service-auth is the service responsible for user management and authentication/authorization in the msa-event-market Project. service-auth follows this considerations
- Architecture
- ER Diagram
service-auth uses simple authentication based on ID/Password. A user can get the access token and refresh token based on JWT required for authentication/authorization by entering ID/Password. Passwords are encrypted and stored using the PBKDF2 algorithm.
In JWT token contains the following information.
- User ID (UUID)
- Login ID
- Role (admin, user)
service-auth uses following external packages and tools.
- HTTP Server, Middleware : chi, HTTP, oapi-codegen
- GRPC Server, Intercepter : grpc, protoc-gen-go
- MySQL : GORM
- Kafka : kafka-go, Debezium Outbox
- Authorziation : Casbin
- Logging, Tracking : zerolog, Istio, OpenTracing, Jaeger
- Continuous Integration : Testify, sqlmock, Mockery, Github Actions
- Continuous Deployment : K8s, ArgoCD, ArgoCD Image Updater, Kustomize
- Golang Version : 1.16
- For HTTP Server, Swagger
// MacOS
$ go install github.com/deepmap/oapi-codegen/cmd/[email protected]
$ go install github.com/mikefarah/yq/v4
- For GRPC Server
// MacOS
$ brew install protobuf
$ go install google.golang.org/protobuf/cmd/[email protected]
$ go install google.golang.org/grpc/cmd/[email protected]
- For Test, CI
// MacOS
$ brew install jq
$ brew install mockery
$ go install github.com/fullstorydev/grpcurl/cmd/[email protected]
$ go install github.com/nektos/act@latest
- UUID for DB
- Istio GRPC
- Casbin RBAC
- OpenTracing tracer
- OpenTracing middleware
- OpenTracing intercepter