This is the client library for the service-auth-provider api microservice. The tool provides a method to generate s2s auth token for a microservice and, optionally, caches it.
The project uses Gradle as a build tool, but you don't have to install it locally since there is a
./gradlew wrapper script.
To build the project run the following command:
./gradlew buildThe following values must be provided:
idam:
s2s-auth:
url: http://localhost:4502
totp_secret: AAAAAAAAAAAAAAAC
microservice: ccd_gwA spring bean:
@Configuration
public class ServiceTokenGeneratorConfiguration {
@Bean
public AuthTokenGenerator serviceAuthTokenGenerator(
@Value("${idam.s2s-auth.totp_secret}") final String secret,
@Value("${idam.s2s-auth.microservice}") final String microService,
final ServiceAuthorisationApi serviceAuthorisationApi
) {
return AuthTokenGeneratorFactory.createDefaultGenerator(secret, microService, serviceAuthorisationApi);
}
}The following values must be provided to enable a ServiceAuthFilter bean:
idam:
s2s-authorised:
services: microservice1, microservice2ServiceAuthFilter bean is a OncePerRequestFilter filter that you can add to your filter chain to authorise a service
request. The filter will expect a header with 'ServiceAuthorization: Bearer <token>' as part of the request header that it will consume
to approve the request. Any requests from services that are not in your authorised services list will deny access
to your service and return an HTTP response status code 403 (forbidden) and for any other reasons if the token is
missing, invalid or failure to verify will result in 401(unauthorized).
You might want to use this client when not running in a spring context, i.e. a scheduled job possibly.
class ServiceTokenGenerator {
private static AuthTokenGenerator getAuthTokenGenerator(String s2sURL, String clientId, String clientSecret) {
HttpMessageConverter<?> jsonConverter = new MappingJackson2HttpMessageConverter(new ObjectMapper());
ObjectFactory<HttpMessageConverters> converter = () -> new HttpMessageConverters(jsonConverter);
ServiceAuthorisationApi serviceAuthorisationApi = Feign.builder()
.contract(new SpringMvcContract())
.encoder(new SpringEncoder(converter))
.decoder(new StringDecoder())
.target(ServiceAuthorisationApi.class, s2sURL);
return AuthTokenGeneratorFactory
.createDefaultGenerator(clientSecret, clientId, serviceAuthorisationApi);
}
}To run all unit tests execute the following command:
./gradlew testTo run all checks (including unit tests) execute the following command:
./gradlew checkWe use SemVer for versioning. For the versions available, see the tags on this repository.
To release a new version add a tag with the version number and push this up to the origin repository. This will then build and publish the release to maven.
This project is licensed under the MIT License - see the LICENSE.md file for details.
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot]")
![renovate[bot] avatar](https://avatars.githubusercontent.com/in/2740?v=4 "renovate[bot]")
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent