implement auth service

services/auth/.env.default

@@ -1,11 +1,5 @@
 SERVER_PORT=3500
 
-PRISMA_MANAGEMENT_API_SECRET=wsflk897dh%£
+USER_SERVICE=http://user_app_1:3500
 
-LOGGING_DRIVER=json-file
-
-DB_HOST=
-DB_PORT=
-DB_NAME=
-DB_USER=
-DB_PASSWORD=
+LOGGING_DRIVER=json-file

services/auth/README.md

@@ -7,6 +7,7 @@ To run this service use the [launcher script](../launcher.sh) as described in th
 # Description
 
 Authentication service
+This service is an orchestrator and needs `user` service to work.
 
 # Install
 

services/auth/package.json

@@ -8,17 +8,19 @@
     "start": "node src/index.js",
     "dev": "nodemon src/index.js",
     "prod": "node src/index.js",
-    "test": "jest --testTimeout=20000 --runInBand",
+    "test": "echo no test; exit 0",
     "lint-check": "eslint ./ --ext js",
     "lint-fix": "eslint ./ --ext js --fix"
   },
   "dependencies": {
+    "axios": "^0.21.0",
+    "bcrypt": "^5.0.0",
     "body-parser": "^1.18.3",
     "dotenv": "^8.2.0",
     "express": "^4.17.1",
     "express-routes-versioning": "^1.0.1",
-
     "prisma-client-lib": "^1.34.10",
+    "uuid": "^8.3.1",
     "winston": "^3.2.1"
   },
   "devDependencies": {
@@ -40,4 +42,4 @@
       "/generated/"
     ]
   }
-}
+}

services/auth/src/controllers/login.ctrl.js

@@ -1,4 +1,7 @@
 const winston = require('winston');
+const bcrypt = require('bcrypt');
+const { getUsersByEmail } = require('../services/usersService');
+const { getToken } = require('../utils/tokenGenerator');
 
 /**
  * Check if the body of the request contains the good elements
@@ -18,11 +21,20 @@ const bodyIsValid = (body) => {
 module.exports.login = async (req, res) => {
   if (bodyIsValid(req.body)) {
     try {
-      // TODO:
-      res.status(200).send({});
+      const users = (await getUsersByEmail(req.body.email)).data;
+      if (users.length > 0) {
+        const isValidPassword = await bcrypt.compare(req.body.password, users[0].password);
+        if (isValidPassword) {
+          res.status(200).send(getToken(users[0].id, 'user'));
+        } else {
+          res.status(401).send({});
+        }
+      } else {
+        res.status(401).send({});
+      }
     } catch (e) {
-      winston.error(e);
-      res.status(500).send({ message: e });
+      winston.error(e.response.data.message);
+      res.status(e.response.status).send({ message: e.response.data.message });
     }
   } else {
     res.status(400).send({ message: 'Invalid body format' });

services/auth/src/controllers/signUp.ctrl.js

@@ -1,10 +1,13 @@
 const winston = require('winston');
+const { createUser } = require('../services/usersService');
 
 /**
  * Check if the body of the request contains the good elements
  */
 const bodyIsValid = (body) => {
-  const { firstName, lastName, email, password } = body;
+  const {
+    firstName, lastName, email, password,
+  } = body;
   if (!firstName || !lastName || !email || !password) {
     return false;
   }
@@ -18,11 +21,12 @@ const bodyIsValid = (body) => {
 module.exports.signUp = async (req, res) => {
   if (bodyIsValid(req.body)) {
     try {
-      // TODO:
+      await createUser(req.body.firstName, req.body.lastName,
+        req.body.email, req.body.password);
       res.status(200).send({});
     } catch (e) {
-      winston.error(e);
-      res.status(500).send({ message: e });
+      winston.error(e.response.data.message);
+      res.status(e.response.status).send({ message: e.response.data.message });
     }
   } else {
     res.status(400).send({ message: 'Invalid body format' });

services/auth/src/jwk/symmetric.json

@@ -0,0 +1,10 @@
+{
+  "keys": [
+    {
+      "kty": "oct",
+      "k": "AyM1SysPpbyDfgZld3umj1qzKObwVMkoqQ-EstJQLr_T-1qS0gZH75aKtMN3Yj0iPS4hcgUuTwjAzZr1Z9CAow",
+      "kid": "edgar",
+      "alg": "HS256"
+    }
+  ]
+}

services/auth/src/server.js

@@ -28,4 +28,9 @@ winston.add(new winston.transports.Console({
  */
 app.use(routes);
 
+/**
+ * Expose jwk-url
+ */
+app.use(express.static('src/jwk'));
+
 module.exports = app;

services/auth/src/services/usersService.js

@@ -0,0 +1,14 @@
+const axios = require('axios');
+require('dotenv').config();
+
+const userService = process.env.USER_SERVICE || 'http://user_app_1:3500';
+
+const http = axios.create({
+  baseURL: userService,
+});
+
+module.exports.createUser = (firstName, lastName, email, password) => http.put('users', {
+  firstName, lastName, email, password,
+});
+
+module.exports.getUsersByEmail = email => http.get(`users?type=manager&email=${email}`);

services/auth/src/utils/tokenGenerator.js

@@ -0,0 +1,13 @@
+const { v4: uuidv4 } = require('uuid');
+
+const getExpDate = () => new Date(Date.now() + 12096e5).getTime();
+
+module.exports.getToken = (userId, role) => ({
+  accessToken: {
+    sub: userId,
+    jti: uuidv4(),
+    roles: [role],
+    exp: getExpDate(),
+  },
+  exp: getExpDate(),
+});