User Microservice for Sportiq Project

This microservice is responsible for registering and authenticating users, as well as for working on JWT. DB for Blacklist and KDS is defined here.

Related Sportiq services

• API Gateway
• Event Service
• Subscription Service
• Frontend App

Documentation

OpenAPI - https://str1kez.github.io/SportiqUserService

KDS and JWT Blacklist

Build Docker-image with cronjob on updating secret key for signing JWT (every 15 min by default):

make build-kds

It improves user security. Generation of secret key is based on openssl.

Microservice

Bcrypt was used as a password hashing function with 12 rounds. It reduces the chances to hack password via table methods.
HMAC-SHA-256 was used to generate the JWT signature.
UUID v6 is the primary key in user table, which increases the efficiency of caching operations.

Startup

1. Create .env file and fill it:

   make env
   

2. Run migrations:

   make upgrade head
   

3. Create Docker-image:

   make build
   

4. Run the microservice:

   make up
   

make down - to stop