Odin

An authorisation and authentication plug in for Mengmom.

Build requirements

• A modern C++ compiler (at least C++14).
• Postgres 9.5 (or later). You will need libpq's development package installed.
• The Mengmom web server with the fostgres plug in.

To do a build it's probably easiest to check out Mengmom and start there.

Modules

Odin is split into several modules allowing you some flexibility in how to deploy it.

Configuration and administration

There is a command line tool for administering and setting up Odin systems. The command line tool can be run with a range of permissions to enable to anything from setting up and configuring new Odin modules to user administration.

Module dependencies

graph RL

subgraph core
    identity["identity(id)"]

    identity_expiry_ledger["identity_expiry_ledger(reference, identity_id)"]
    identity_expiry_ledger-->identity

    identity_record["identity_record(id)"]
    identity-->identity_record
    merge_record["merge_record(from_identity_id, to_identity_id)"]
    merge_record-->identity_record
    merge_record-->identity_record
end

subgraph app
    app_access_policy["app_access_policy(access_policy)"]

    app_data_sharing_policy["app_data_sharing_policy(data_sharing_policy)"]

    app["app(app_id)"]
    app-->app_access_policy
    app-->app_data_sharing_policy
    app-->identity

    app_role["app_role(app_id, role)"]
    app_role-->app

    app_user_installation_id_ledger["app_user_installation_id_ledger(reference, app_id, identity_id)"]
    app_user_installation_id_ledger-->app_user

    app_user["app_user(app_id, identity_id)"]
    app_user-->app
    app_user-->identity

    app_user_role["app_user_role(app_id, identity_id, role)"]
    app_user_role-->app_role
    app_user_role-->app_user
end

subgraph authn
    credentials["credentials(identity_id)"]
    credentials-->identity

    login_failed["login_failed(username, attempt)"]

    login_success-->credentials
end

subgraph authz
    group["group(slug)"]
    group_membership["group_membership(identity_id, group_slug)"]
    group_membership-->identity
    group_membership-->group

    permission["permission(slug)"]
    group_grant["group_grant(group_slug, permission_slug)"]
    group_grant-->permission
    group_grant-->group
end



subgraph opts/email
    identity_email_ledger["identity_email_ledger(reference, identity_id)"]
    identity_email_ledger-->identity
end

subgraph opts/facebook
    facebook_credentials["facebook_credentials(identity_id)"]
    facebook_credentials-->identity
end

subgraph opts/full-name
    identity_full_name_ledger["identity_full_name_ledger(reference, identity_id)"]
    identity_full_name_ledger-->identity

end

subgraph opts/google
    google_credentials["google_credentials(identity_id)"]
    google_credentials-->identity
end

subgraph opts/installation-id
    identity_installation_id_ledger["identity_installation_id_ledger(reference, identity_id)"]
    identity_installation_id_ledger-->identity
end

subgraph opts/logout
    logout_ledger["logout_ledger(reference, identity_id)"]
    logout_ledger-->identity
end