JarCastingmicroprofile-jwt-login
This library was built for Demo purposes it's not recommended at production.
This tiny library let's you create an authentication microservice with Microprofile. You should provide your own implementation of UserService interface to tells to the login service where fetch the user data.
By default this library uses JOSE implementation to creates JWT. Has a password validation in order to validate user credentials. Uses BCrypt with salt to verify the encoded password. You can see the dependencies in pom.xml
On your Microprofile project
<dependency>
<groupId>io.github.gdiazs</groupId>
<artifactId>microprofile-jwt-login</artifactId>
<version>0.0.2</version>
</dependency>
Create UserService implementation or use in memory approach for testing
Once you have imported this library in a Microprofile project built with https://start.microprofile.io/ Just configure a similar class like this. You can provide your own user service implementation to fetch your user data.
@Dependent
public class AuthservicesConfig {
@Produces
public UserService userService() {
UserServiceBuilder.userBuilder()
.addUser("gdiazs", "$2y$06$HJMVVcT0mBshzc9ZCLtJXuwi0R4CPuKGbJDGVlyGYAt6KnM9UfC6C", "admin", "tester")
.addUser("memo", "$2y$06$HJMVVcT0mBshzc9ZCLtJXuwi0R4CPuKGbJDGVlyGYAt6KnM9UfC6C", "developer");
return UserServiceBuilder.build();
}
@Produces
public PasswordEncoder passwordEncoder() {
return new PasswordEncoderDefault(6);
}
}
Configure the Microprofile config properties
Don't forget add this properties
microprofile-config.properties
microprofile.jwt.secret=yoursecrethash
microprofile.jwt.privateKey=/privateKey.pem
microprofile.jwt.algorithm=RS256 # or HS256 depends on this the library uses secret or privateKey
microprofile.jwt.aud=web
microprofile.jwt.iss=https://server.example.com
microprofile.jwt.expiration=30000
microprofile.jwt.keyID=JWT-MP
Test your auth microservice
POST http://localhost:port/context/auth
{
"username": "gdiazs",
"password": "Test1234"
}