@trickfilm400/auth-utils

2022-2023 Created with ♥ by typescript-project-scaffolding

ENV

ENV	Description	Default
SSO_ISSUER_URL	The issuer url of the SSO
SSO_CLIENT_ID	The client id of the SSO
SSO_CLIENT_SECRET	The client secret of the SSO
SSO_CALLBACK_URLS	The callback urls of the SSO
SSO_POST_LOGOUT_REDIRECT_URLS	The post logout redirect urls of the SSO
SSO_STRATEGY	The strategy to use for authentication	oidc
SSO_ZITADEL_ROLE_MAPPING	Map the roles to permissions	""

=======================

Concept

=======================

• [x] expose middleware for checked if logged in
• [x] check if user has session / key which is authenticated (logged in via SSO) => checkLoggedIn() Middleware
• [ ] Typescript decorator
• [ ] expose function to check if user has permission (probably use library and expose check method)
  • [ ] e. g. asterisk-perm: check("user:read"): boolean
• [x] expose SSO paths (/login, /logout, /callback)
  • [ ] to handle oidc/oauth2/saml authentications
  • [ ] select which you cant to have implemented
• [x] parameters for library on initialisation in project
  • [x] express-app, existing DB? variables for SSO (or/and DB)
  • [ ] DB missing currently
• [ ] implement
  • [ ] custom permission management by SSO users
    • [ ] create custom permission for SSO user
    • [ ] e. g. ytdl:download, ytdl:* or so
  • [ ] create this permission system für database
    • [ ] own(?!) DB table / collection
    • [ ] some small kind of user management
    • [ ] expose rest paths for managing permissions
    • [ ] create custom permissions in db
      • [ ] ensurePermission(name)
      • [ ] will be checked on startup if exist in DB
• [ ] create routes for user management and permission management
  • [ ] create routes for user management
    • [ ] create user
    • [ ] delete user
    • [ ] update user
    • [ ] get user
    • [ ] get all users
  • [ ] create routes for permission management
    • [ ] create permission
    • [ ] delete permission
    • [ ] update permission
    • [ ] get permission
    • [ ] get all permissions
  • [ ] OPENAPI SCHEMA!!!!!!!!!]
  • [ ] ADD ROUTES WITH ABSTRACT CLASSES ETC.