret. That can be seen here, for example:

canton.participants.app-user {
  ledger-api{
    auth-services = [{
      type = unsafe-jwt-hmac-256
      target-audience = ${AUTH_APP_USER_AUDIENCE}
      secret = "unsafe"
    }]

[wallacekelly-da]

Here is a bash script to generate such tokens:

#!/bin/bash
SUBJECT="${JWT_SUBJECT:-app-user}"
SECRET="${JWT_SECRET:-unsafe}"

base64_url_encode() {
  openssl base64 -e -A | tr -d '=' | tr '/+' '_-'
}

HEADER=$(echo -n '{"alg":"HS256","typ":"JWT"}' \
  | base64_url_encode)

PAYLOAD=$(jq -n \
  --arg sub "${SUBJECT}" \
  --arg aud "https://canton.network.global" \
  '{ $sub, $aud }' | base64_url_encode)

SIGNATURE=$(echo -n "${HEADER}.${PAYLOAD}" \
  | openssl dgst -sha256 -hmac "${SECRET}" -binary \
  | base64_url_encode)

echo "${HEADER}.${PAYLOAD}.${SIGNATURE}"