12 commits

Author	SHA1	Message	Date
Philip Molares	7aeb77b262	auth: Fix base64url transformation ... The problem was that replace only replaces the first occurrence of a string and not all as is needed for this function. tsconfig.json needed lib to be set to esnext or the replaceAll function won't be available… Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-26 10:56:45 +01:00
Philip Molares	bfe14dad8d	auth: Run removeInvalidTokens 5s after startup ... This should prevent problem with the AuthToken purge on Sundays, as the service is either running on sunday or will be restarted there after. Also move base64url comment to right function Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-25 21:30:08 +01:00
Philip Molares	67a5f3c7ec	auth: Add maximum token lifetime of 2 years. ... Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-25 21:30:08 +01:00
Philip Molares	99d6b39e00	auth: Run removeInvalidTokens 5s after startup ... This should prevent problem with the AuthToken purge on Sundays, as the service is either running on sunday or will be restarted there after. Also move base64url comment to right function Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-25 21:30:08 +01:00
Philip Molares	c2d759da53	auth: Add token limit of 200 ... This is a very high ceiling unlikely to hinder legitimate usage, but should prevent possible attack vectors Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-25 21:30:08 +01:00
Philip Molares	0a3247492a	auth: Add cron to clean old tokens ... Rename AuthToken.identifier to label Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-25 21:30:04 +01:00
Philip Molares	cc2fcac532	auth: Remove userName parameter of removeToken function ... As suggested by @innaytool Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-25 21:30:02 +01:00
Philip Molares	f68caab6e8	auth: Integrate suggestions by @davidmehren ... Add number type alias TimestampMillis Remove solved ToDos Change AuthToken and AuthTokenDto to use Date Rename authService unit tests Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-25 21:30:02 +01:00
Philip Molares	265195e305	auth: Split randomBase64UrlString in two functions ... add test for BufferToBase64Url and toAuthTokenDto Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-25 21:30:02 +01:00
Philip Molares	84ec528d14	auth: Add tests for AuthService ... Move AuthTokens to auth folder Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-25 21:30:02 +01:00
Philip Molares	599fe57ec6	tokens: Add token creation ... Fix token deletion Update plantuml docs Add token validUntil and lastUsed fields Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-25 21:30:02 +01:00
Philip Molares	8d89614a4d	auth: adds token-auth to public api ... adds auth service adds auth module adds token-auth strategy adds token-auth to all public api calls Signed-off-by: Philip Molares <philip.molares@udo.edu>	2021-01-25 21:29:59 +01:00