Stuck with providing valid client credentials #175

bxn-ts · 2021-08-06T13:11:24Z

Hi,

I'm playing around with your provider for commercetools on a playground. I created a test project in Commercetools and also an API user (scope: manage_project).

While I'm able to authenticate via curl, Terraform is throwing fits when trying to use the same credentials, scopes, URLs etc. in the provider block.

curl:

curl -s https://auth.europe-west1.gcp.commercetools.com/oauth/token -X POST --basic --user "foo:bar" -d "grant_type=client_credentials&scope=manage_project:playground"

{
  "access_token": "barfoo",
  "token_type": "Bearer",
  "expires_in": 172800,
  "scope": "manage_project:playground"
}

In Terraform I'm using the provider block and a basic tax category:

provider "commercetools" {
  client_id     = "foo"
  client_secret = "bar"
  project_key   = "playground"
  scopes        = "manage_project:playground"
  token_url     = "https://auth.europe-west1.gcp.commercetools.com"
  api_url       = "https://api.europe-west1.gcp.commercetools.com"
}

resource "commercetools_tax_category" "standard" {
  name = "Standard tax category"
}

Unfortunately Terraform is not creating the resource because either it's not transmitting the credentials correctly or CT is not accepting them.

$ terraform apply

  # commercetools_tax_category.standard will be created
  + resource "commercetools_tax_category" "standard" {
      + id      = (known after apply)
      + name    = "Standard tax category"
      + version = (known after apply)
    }

Plan: 1 to add, 0 to change, 0 to destroy.

│ Error: Please provide valid client credentials using HTTP Basic Authentication.
│
│   with commercetools_tax_category.standard,
│   on main.tf line 30, in resource "commercetools_tax_category" "standard":
│   30: resource "commercetools_tax_category" "standard" {

I also tried to create the same resource without using the provider block and instead set environment variables like CTP_PROJECT_KEY etc. That works fine.

I'm using

terraform version
Terraform v0.15.1
on darwin_amd64
+ provider registry.terraform.io/labd/commercetools v0.30.0

The text was updated successfully, but these errors were encountered:

teperm · 2021-09-14T18:41:32Z

Also having this same issue.

Applying this configuration:

terraform {
  required_providers {
    commercetools = {
      source = "labd/commercetools"
    }
  }
}

provider "commercetools" {
  client_id     = "id"
  client_secret = "secret"
  project_key   = "my-project"
  scopes        = "manage_project:my-project"
  api_url       = "https://api.us-central1.gcp.commercetools.com"
  token_url     = "https://auth.us-central1.gcp.commercetools.com"
}

resource "commercetools_product_type" "apparel" {
  name        = "Apparel"
  description = "The generic product type."
  key         = "apparel"
}

Results in this error:

commercetools_product_type.apparel: Creating...
╷
│ Error: Please provide valid client credentials using HTTP Basic Authentication.
│
│   with commercetools_product_type.apparel,
│   on main.tf line 18, in resource "commercetools_product_type" "apparel":
│   18: resource "commercetools_product_type" "apparel" {
│
╵

Omitting the provider block and using environment variables results in the same error.

Terraform version:

Terraform v1.0.6
on windows_amd64
+ provider registry.terraform.io/labd/commercetools v0.30.0

mvantellingen · 2021-09-15T10:58:16Z

We need to look into this. Do you see anything related when you run TF_LOG=1 CTP_DEBUG=1 terraform apply. That command should log all requests/responses cycles to the terminal

teperm · 2021-09-15T13:13:26Z

Logs say "encountered an error during creation".

2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: ---[ REQUEST ]--------------------------------------------------------
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: POST /develop/product-types HTTP/1.1
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: Host: api.us-central1.gcp.commercetools.com
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: User-Agent: commercetools-go-sdk/0.1.0 Go/go1.15.14 (windows; amd64) terraform-provider-commercetools (+https://labdigital.nl; [email protected])
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: Content-Length: 64
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: Accept: application/json; charset=utf-8
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: Content-Type: application/json; charset=utf-8
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: Accept-Encoding: gzip
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: 
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: {
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: 	"name": "Terraform Test",
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: 	"description": "Terraform test."
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: }
2021-09-15T07:56:19.629-0500 [DEBUG] provider.terraform-provider-commercetools_v0.30.0.exe: ----------------------------------------------------------------------
2021-09-15T07:56:19.879-0500 [TRACE] maybeTainted: commercetools_product_type.terraform-test encountered an error during creation, so it is now marked as tainted
2021-09-15T07:56:19.880-0500 [TRACE] NodeAbstractResouceInstance.writeResourceInstanceState to workingState for commercetools_product_type.terraform-test
2021-09-15T07:56:19.880-0500 [TRACE] NodeAbstractResouceInstance.writeResourceInstanceState: removing state object for commercetools_product_type.terraform-test
2021-09-15T07:56:19.880-0500 [TRACE] evalApplyProvisioners: commercetools_product_type.terraform-test is tainted, so skipping provisioning
2021-09-15T07:56:19.880-0500 [TRACE] maybeTainted: commercetools_product_type.terraform-test was already tainted, so nothing to do
2021-09-15T07:56:19.880-0500 [TRACE] NodeAbstractResouceInstance.writeResourceInstanceState to workingState for commercetools_product_type.terraform-test
2021-09-15T07:56:19.880-0500 [TRACE] NodeAbstractResouceInstance.writeResourceInstanceState: removing state object for commercetools_product_type.terraform-test
2021-09-15T07:56:19.880-0500 [TRACE] statemgr.Filesystem: not making a backup, because the new snapshot is identical to the old
2021-09-15T07:56:19.881-0500 [TRACE] statemgr.Filesystem: no state changes since last snapshot

The full output: out.txt

One thing that seemed strange was the "apparel" product type in my configuration above already exists in my CT project, yet terraform said it was planning to create the product type and not modify it. I'm new to terraform, so I'm not sure if this is expected behavior or not; regardless, I changed the resource to a type that doesn't exist and got the same error.

Edit: Not sure if this is logged or not, but I did not see a request to the CT token endpoint.

yousefcisco · 2022-03-02T10:37:41Z

We also had this issue and found the solution was to have multiple scopes defined. We tried an empty string and "manage_project:my-project" but neither worked, here's the working provider we're using now:

provider "commercetools" {
  client_id     = var.commercetools_client_id
  client_secret = var.commercetools_client_secret
  project_key   = var.commercetools_project_key
  scopes = join(" ",
    formatlist(
      "%s:${var.commercetools_project_key}",
      [
        "manage_project_settings",
        "manage_states",
        "manage_subscriptions",
        "manage_types",
        "manage_extensions",
        "manage_api_clients",
        "manage_tax_categories",
        "manage_shipping_methods"
      ]
    )
  )
  api_url   = "https://api.europe-west1.gcp.commercetools.com"
  token_url = "https://auth.europe-west1.gcp.commercetools.com"
}

mvantellingen · 2022-08-22T08:57:08Z

I can't reproduce this. Using the admin token works perfect here. Did you make sure that the scopes you define here match the scopes you defined when creating the token in the commercetools merchant center? The only explanation for me is that there is a mismatch there. Otherwise I think you need to get commercetools support involved.

motizukilucas · 2024-12-12T14:19:39Z

Managed to get a working setup with following terraform, by appending authentication in token_url example in this other issue:

#466 (comment)

mvantellingen added bug Something isn't working feedback needed labels Feb 19, 2022

mvantellingen removed the feedback needed label Aug 22, 2022

pimvernooij closed this as not planned Won't fix, can't repro, duplicate, stale Nov 28, 2022

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Stuck with providing valid client credentials #175

Stuck with providing valid client credentials #175

bxn-ts commented Aug 6, 2021

teperm commented Sep 14, 2021

mvantellingen commented Sep 15, 2021

teperm commented Sep 15, 2021 •

edited

Loading

yousefcisco commented Mar 2, 2022

mvantellingen commented Aug 22, 2022

motizukilucas commented Dec 12, 2024

Stuck with providing valid client credentials #175

Stuck with providing valid client credentials #175

Comments

bxn-ts commented Aug 6, 2021

teperm commented Sep 14, 2021

mvantellingen commented Sep 15, 2021

teperm commented Sep 15, 2021 • edited Loading

yousefcisco commented Mar 2, 2022

mvantellingen commented Aug 22, 2022

motizukilucas commented Dec 12, 2024

teperm commented Sep 15, 2021 •

edited

Loading