Basic ExpressJS server

[GewoonMaarten]

As a developer I want a basic nodejs server, so that I implement the other gateway stories.

Acceptance Criterion:

• [x] Create ExpressJS app
• [x] OpenZaak URL is not hardcoded (environment variables)
• [x] Generate JWT token to request data from openzaak.
  • The JWT should for now be generated per-request. This can be a very simple function that creates a JWT based on the OpenZaak client id and secret. Don't commit these secrets, use env variables

Out of scope

• We have decided that tests are out of scope for this issue, as it's heavily depended upon for a proof of concept in the mijndenhaag-pwa.

Example code for generating JWT (taken from postman)

function base64url(source) {
    // Encode in classical base64
    encodedSource = CryptoJS.enc.Base64.stringify(source);

    // Remove padding equal characters
    encodedSource = encodedSource.replace(/=+$/, '');

    // Replace characters according to base64url specifications
    encodedSource = encodedSource.replace(/\+/g, '-');
    encodedSource = encodedSource.replace(/\//g, '_');

    return encodedSource;
}

function addIAT(request) {
//  var iat = Math.floor(Date.now() / 1000) + 257;
    var iat = Math.floor(Date.now() / 1000);
    data.iat = iat;
    return data;
}

var header = {
    "typ": "JWT",
    "alg": "HS256"
};

var data = {
    "iss": pm.environment.get("client_id"),
    "client_id": pm.environment.get("client_id"),
    "user_id": "123",
    "user_representation": "Demo User"
};

data = addIAT(data);

var secret = pm.environment.get("secret");

// encode header
var stringifiedHeader = CryptoJS.enc.Utf8.parse(JSON.stringify(header));
var encodedHeader = base64url(stringifiedHeader);

// encode data
var stringifiedData = CryptoJS.enc.Utf8.parse(JSON.stringify(data));
var encodedData = base64url(stringifiedData);

// build token
var token = encodedHeader + "." + encodedData;

var signature = CryptoJS.HmacSHA256(token, secret);
signature = base64url(signature);

var signedToken = token + "." + signature;

[ogjtech]

As a developer I want a basic nodejs server, so that I implement the other gateway stories.

What is "basic"? Define what functionality should be developed, define if and where it should be hosted, when is the server classified as "a basic NodeJS server"? @mjcarsjens, @vwmvanbeek are there any criteria to this? I added some that seem obvious to me from a technical perspective.

[vwmvanbeek]

@mjcarsjens deze laat ik aan jou