[$300] Project UBahn | Update Login to use accounts.topcoder.com

[wdprice]

currently login flow goes through topcoder.auth0.com

Need to use accounts.topcoder.com for proper cross-site platform handling.

[callmekatootie]

Note to self - check out Laushcer or Vorbote for how we did this...

[callmekatootie]

@cwdcwd Is this available on npm - https://github.com/appirio-tech/accounts-app ? Lauscher seems to have copied code from this repo (some minification issues). Need to know if I should go the same way in this app or if there's a module that I can make use of...

[cwdcwd]

let's loop in @sachin-maheshwari for how best to incorporate the new login stuff. @sachin-maheshwari can we publish the new login component to npm for inclusion in our apps?

[sachin-maheshwari]

@cwdcwd I am investigating, will share my thoughts.

[sachin-maheshwari]

As i explored I think, we need to authenticate and authorize in this way - https://github.com/appirio-tech/connect-app/blob/test/auth0lib/src/components/AuthenticatedComponent.jsx
Whole "new Auth flow" releated changes we can find here - topcoder-archive/connect-app#4082

In general, for authentication, currently we are using account-app (that is authenticating and setting topcoder cookies (JWT tokens) in browsers).

In authorization, we have common logic(lib) to read and validate that cookies (JWT token). For example - "New Auth Flow" https://github.com/topcoder-platform/tc-auth-lib/blob/dev/src/connector-wrapper.js#L68
And in current flow - https://github.com/appirio-tech/accounts-app/blob/dev/connector/connector-wrapper.js#L64

[sachin-maheshwari]

I think, in this app we are doing like -
Authorization - https://github.com/topcoder-platform/u-bahn-app/blob/3b8254481a5f020d2ec58290ec5fd3de05fedf9a/client/src/pages/Search/index.jsx#L72

Authentication - https://github.com/topcoder-platform/u-bahn-app/blob/develop/client/src/react-auth0-spa.js#L48

[cwdcwd]

@sachin-maheshwari are any of these pieces publishable via npm as modules so we can drop them into our code easily?

[sachin-maheshwari]

@cwdcwd no exactly, but can include like this -
For "new flow" - https://github.com/appirio-tech/connect-app/blob/test/auth0lib/package.json#L153
For "current flow" - https://github.com/appirio-tech/connect-app/blob/dev/package.json#L153

[cwdcwd]

I'm not a big fan or references by git url. Can I add a github action to publish "tc-auth-lib": "git+https://github.com/topcoder-platform/tc-auth-lib.git#dev" out to our NPM modules?

[sachin-maheshwari]

You can publish but some code clean-up required (like web-assets folder not related to this and iframe and refresh token logic).

[cwdcwd]

that's fine. we'll just do another release once that happens.I'll add a github action to publish

[callmekatootie]

Bump. Just checking in if we have the module to use

[cwdcwd]

@sachin-maheshwari do you care if I change the package to be @topcoder-platform/tc-auth-lib ?
I want to publish it with the rest of our topcoder-platform modules