auth-api

Authentication Service

This service creates authentication tokens to valid users that have provided correct authentication details.

The tokens are valid for 30 seconds and can be used to make requests to other services (only Transaction API in this exercise).

Dependencies

• Python 3.6+

Quickstart

Example:

$ python --version
Python 3.6.0
$ pip install -r requirements.txt
$ export HTTP_PORT=5000
$ export JWT_SECRET=supersecret
$ python run.py
 * Running on http://0.0.0.0:5000/ (Press CTRL+C to quit)

Environment variables

Environment variable	Description
HTTP_PORT	Required. Port to bind HTTP server. Default: 5000.
JWT_SECRET	Required. JSON Web Tokens secret. Must be the same as that of Transaction API.

User database

User credentials are stored in the users.json file.

Example user model:

{
    "id": 1,
    "username": "alice",
    "password": "password",
    "can_transact": true
}

can_transact determines whether the user is allowed to make transactions with the Transaction API.

User creation and management are out of the scope of this service.

Endpoints

GET /health - Health check

Health check to see if the service is up.

Request

$ http http://127.0.0.1:5000/health

GET /health HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Connection: keep-alive
Host: 127.0.0.1:5000
User-Agent: HTTPie/0.9.8

Response

HTTP/1.0 200 OK
Content-Length: 22
Content-Type: application/json
Date: Thu, 24 Feb 2017 12:00:00 GMT
Server: Werkzeug/0.11.15 Python/3.6.0

{
    "healthy": true
}

POST /token - Create an authentication token

Create an authentication token for the given user. Tokens are valid for 30 seconds.

Request

Argument	Description
username	Required. Username in the user database.
password	Required. Password for the user.

Usage:

$ http --form post http://127.0.0.1:5000/token \
    username=alice \
    password=password

POST /token HTTP/1.1
Accept: */*
Accept-Encoding: gzip, deflate
Connection: keep-alive
Content-Length: 32
Content-Type: application/x-www-form-urlencoded; charset=utf-8
Host: 127.0.0.1:5000
User-Agent: HTTPie/0.9.8

username=alice&password=password

Response

HTTP/1.0 200 OK
Content-Length: 191
Content-Type: application/json
Date: Thu, 24 Feb 2017 12:00:00 GMT
Server: Werkzeug/0.11.15 Python/3.6.0

{
    "token": "eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ1c2VyX2lkIjoxLCJ1c2VybmFtZSI6ImFsaWNlIiwiY2FuX3RyYW5zYWN0Ijp0cnVlLCJleHAiOjE0ODc4NjU1MzV9.5NiYF5t6yKP2zcXGzDOXDCx-786smQO4FQlNLOYbKuo"
}