Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

iModel integration #12289

Draft
wants to merge 8 commits into
base: main
Choose a base branch
from
Draft

iModel integration #12289

wants to merge 8 commits into from

Conversation

jjspace
Copy link
Contributor

@jjspace jjspace commented Nov 5, 2024

Description

Beginning steps for the iTwin/iModel integration utilizing the mesh-export API

Opening as a draft for discussion, more details later. The api is a little messy and function names/encapsulation is planned to change. I wasn't sure if we wanted to expose more functions to interact with the iTwin API or just have one function to load export data. It's sort of a separation of concerns thing about what should belong in CesiumJS vs be implemented on the "app side" around CesiumJS.

Assorted tasklist

  • Verify how auth should work.
    • Does one top level defaultAccessToken even make sense if different routes need different scopes?
    • is there a way to get a long term token without a separate login?
  • Do we even want to keep the checking for an existing Cesium export? or is that on the APP to implement?
  • How do the functions I've written handle changesets? When it there's a new one? When one's specified specifically? etc.

Issue number and link

no issue number

Testing plan

  • Running the test sandcastle
    • Go to the start export route and click "Try it now"
    • Set the auth to Bentley and copy that token into the new sandcastle iTwin Demo.html. These keys only last 1 hour so you may have to refresh it
    • Load the new sandcastle and make sure it loads. note this may take up to a min of 20ish seconds, I usually see around 7 sec. check the console for actual errors

Author checklist

  • I have submitted a Contributor License Agreement
  • I have added my name to CONTRIBUTORS.md
  • I have updated CHANGES.md with a short summary of my change
  • I have added or updated unit tests to ensure consistent code coverage
  • I have updated the inline documentation, and included code examples where relevant
  • I have performed a self-review of my code

@jjspace jjspace requested a review from ggetz November 5, 2024 16:12
Copy link

github-actions bot commented Nov 5, 2024

Thank you for the pull request, @jjspace!

✅ We can confirm we have a CLA on file for you.

@jjspace
Copy link
Contributor Author

jjspace commented Nov 5, 2024

@ggetz just pushed an update to restructure the api a bit. I moved the itwin API functions under the ITwin namespace. I also split the tileset functions into 2 functions. One loads a tileset from only the export id and the other takes a model id + changeset combo and tries to find and load a CESIUM export if possible.

Looking at the API more it seems exports can be created for the same "model id + changeset" with different export parameters which could mean multiple CESIUM type exports for the same combo. I think this is probably less likely and when it's needed then users can use the load function with the export id directly and manage their own handling of the list.

@pjcozzi
Copy link
Contributor

pjcozzi commented Nov 5, 2024

@aruniverse would you or another iTwin colleague be able to take a look at this?

@aruniverse
Copy link

@aruniverse would you or another iTwin colleague be able to take a look at this?

Thanks for sharing, this is exciting to see! I'll take a pass over it.

fyi @danieliborra

Copy link

@aruniverse aruniverse left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Did a quick first pass, Josh this looks pretty good so far. I will look at trying to run this locally tomorrow.

Added some minor nit comments and notes. I've tagged some of the other leads from iTwin Platform working on the services you are using here for visibility.

"use strict";
//Sandcastle_Begin
// must be created for the Start export route if you want to create new exports
// Needs to have the mesh-export:modify scope not just mesh-export:read

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We recently consolidated all scopes into a single one, "itwin-platform". That should be the recommended scope to use. Please see https://developer.bentley.com/itwin-platform-scope-introduction/
The "try it out" feature in the developer portal is just still using granular scopes.

Suggested change
// Needs to have the mesh-export:modify scope not just mesh-export:read
// Needs to have the `itwin-platform` scope

fyi @dsmailys

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I saw the pages about the itwin-platform but that's not what's documented on the mesh-export routes. Those all still state they require the more granular scopes. If this is no longer true then the docs should be updated to reflect that.

The "try it out" feature in the developer portal is just still using granular scopes.

This is the primary way I'm generating these tokens for now as I have not found a way to generate long living API keys/tokens. That's why I called out the scope to make sure to generate it on the correct "try it out" page.
If every route should be using the general itwin-platform scope then the "Try it out" should probably switch to always generating with that scope instead of the granular ones.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey, thanks for noticing and reporting this. I've let the leadDeveloper of mesh-export know about this inconsistency and will hopefully get resolved. itwin-platform scope will still work/be accepted for mesh-export.

Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The "try it out" feature in the developer portal is just still using granular scopes.

Reported this back to the developer portal team. Thanks for bringing this up.

packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
/**
* Default settings for accessing the iTwin platform.
*
* Keys can be created using the iModels share routes {@link https://developer.bentley.com/apis/imodels-v2/operations/create-imodel-share/}

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please note, this API has the following note:

Important : Share operations are in closed preview mode currently. Hence only selected applications can utilize the Share API.

fyi @robertas-kerpys, we will need to work with Cesium team here

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think we plan to use the model share api here at all, I don't think it gives us what we need. This was an early comment when I thought we would be.

We definitely will need a good strategy for auth in general though. it's one of the biggest open questions we have right now. I think that discussion should live outside this specific thread.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For demo purposes, we're working right now on adding shared keys to the mesh export service. I expect to have it deployed in the next 4 weeks, if all goes as planned.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @danieliborra! We're targeting these changes for the end of November of so that we can (ideally) ship them with the December 1 CesiumJS release. Given that, what is the recommended approach?

packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved

const headers = {
Authorization: ITwin.defaultAccessToken,
Accept: "application/vnd.bentley.itwin-platform.v1+json",
Copy link

@aruniverse aruniverse Nov 5, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is fine for this specific use case where youre using just a single API (mesh-export), but might prove to be an issue when you are mixing APIs(iTwins, iModels, etc)
We use request headers to denote which verison of an API to use. So far, most APIs are still on v1, but there are some for example the iModels APIs which are on v2, and the accept header would need to be application/vnd.bentley.itwin-platform.v2+json

Please see API Version Policy

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I was going off the sample code provided to us and the documentation which states for every route in the mesh export API that:

Setting to application/vnd.bentley.itwin-platform.v1+json is recommended

If the docs are wrong then they should be updated. On top of that I'm currently setting this per request so different routes could definitely use different values if needed for different versions as you say. As a consumer of the API I would fully expect all the routes on the same API to still work with each other if versioning is done this way.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes this will work, the entire mesh-export service apis are still on v1 so the accept header here is right.

My apologies, I jumped the gun when I had initially commented this thinking you were going to use multiple api routes in a single function.

packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
packages/engine/Source/Scene/createIModel3DTileset.js Outdated Show resolved Hide resolved
Apps/Sandcastle/gallery/iTwin Demo.html Outdated Show resolved Hide resolved
@pjcozzi
Copy link
Contributor

pjcozzi commented Nov 6, 2024

@aruniverse would you or another iTwin colleague be able to take a look at this?

Thanks for sharing, this is exciting to see! I'll take a pass over it.

Appreciate the fast turn, thanks @aruniverse.

@jjspace
Copy link
Contributor Author

jjspace commented Nov 6, 2024

Added some minor nit comments and notes.

@aruniverse thank you for the thorough comments so quick! This is still a Draft PR and very much a work in progress and nothing is final. I agree with most of your comments but it was not ready for such scrutiny 😅 I opened the PR to work through the general process and API structure that we'd need. A lot of the code is still very much thrown together to prove out the concept

Copy link

@danieliborra danieliborra left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks promising.
We're now modifying the API, so we will keep you updated of any change in the API.

packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
/**
* Default settings for accessing the iTwin platform.
*
* Keys can be created using the iModels share routes {@link https://developer.bentley.com/apis/imodels-v2/operations/create-imodel-share/}

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For demo purposes, we're working right now on adding shared keys to the mesh export service. I expect to have it deployed in the next 4 weeks, if all goes as planned.

// obtain export for specified export id
const url = `${ITwin.apiEndpoint}mesh-export/${exportId}`;

// TODO: this request is _really_ slow, like 7 whole second alone for me

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That is because get-export is not very used and so we haven't optimized it yet. All apps use get-exports, and we have kept get-export to avoid breaking changes.
This quarter we will clean-up the API.

packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
* @param {string} iModelId
* @param {string} changesetId
*/
ITwin.createExportForModelId = async function (iModelId, changesetId) {

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Today, we're auto-generating tiles for all iModels but for the exportType=IMODEL.
We plan to also auto-generate "3DTILES". Development is on-going, we expect to have it end of this quarter.
We also plan to deprecate this endpoint when the auto-generation is in place.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@danieliborra We plan on marking all of these new APIs as "experimental" so we have some more flexibility with breaking changes. So we can remove this function when recommended.

packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
packages/engine/Source/Scene/createIModel3DTileset.js Outdated Show resolved Hide resolved
@jjspace
Copy link
Contributor Author

jjspace commented Nov 11, 2024

Given that the iTwin platform currently has no way to create long running API keys I spent some time looking into the oauth workflows. The main goal right now is to be able to create one or more sandcastles that can demonstrate using iModels in CesiumJS without requiring a login from the users. @ggetz had the idea to use the ion servers for oauth and return a token that can be used in Sandcastle.

My latest commit includes a demo server in itwin-oauth-demo to act in place of ion to demonstrate using the iTwin Service App and iTwin Web App auth processes. Run with cd itwin-oauth-demo && node server.js. Ask me for the config if you wanna use my app keys.
The Web App process requires the user to log in but then gives access to all of that user's iTwins/iModels. The Service App process does not require a login but the "service app user" needs to be added to a specific iTwin and given permissions to do things with that iTwin/iModels. The Projects page can be used to view iTwin projects and manage users/roles.

The only way I found to add the app user was through the Access Control API which needs you to create a role first for the role id. I found the sandcastle was able to load data using a service app token with these permissions on it's role:
2024-11-11_16-48
The roles don't perfectly match with the previous API scopes and there's none that describe the model exports so I'm not 100% sure which role permissions we'll need but this was just to prove out the concept and it is working.

The demo sandcastle has been updated to use the new local auth server. If you want to try the Web App flow that requires a login just uncomment/comment the code near the top and reload the sandcastle then log in. You will need access to the iModel you're trying to load.

Copy link
Contributor

@ggetz ggetz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @jjspace!

I left a few comments for the things that jumped out to me.

However, I understand that some of this is in flux. I believe at this point we have enough info to settle on the public API. Please do a pass on that and the docs, then ping me when ready for another a review pass.

Comment on lines +33 to +34
const serviceResponse = await fetch("http://localhost:3000/service");
const { token } = await serviceResponse.json();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thinking about user workflow, should this be encapsulated in ITwin.requestAccessToken or a similar function?

That way, these first few code block is simplified to:

Cesium.ITwin.defaultAccessToken = await Cesium.ITwin.requestAccessToken();

and we could make small changes if needed without needing user code to change.

Copy link
Contributor Author

@jjspace jjspace Nov 15, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I could add a function like that but I don't think users should ever be running this themselves. They should do their own oauth and just set the token. This request is just for the sandcastle examples and will only provide access to the sample itwins that we add to the service account.

Apps/Sandcastle/gallery/iTwin Demo.html Outdated Show resolved Hide resolved
packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
packages/engine/Source/Core/ITwin.js Outdated Show resolved Hide resolved
packages/engine/Source/Scene/createIModel3DTileset.js Outdated Show resolved Hide resolved
packages/engine/Source/Scene/createIModel3DTileset.js Outdated Show resolved Hide resolved
@jjspace
Copy link
Contributor Author

jjspace commented Nov 15, 2024

@ggetz thanks for the comments, this should be updated in response to all of them. I'm still looking into the reality data functionality and hope to have some functions for that added early next week.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants