You are logged in dude! Welcome!

September 19, 2015 · View on GitHub

Trust Broker - JWT Issuer

Multi Identity Provider / Broker - take username/password, APIKey, Facebook or Google identity; issue JSON Web Token.

Features

Provide granular security and multitenancy for your SaaS APIs.
Support pluggable authenticate strategies ranging from
verifying a username and password with DB or LDAP
delegated authentication using OAuth or
federated authentication using OpenID Connect.
Account locking
user's account will be "locked" after some number of consecutive failed login attempts.
user's account will become unlocked once a sufficient amount of time has passed.
system will expose the reason for a failed login attempt to the application.
Authorization middleware - support annotations driven access control.
Role based access control - isAdmin, hasAnyRoles, hasAllRoles
Scope based access control - hasAnyScopes, hasAllScopes
Resource owner access control (ACL) - isAdminOrSelf

Prerequisite

# install MongoDB
brew install mongodb

# install Node (tested with node v4.1.0)
brew install node

# install Babel
npm install -g babel

# install npm dependencies  
npm install

# generate public and private keys for JWT
openssl genrsa -out  .ssh/auth.rsa 1024
openssl rsa -in .ssh/auth.rsa -pubout > .ssh/auth.rsa.pub

# generate ssl key and cert for HTTPS
openssl genrsa 1024 > .ssh/server.pem

openssl req -new -key .ssh/server.pem -out .ssh/csr.pem
openssl x509 -req -days 365 -in .ssh/csr.pem -signkey .ssh/server.pem -out .ssh/server.crt

Getting Started

To start the MongoDB
```
mongod -f data/mongod.yml
```

To start the server.

npm start
# to run with dev env settings
NODE_ENV=DEV npm start
# to run with prod env settings
NODE_ENV=PROD npm start
# to debug routes
DEBUG=koa-router npm start

Test

$ curl https://localhost:8443/api/v1/users
# You don't have a signed token dude :(
$ curl -X POST -H "Content-Type: application/json" https://localhost:8443/auth/login -d '{"username": "root", "password": "root0Demo"}'
# {"token": "verylongtokenstring :)"}
$ curl -H "Authorization: Bearer verylongtokenstring :)" https://localhost:8443/api/v1/users
# You are logged in dude! Welcome!
$ curl -X POST -H "Authorization: Bearer verylongtokenstring :)" https://localhost:8443/api/v1/users -d '{"username": "sumo5", "password": "sumo5Demo","name": "sumo5 demo","provider": "local","email": "sumo5@gmail.com","roles": ["user"]}'
# An account is created

verify signature at http://jwt.io/

Development

create config/local.yml file to keep your sensitive config data for local development environment.

Don't check-in this file into Source Code Control System.

# mongodb
mongo:
  options:
#    user: myUserName
#    pass: myPassword

# Passport
passport:
  facebook:
    clientID: 1231231313
    clientSecret: fsfsfsfsfsfsfsf
    callbackURL: https://localhost:8443/auth/facebook/callback
  google:
    clientID: sdfsfsfds
    clientSecret: fsdfdsfsfsfsdf
    callbackURL: https://localhost:8443/auth/google/callback

Tips

Use Chrome Postman for REST API testing.

Since you are using self-signed SSL Certs, first try to access URL in chrome and accept the cert, before trying in Postman.

Known Issues

Manually fix '/(.*)' --> '(.*)' koa-router code as described here