Mobicoop V3 authentication and authorization service
Go to file
Gsk54 0a2a44bc15 update gitlabci 2023-01-12 14:23:59 +01:00
ci add ci --check 2023-01-10 15:28:19 +01:00
prisma multiple usernames 2022-12-20 17:37:59 +01:00
src better tests 2023-01-11 12:49:00 +01:00
.dockerignore update gitlabci 2023-01-12 14:23:59 +01:00
.editorconfig initial commit 2022-12-15 10:59:45 +01:00
.env.dist add ci --check 2023-01-10 15:28:19 +01:00
.env.test integration tests 2023-01-06 14:37:26 +01:00
.eslintrc.js initial commit 2022-12-15 10:59:45 +01:00
.gitignore remove pgadmin 2022-12-26 09:42:49 +01:00
.gitlab-ci.yml update gitlabci 2023-01-12 12:51:40 +01:00
.prettierrc initial commit 2022-12-15 10:59:45 +01:00
Dockerfile update compose 2023-01-04 13:51:40 +01:00
LICENSE initial commit 2022-12-15 10:59:45 +01:00
README.md simplify, update readme 2023-01-06 15:10:40 +01:00
docker-compose.ci.yml add ci --check 2023-01-10 15:28:19 +01:00
docker-compose.yml integration tests 2023-01-06 14:37:26 +01:00
nest-cli.json initial commit 2022-12-15 10:59:45 +01:00
package-lock.json integration tests 2023-01-06 14:37:26 +01:00
package.json remove main.ts from tests 2023-01-12 12:10:56 +01:00
tsconfig.build.json initial commit 2022-12-15 10:59:45 +01:00
tsconfig.json initial commit 2022-12-15 10:59:45 +01:00

README.md

Mobicoop V3 - Auth Service

Authentication (AuthN) and Authorization (AuthZ) data management.

Requirements

You need Docker and its compose plugin.

You also need NodeJS installed locally : we strongly advise to install Node Version Manager and use the latest LTS version of Node (check that your local version matches with the one used in the Dockerfile).

The API will run inside a docker container, but the install itself is made outside the container, because during development we need tools that need to be available locally (eg. ESLint, Prettier...).

A RabbitMQ instance is also required to send / receive messages when data has been inserted/updated/deleted.

Installation

  • copy .env.dist to .env :

    cp .env.dist .env
    

    Modify it if needed.

  • install the dependencies :

    npm install
    
  • start the containers :

    docker compose up -d
    

    The app runs automatically on port 5002.

Database migration

Before using the app, you need to launch the database migration (it will be launched inside the container) :

npm run migrate

Usage

The app is used for authentication (aka AuthN) and authorization (aka AuthZ : to be developped).

AuthN consists in verifying a username / password couple. A user can have multiple usernames (representing multiple identifiers), all of them sharing the same password. In the app, all the authentication information about a user is called an auth. As of 2022/10/23, the possible identifiers are :

  • an email
  • a phone number

Note that all usernames are unique in the system : many users can't have the same email or phone number.

For AuthN, the app exposes the following gRPC services :

  • Create : create an auth with one username / password (you can't create multiple usernames at once)

    {
        "uuid": "30f49838-3f24-42bb-a489-8ffb480173ae",
        "username": "john.doe@email.com",
        "password": "John123",
        "type": "EMAIL"
    }
    
  • AddUsername : add a username to an auth

    {
        "uuid": "30f49838-3f24-42bb-a489-8ffb480173ae",
        "username": "+33611223344",
        "type": "PHONE"
    }
    
  • UpdateUsername : update a username

    {
        "uuid": "30f49838-3f24-42bb-a489-8ffb480173ae",
        "username": "johnny.doe@email.com",
        "type": "EMAIL"
    }
    
  • DeleteUsername : delete a username (an error is thrown if it's the only username of an auth, as an auth must have at least one associated username)

    {
        "username": "+33611223344"
    }
    
  • UpdatePassword : update the password of an auth

    {
        "uuid": "30f49838-3f24-42bb-a489-8ffb480173ae",
        "password": "Johnny123"
    }
    
  • Validate : validate an auth (= authentication with username/password)

    {
        "username": "john.doe@email.com",
        "password": "Johnny123"
    }
    
  • Delete : delete an auth and its associated usernames

    {
        "uuid": "30f49838-3f24-42bb-a489-8ffb480173ae"
    }
    

Messages

Various RabbitMQ messages are sent for logging purpose.

Tests

Tests are run outside the container for ease of use (switching between different environments inside containers using prisma is complicated and error prone). The integration tests use a dedicated database (see db-test section of docker-compose.yml).

# run all tests (unit + integration)
npm run test

# unit tests only
npm run test:unit

# integration tests only
npm run test:integration

# coverage
npm run test:cov

License

Mobicoop V3 - Auth Service is AGPL licensed.