Feat/token-based-authentication

[muttaqin1]

1- Generate tokens.
2- Save tokens in db.
2 Configure eslint & prettier.

Partially resolved issue #46

[bellaabdelouahab]

here is some review on your pr , all tho I'm not sure if you tested this with e2e test

[muttaqin1]

here is some review on your pr , all tho I'm not sure if you tested this with e2e test

users/me - response after using the access token.

{
  "status": "success",
  "data": {
    "_id": "64bfc7432d3047bcf6db8fe9",
    "name": "muttaqin",
    "email": "test1112@gmail.com",
    "authorities": [
      "UPDATE_CALANDER"
    ],
    "restrictions": [],
    "roles": [
      "USER"
    ],
    "active": false,
    "accessRestricted": false,
    "githubOauthAccessToken": null,
    "deleted": false,
    "createdBy": "System",
    "createdAt": "2023-07-25T12:59:47.862Z",
    "updatedAt": "2023-07-25T12:59:47.862Z",
    "__v": 0
  }
}

/login

{
  "tokens": {
    "accessToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjY0YmZjNzQzMmQzMDQ3YmNmNmRiOGZlOSIsImlhdCI6MTY5MDMwOTkzOSwiZXhwIjoxNjkwMzk2MzM5fQ.FCpg4KQPSfyZ7FYjbkfBAMgzryDlf4ZmBClNG5LYPaQ",
    "refreshToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpZCI6IjY0YmZjNzQzMmQzMDQ3YmNmNmRiOGZlOSIsImlhdCI6MTY5MDMwOTkzOSwiZXhwIjoxNjkwMzk2MzM5fQ.FCpg4KQPSfyZ7FYjbkfBAMgzryDlf4ZmBClNG5LYPaQ"
  },
  "data": {
    "user": {
      "_id": "64bfc7432d3047bcf6db8fe9",
      "name": "muttaqin",
      "email": "test1112@gmail.com",
      "authorities": [
        "UPDATE_CALANDER"
      ],
      "restrictions": [],
      "roles": [
        "USER"
      ],
      "active": false,
      "accessRestricted": false,
      "deleted": false,
      "createdBy": "System",
      "createdAt": "2023-07-25T12:59:47.862Z",
      "updatedAt": "2023-07-25T12:59:47.862Z",
      "__v": 0
    }
  }
}

I can add the test cases for this feature if you want.
@bellaabdelouahab

[muttaqin1]

I will add the token refresh and logout controller soon.

[bellaabdelouahab]

sure i would use some help, because now im writing tests for roles but first i need the current pr to be completed so that i move on to next steps

[bellaabdelouahab]

wait but why the refresh token is the same as access token
@muttaqin1

[muttaqin1]

wait but why the refresh token is the same as access token
@muttaqin1

where?
The base64uri encoded strings are kinda identical to one another.
@bellaabdelouahab

[muttaqin1]

ooh😂😂,
The header payload and secret for the access & refresh token are same.

exports.ACCESS_TOKEN_SECRET = process.env.ACCESS_TOKEN_SECRET || 'sdfsdf';
exports.ACCESS_TOKEN_EXPIRY_TIME = process.env.ACCESS_TOKEN_EXPIRY_TIME || '1d';
exports.REFRESH_TOKEN_SECRET = process.env.REFRESH_TOKEN_SECRET || 'sdfsdf';
exports.REFRESH_TOKEN_EXPIRY_TIME = process.env.REFRESH_TOKEN_EXPIRY_TIME || '1d';

@bellaabdelouahab

[bellaabdelouahab]

ah 😂okay @muttaqin1

[bellaabdelouahab]

ooh😂😂, The header payload and secret for the access & refresh token are same.

exports.ACCESS_TOKEN_SECRET = process.env.ACCESS_TOKEN_SECRET || 'sdfsdf';
exports.ACCESS_TOKEN_EXPIRY_TIME = process.env.ACCESS_TOKEN_EXPIRY_TIME || '1d';
exports.REFRESH_TOKEN_SECRET = process.env.REFRESH_TOKEN_SECRET || 'sdfsdf';
exports.REFRESH_TOKEN_EXPIRY_TIME = process.env.REFRESH_TOKEN_EXPIRY_TIME || '1d';

@bellaabdelouahab

i think you missed this :

jwt env variable already exist , should i remove the duplicated value ?
@muttaqin1

[muttaqin1]

yes.
Sorry, i haven’t noticed that.
@bellaabdelouahab