auth's Introduction

Auth

Auth microservice integrated with kong for registration and issuing tokens.

Features

This project continuously integrates with docker. Go check it out if you don't have docker locally installed.

docker run -d -p 8000:8000 shi2002/auth

Configurations:

Key	Example Value	Description
SANIC_MODE	dev	'production' in production mode, otherwise in dev mode
SANIC_DB_URL	mysql://username:pwd@host:port/db	required
SANIC_KONG_URL	http://kong:8001	kong admin api, required
SANIC_KONG_TOKEN	token	set "Authorization" key auth in kong to secure admin api
SANIC_EMAIL_WHITELIST	["example.com", "example.org"]	domains allowed to register, default to [], accepting all domains
SANIC_VERIFICATION_CODE_EXPIRES	10	verification code expires in minutes
SANIC_EMAIL_HOST	smtpdm.aliyun.com	smtp email service
SANIC_EMAIL_PORT	465
SANIC_EMAIL_USER	[email protected]
SANIC_EMAIL_PASSWORD	password

API Docs are available at /docs

Feel free to dive in! Open an issue or submit PRs.

This project exists thanks to all the people who contribute.

auth's People

修改config.py，使 db_url、email_password、register_apikey_seed、kong_token 等配置项可以从 docker secrets 中读取。注意异常处理。

user 的 identifier 字段用于登录时定位 user，通过 utils/auth.py 中的 many_hashes() 函数产生。这个函数应当加盐以提高其安全性。

many_hashes() 应返回 hashlib.pbkdf2_hmac('sha3_512', byte_string, salt, iterations=1).hex()
salt 从 docker secrets 中读取，是一个 base64 字符串，解码为 bytes 后使用
最好把 many_hashes() 换个名，比如 generate_identifier()
迁移数据时更新用户的 identifier

Recommend Projects