Copy page

Example apps

Chromium CDP with Token Authentication

This example uses Chromium, a headless browser exposing a CDP (Chrome DevTools Protocol) websocket interface, with token-based authentication and persistent storage.

Features

• Token authentication: All CDP requests (HTTP and WebSocket) require a valid token
• Admin API: Create, list, and revoke tokens via REST endpoints
• Bootstrap token: Set an initial admin token via environment variable
• Persistent storage: The token database is stored on a volume that survives restarts

To run this example, follow these steps:

1. Install the unikraft CLI. You need a BuildKit builder. The easiest way to get one is via Docker. Alternatively, you can also directly set up and use BuildKit, see the quick start.

2. Clone the examples repository and cd into the examples/chromium-cdp-auth/ directory:

   Code
   git clone https://github.com/unikraft-cloud/examples
   cd examples/chromium-cdp-auth/

Make sure to log into Unikraft Cloud and pick a metro close to you. This guide uses fra (Frankfurt, 🇩🇪):

Code
unikraft login

Pick a bootstrap admin token that will be used for initial setup. You pass it to the instance as the BOOTSTRAP_ADMIN_TOKEN environment variable (see the deploy commands below) and use it to create additional tokens:

Code
export BOOTSTRAP_ADMIN_TOKEN=my-secret-admin-token

The token database is persisted on a volume mounted at /app/data, so it survives restarts. First create the volume:

Code
unikraft volume create --set metro=fra --set name=chromium-cdp-auth-data --set size=64M

When done, invoke the following command to deploy this app on Unikraft Cloud, mounting the volume and passing the bootstrap token:

Code
unikraft build . --output <my-org>/chromium-cdp-auth
unikraft run --metro fra \
  -m 4G \
  -p 443:8080/tls+http \
  --scale-to-zero policy=idle,cooldown-time=1000,stateful=true \
  -e BOOTSTRAP_ADMIN_TOKEN="$BOOTSTRAP_ADMIN_TOKEN" \
  --volume chromium-cdp-auth-data:/app/data \
  --image <my-org>/chromium-cdp-auth

The output shows the instance address and other details.

Code
metro:        fra
name:         chromium-cdp-auth-d0l6y
uuid:         debe81b0-8418-4e01-b795-b3546e0e5aac
state:        starting
image:        <my-org>/chromium-cdp-auth
resources:
  memory:     4GiB
  vcpus:      1
service:
  uuid:       516e239b-2ab1-9fb9-599d-fb891cc39edb
  name:       spring-dream-p5wxwwl0
  domains:
  - fqdn:     spring-dream-p5wxwwl0.fra.unikraft.app
networks:
- uuid:       7d3633e4-7835-942c-7b32-5d392ba538d7
  private-ip: 10.0.4.141
  mac:        12:b0:7b:d3:eb:de
timestamps:
  created:    just now

In this case, the instance name is chromium-cdp-auth-d0l6y and the address is https://spring-dream-p5wxwwl0.fra.unikraft.app. They're different for each run.

Authentication

All CDP endpoints require a valid token, passed either as:

• Query parameter: ?token=<TOKEN>
• Authorization header: Authorization: Bearer <TOKEN>

The bootstrap admin token (set via the BOOTSTRAP_ADMIN_TOKEN environment variable) can be used for initial setup. Use it to create additional tokens.

Token management API (admin only)

Create a token:

Code
curl -X POST https://<instance-url>/api/tokens \
  -H "Authorization: Bearer $BOOTSTRAP_ADMIN_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name": "my-client", "expiresInDays": 7}'

List tokens:

Code
curl https://<instance-url>/api/tokens \
  -H "Authorization: Bearer $BOOTSTRAP_ADMIN_TOKEN"

Revoke a token:

Code
curl -X DELETE https://<instance-url>/api/tokens/<token> \
  -H "Authorization: Bearer $BOOTSTRAP_ADMIN_TOKEN"

Public endpoints

• GET /health — health check (no auth required)

Testing

To query the service you need to use a CDP client. You can use the Python-based implementation in the test/ directory. See test/README.md for setup and a screenshot example that passes a token.

Instance management

You can list information about the instance by running:

Code
unikraft instances list

When done, you can remove the instance:

Code
unikraft instances delete chromium-cdp-auth-d0l6y

Learn more

• CDP Documentation
• Unikraft Cloud's Documentation
• Building Dockerfile Images with Buildkit

Use the --help option for detailed information on using Unikraft Cloud:

Code
unikraft --help

Or visit the CLI Reference.