Auth: Add support for JWT token

tomfa commented 3 years ago

Required fields in JWT

sub: userId
iss: url specific to account. E.g. https://api.externaluserhomepage.com
exp: Unix timestamp / 1000. E.g. 1577836800 for 2020-01-01T00:00:00Z
www.vailable.eu: JSON object containing account and permissions.

{
  "sub": "1312",
  "iss": "https://YOUR_DOMAIN",
  "exp": 1577836800,
  "www.vailable.eu": {
    "account": "vailable-account-userid",
    "permissions": [
      "admin/*",  // allows everything
      "user/*",  // allows booking management on behalf of -all- users
      "user/1312/*. // allows booking management on behalf of user "1312",
    ]
  }
}

The issuer must expose well known jwks at https://YOUR_DOMAIN/.well-known/jwks.json, see https://docs.cidaas.com/standard-endpoints/server-jwk-set.html#31-well-knownjwksjson

tomfa commented 3 years ago

:tada: This issue has been resolved in version 1.0.0-beta.6 :tada:

The release is available on:

Your semantic-release bot :package::rocket:

tomfa commented 3 years ago

:tada: This issue has been resolved in version 1.0.0 :tada:

The release is available on:

Your semantic-release bot :package::rocket:

tomfa / booking-service

Auth: Add support for JWT token #20