flowchart LR
CL[Game Client]
subgraph "Extend Service Ext. App"
GW["gRPC Gateway"]
SV["gRPC Server"]
end
CL --- GW
GW --- SV
AccelByte Gaming Services
(AGS) capabilities can be enhanced using
Extend Service Extension
apps. An Extend Service Extension
app is a RESTful
web service created using a stack that includes a gRPC Server
and the
gRPC Gateway.
This repository provides a project template for an Extend Service Extension
app written in Go
. It includes an example of a custom guild service which has
two endpoints to create and get guild progress data. Additionally, it comes
with built-in instrumentation for observability, ensuring that metrics, traces,
and logs are available upon deployment.
You can clone this repository to begin developing your own
Extend Service Extension
app. Simply modify this project by defining your
endpoints in service.proto
file and implementing the handlers for those
endpoints.
Customizing your Extend Service Extension app involves modifying the service.proto
and myService.go
files. The app initializes key components, such as the gRPC server, in main.go
. When a request is made to the RESTful endpoint, the gRPC gateway handles it and forwards it to the corresponding gRPC method. Before myService.go
executes any custom logic based on the request, the authServerInterceptor.go
first verifies that the request has the necessary access token and authorization. No other files need to be modified unless you require further customization.
.
├── main.go # App starts here
├── pkg
│ ├── common
│ │ ├── authServerInterceptor.go # gRPC server interceptor for access token authentication and authorization
│ │ ├── ...
│ ├── pb # gRPC stubs generated from gRPC server protobuf
│ │ └── ...
│ ├── proto
│ │ ├── service.proto # gRPC server protobuf with additional options for exposing as RESTful web service
│ │ └── ...
│ ├── service
│ │ ├── myService.go # gRPC server implementation containing the custom logic
│ │ └── ...
│ └── ...
└── ...
-
Windows 11 WSL2 or Linux Ubuntu 22.04 or macOS 14+ with the following tools installed:
a. Bash
-
On Windows WSL2 or Linux Ubuntu:
bash --version GNU bash, version 5.1.16(1)-release (x86_64-pc-linux-gnu) ...
-
On macOS:
bash --version GNU bash, version 3.2.57(1)-release (arm64-apple-darwin23) ...
b. Make
-
On Windows WSL2 or Linux Ubuntu:
To install from the Ubuntu repository, run
sudo apt update && sudo apt install make
.make --version GNU Make 4.3 ...
-
On macOS:
make --version GNU Make 3.81 ...
c. Docker (Docker Desktop 4.30+/Docker Engine v23.0+)
-
On Linux Ubuntu:
- To install from the Ubuntu repository, run
sudo apt update && sudo apt install docker.io docker-buildx docker-compose-v2
. - Add your user to the
docker
group:sudo usermod -aG docker $USER
. - Log out and log back in to allow the changes to take effect.
- To install from the Ubuntu repository, run
-
On Windows or macOS:
Follow Docker's documentation on installing the Docker Desktop on Windows or macOS.
docker version ... Server: Docker Desktop Engine: Version: 24.0.5 ...
d. Go v1.20
- Follow Go's installation guide.
go version go version go1.20.0 ...
- Use the available binary from extend-helper-cli.
❗ In macOS, you may use Homebrew to easily install some of the tools above.
-
-
Access to AGS environment.
a. Base URL:
- Sample URL for AGS Shared Cloud customers:
https://spaceshooter.prod.gamingservices.accelbyte.io
- Sample URL for AGS Private Cloud customers:
https://dev.accelbyte.io
b. Create a Game Namespace if you don't have one yet. Keep the
Namespace ID
. Make sure this namespace is in active status.c. Create an OAuth Client with confidential client type with the following permissions. Keep the
Client ID
andClient Secret
.- For AGS Private Cloud customers:
ADMIN:ROLE [READ]
to validate access token and permissionsADMIN:NAMESPACE:{namespace}:NAMESPACE [READ]
to validate access namespaceADMIN:NAMESPACE:{namespace}:CLOUDSAVE:RECORD [CREATE,READ,UPDATE,DELETE]
to create, read, update, and delete cloudsave records
- For AGS Shared Cloud customers:
- IAM -> Roles (Read)
- Basic -> Namespace (Read)
- Cloud Save -> Game Records (Create, Read, Update, Delete)
- Sample URL for AGS Shared Cloud customers:
To be able to run this app, you will need to follow these setup steps.
-
Create a docker compose
.env
file by copying the content of .env.template file.⚠️ The host OS environment variables have higher precedence compared to.env
file variables: If the variables in.env
file do not seem to take effect properly, check if there are host OS environment variables with the same name. See documentation about docker compose environment variables precedence for more details. -
Fill in the required environment variables in
.env
file as shown below.AB_BASE_URL='http://test.accelbyte.io' # Your environment's domain Base URL AB_CLIENT_ID='xxxxxxxxxx' # Client ID from the Prerequisites section AB_CLIENT_SECRET='xxxxxxxxxx' # Client Secret from the Prerequisites section AB_NAMESPACE='xxxxxxxxxx' # Namespace ID from the Prerequisites section PLUGIN_GRPC_SERVER_AUTH_ENABLED=true # Enable or disable access token and permission validation BASE_PATH='/guild' # The base path used for the app
❗ In this app, PLUGIN_GRPC_SERVER_AUTH_ENABLED is
true
by default: If it is set tofalse
, the endpointpermission.action
andpermission.resource
validation will be disabled and the endpoint can be accessed without a valid access token. This option is provided for development purpose only.
To build this app, use the following command.
make build
To (build and) run this app in a container, use the following command.
docker compose up --build
This app can be tested locally through the Swagger UI.
-
Run this app by using the command below.
docker compose up --build
-
If PLUGIN_GRPC_SERVER_AUTH_ENABLED is
true
: Get access token to be able to access the REST API service. You can generate the user access token using getusertoken.sh shell script. To run it, you will need to set the following environment variables.export AB_BASE_URL='http://test.accelbyte.io' # Your environment's domain Base URL export AB_CLIENT_ID='xxxxxxxxxx' # Client ID from the Prerequisites section export AB_CLIENT_SECRET='xxxxxxxxxx' # Client Secret from the Prerequisites section
Then use the following command to run the script to get the user access token.
# The <username> and <password> are the user's credential to access AGS. bash getusertoken.sh <username> <password>
:info: Make sure the user has a role which contains this permission:
ADMIN:NAMESPACE:{namespace}:CLOUDSAVE:RECORD [CREATE,READ,UPDATE,DELETE]
. -
The REST API service can then be tested by opening Swagger UI at
http://localhost:8000/guild/apidocs/
. Use this to create an API request to try the endpoints.:info: Depending on the envar you set for
BASE_PATH
, the service will have different service URL. This how it's the formattedhttp://localhost:8000/<base_path>
To authorize Swagger UI, click on "Authorize" button on right side.
Popup will show, input "Bearer <user's access token>" in
Value
field forBearer (apiKey)
. Then click "Authorize" to save the user's access token.
To be able to see the how the observability works in this template project in local development environment, there are few things that need be setup before performing test.
-
Uncomment loki logging driver in docker-compose.yaml
# logging: # driver: loki # options: # loki-url: http://host.docker.internal:3100/loki/api/v1/push # mode: non-blocking # max-buffer-size: 4m # loki-retries: "3"
⚠️ Make sure to install docker loki plugin beforehand: Otherwise, this app will not be able to run. This is required so that container logs can flow to theloki
service withingrpc-plugin-dependencies
stack. Use this command to install docker loki plugin:docker plugin install grafana/loki-docker-driver:latest --alias loki --grant-all-permissions
. -
Clone and run grpc-plugin-dependencies stack alongside this app. After this, Grafana will be accessible at http://localhost:3000.
git clone https://github.com/AccelByte/grpc-plugin-dependencies.git cd grpc-plugin-dependencies docker compose up
❗ More information about grpc-plugin-dependencies is available here.
-
Perform testing. For example, by following Test in Local Development Environment.
To deploy this app to AGS, follow the steps below.
-
Create a new Extend Service Extension App on Admin Portal. Keep the
Repository URI
. -
Download and setup extend-helper-cli (only if it has not been done previously).
-
Perform docker login with
extend-helper-cli
using the following command.extend-helper-cli dockerlogin --namespace <my-game> --app <my-app> --login
❗ For your convenience, the above
extend-helper-cli
command can also be copied fromRepository Authentication Command
under the corresponding app detail page. -
Build and push this app docker image to AccelByte ECR using the following command.
extend-helper-cli image-upload --work-dir <my-project-dir> --namespace <my-game> --app <my-app> --image-tag v0.0.1
⚠️ Make sure to perform docker login (step 3) before executing the above command. -
Open Admin Portal, go to Extend -> Service Extension. And then select the extend app.
-
To deploy selected image tag, click Image Version History and select desired image tag to be deployed.
-
Click Deploy Image, confirm the deployment and go back to App Detail by clicking Cancel.
-
Wait until app status is running.
For more information on how to deploy an Extend Service Extension
app, see
here.
Proceed to create your own Extend Service Extension
app by modifying this project. See here for more details.