jdwlabs/identity-service repository overview

⁠jdwlabs/identity-service

Authentication, users and roles API for the jdwlabs platform.

⁠What it is

A Go service serving the eighteen /auth, /api/users and /api/roles operations of the jdwlabs auth surface: sign-in, self-registration, user records and the role catalogue with its grants. It reads and writes the same auth schema the JVM usersrole service uses, issues the HMAC-signed tokens the rest of the platform verifies, and stores passwords bcrypt-encoded. Built on distroless for a minimal attack surface, running as a numeric non-root uid.

⁠Quick start

docker run -p 8080:8080 \
  -e UR_JWT_SECRET_KEY="$(base64 < /dev/urandom | head -c 44)" \
  -e UR_PG_DATASOURCE_URL="jdbc:postgresql://authdb:5432/jdw" \
  -e UR_PG_USERNAME=jdw \
  -e UR_PG_PASSWORD=jdw \
  -e ID_JWT_ISSUER_ORIGIN="http://localhost:8080" \
  jdwlabs/identity-service:latest

curl http://localhost:8080/actuator/health

The service needs a reachable Postgres carrying the auth schema — the jdwlabs/authdb image ships it — and refuses to start without one.

The HMAC key must be byte-identical everywhere and 32 to 47 bytes once decoded; a longer key makes the JVM sign with a stronger HMAC variant that the Go verifiers refuse.

⁠Exposed ports

⁠Environment

⁠Observability

Request timings are published as http_server_requests_seconds, labelled method, uri, status and outcome — the series name and labels Micrometer publishes for the JVM service, so existing dashboards keep working.

⁠Tags

• latest — most recent release
• X.Y.Z — immutable semver release

⁠Source

• jdwlabs/apps⁠ — apps/backend/identity-service

⁠License

PolyForm Noncommercial 1.0.0