Sign inSign up

geonetwork/gn-cloud-authorizing

By geonetwork

•Updated over 1 year ago

This service is in charge of checking user privileges using GeoNetwork user repository

Image
0

1.5K

geonetwork/gn-cloud-authorizing repository overview

⁠Authentication service

This service is in charge of checking user privileges using GeoNetwork user repository. Once authenticated, a JSON Web Token (JWT) is created. The token will contain necessary information about the user that may be required for other services to limit requests to the database (eg. user membership is required to build a search filter by the search application).

The auth service requires the following to be started first:

docker-compose up -d database rabbitmq 
docker-compose up -d discovery config
docker-compose up -d gateway auth

GeoNetwork does not need to be started, but it MUST have started once to create the database (including the users table with the default admin/admin user).

  1. Get an authentication token
USERNAME=editor
PASSWORD=aaaaaa
USERNAME=admin
PASSWORD=admin
gn_token=$( \
    curl test-client:[email protected]:9900/oauth/token \
         -dgrant_type=password -dscope=any \
         -dusername=$USERNAME -dpassword=$PASSWORD \
        | jq -r '.access_token') 

echo $gn_token
  1. The service response return the token access_token
{
  "access_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJleHAiOjE2MDMxODcxODcsInVzZXJfbmFtZSI6Im1vbW8iLCJhdXRob3JpdGllcyI6WyJST0xFX1VTRVIiXSwianRpIjoiM2ZmYjhkNjQtODJlMy00NTVhLWJlM2YtMGUzYzE3MjBlYjdlIiwiY2xpZW50X2lkIjoidGVzdC1jbGllbnQiLCJzY29wZSI6WyJhbnkiXX0.HiDDFl-Ze-Mjry4X4lVTe4E6j8zueUvDY5Fz_TET_8w",
  "token_type":"bearer",
  "refresh_token":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyX25hbWUiOiJtb21vIiwic2NvcGUiOlsiYW55Il0sImF0aSI6IjNmZmI4ZDY0LTgyZTMtNDU1YS1iZTNmLTBlM2MxNzIwZWI3ZSIsImV4cCI6MTYwNTczNTk4NywiYXV0aG9yaXRpZXMiOlsiUk9MRV9VU0VSIl0sImp0aSI6IjRkNDFkNDJjLWIwMDYtNDQyYi1hZGU1LTkzMjQ1MGE5MDg5NCIsImNsaWVudF9pZCI6InRlc3QtY2xpZW50In0.wWxJ2QdHLamT7XGmMQ9VueLBKR0QELfelZplfDWmbrY",
  "expires_in":43199,
  "scope":"any",
  "jti":"3ffb8d64-82e3-455a-be3f-0e3c1720eb7e"
}
  1. The token is used to access services
docker-compose up -d search

gn_auth_header=$(echo "Authorization: Bearer $gn_token")

curl 127.0.0.1:9900/search/secured -H "$gn_auth_header"

The server return user details:

curl 127.0.0.1:9900/search/secured -H "$gn_auth_header"
You are authenticated as editor
Authorities gn
 * UserAdmin:[]
 * highest_profile:Editor
 * Editor:[100]
 * Reviewer:[]
 * RegisteredUser:[101]

⁠Source code

https://github.com/geonetwork/geonetwork-microservices/tree/main/modules/services/authorizing⁠

Tag summary

Content type

Image

Digest

sha256:2301ce188…

Size

166.9 MB

Last updated

over 1 year ago

docker pull geonetwork/gn-cloud-authorizing:4.4.7-0