flolu / auth

🔐 Refresh/Access Token Authentication Demo with Client Side Rendering, Server Side Rendering and Websockets

Fullstack Authentication

Access/Refresh Token Authentication Demo with Node.js And Typescript

Watch the YouTube Tutorial

Stack

Backend: Node.js, Typescript, MongoDB, Kubernetes

Frontend: Next.js, Typescript

DevOps: Docker, Terraform, Kubernetes, Google Cloud

Usage

Requirements: Docker, Docker Compose, Yarn, Node.js

Optional: Terraform, Google Cloud SDK

Setup

• make setup
• Create GitHub OAuth app here
  • Set "Homepage URL" to http://localhost:3000
  • Set "Authorization callback URL" to http://localhost:3000/github
  • Set GITHUB_CLIENT_ID in .env.development
  • Set NEXT_PUBLIC_GITHUB_CLIENT_ID in client/.env.development
  • "Generate a new client secret"
  • Set GITHUB_CLIENT_SECRET in .env.development

Development

• make client (Start Next.js development server, http://localhost:3000)
• make backend (Start development backend services)

Codebase

Services

• client Next.js client (web application)
• api Node.js server (http api)
• realtime Node.js server (websocket server)
• shared Typescript lib (shared code)
• infrastructure Terraform (configurations to deploy application in the cloud)

Deployment

Commands

• make init-infrastructure (Initialize Terraform)
• make apply (Apply cloud resources, ~15 minutes)
• make deploy (Build and deploy services to Kubernetes cluster)
• make destroy (Destroy cloud resources)
• make client-image (Build and push client Docker image)
• make api-image (Build and push api Docker image)
• make realtime-image (Build and push Docker image)

Step by step guide

1. Configure variables in Makefile
   • GCP_PROJECT You can create a project here
   • TF_BUCKET Choose a unique bucket name for Terraform state
   • EMAIL Only used for generating SSL certificates
   • GKE_ZONE Choose a region or zone from this list for your Kubernetes cluster
   • DOMAIN
2. Sign into your project gcloud auth application-default login
3. Create the bucket for storing Terraform state (make create-terraform-bucket)
4. Set terraform.backend.bucket in infrastructure/main.tf to TF_BUCKET
5. Insert secrets into Google Cloud Secret Manager
   • GitHub OAuth (create here)
     • Set "Authorization callback URL" to https://api.${DOMAIN}/github
     • github_client_id
     • github_client_secret
   • Secrets (generate here)
     • refresh_token_secret
     • access_token_secret
   • MongoDB Atlas (create a free cluster here)
     • Navigate to Project Settings -> Access Manager -> API Keys -> Create API Key -> Select Project Owner
     • mongodbatlas_public_key
     • mongodbatlas_private_key
     • atlas_project_id (found under Settings)
6. Add 0.0.0.0/0 to your MongoDB Atlas project "IP Access List" (Under Network Access)
7. Enable Container Registry in your GCP console
8. make init-infrastructure
9. make deploy
10. Go to Google Cloud DNS, main-zone, copy the NS record to your domain registrar
11. Uncomment code block in infrastructure/modules/kubernetes-cert-manager/main.tf and run make apply
12. The app should be live at https://${DOMAIN}

• Every time you want to deploy changes, just run make deploy

auth's Issues

cookies are not being set in browser

Any ideas on why the cookies themselves are not set?

After the github auth, calling setTokens, the cookie is not shown in the browser > cookies.