A simple dockerized service catalog restful backend using NestJs, TypeORM, TypeScript and PostgreSQL

• user management and JWT auth;
• service catalog CRUD function, supporting filtering, sorting, searching and pagination;
• fine-graded permission / access control;
• healthcheck endpoint and OpenAPI swagger doc;

docker-compose up -d

• the catalog application is exposed on localhost port 3000;
• sign up via /auth/signup using admin as the username to be the admin; any other usernames will be normal users; - get the access token via /auth/signin;
• add the Authorization with the access token header to each request to further explore the application;
• all the credentials can be found here .env

for more information, please check catalog-api doc

The service catalog api was designed for small- and medium-sized enterprises.

It contains 3 major features/functions:

• auth: user management
• permission: fine-graded permission management
• service: service catalog management

Constricted by time, all the above 3 functions are built into one application and dockerized together with postgres database.

For large enterprises, the above 3 features/functions can be optionally separated into 3 applications with their own persistent layers.

For the service catalog endpoints, there few layers of access control:

• all the endpoint requires JWT auth;

• admin users have the full access to the all the services;

• for normal users, the fine-graded permission (the permission endpoint) plays a role here.

  1. all the users can have the full access to the services added by themselves;
  2. services created a different users can only be accessed after the permission being granted by admin users;
  3. When retrieving a list of services, only permitted services are exposed.
  4. The fine-graded permission is implemented by NestJS interceptors;

• This is a weekend POC project and the author has never been previously exposed to NestJS. Reading NextJS documentation and coding happened within a very short period and there are tons of points to be improved for production purpose;
• The project needs more tests (need more time) and ideally, a pipeline should be included/setup for CI/CD;