Implement authentication and user modules

.gitignore

@@ -13,3 +13,4 @@ jsconfig.json
 public
 *.iml
 .npmrc
+packages/server/sessions

config/auth.js

@@ -0,0 +1,53 @@
+export default {
+  secret: process.env.NODE_ENV === 'test' ? 'secret for tests' : process.env.AUTH_SECRET,
+  session: {
+    enabled: false,
+    secret: 'secret',
+    store: null,
+    cookie: { maxAge: 60000 },
+    resave: false,
+    saveUninitialized: false
+  },
+  jwt: {
+    enabled: true,
+    tokenExpiresIn: '1m',
+    refreshTokenExpiresIn: '7d'
+  },
+  password: {
+    requireEmailConfirmation: true,
+    sendPasswordChangesEmail: true,
+    minLength: 8,
+    enabled: true
+  },
+  social: {
+    facebook: {
+      enabled: false,
+      clientID: process.env.FACEBOOK_CLIENTID,
+      clientSecret: process.env.FACEBOOK_CLIENTSECRET,
+      callbackURL: '/api/auth/facebook/callback',
+      scope: ['email'],
+      profileFields: ['id', 'emails', 'displayName']
+    },
+    github: {
+      enabled: false,
+      clientID: process.env.GITHUB_CLIENTID,
+      clientSecret: process.env.GITHUB_CLIENTSECRET,
+      callbackURL: '/api/auth/github/callback',
+      scope: ['user:email']
+    },
+    linkedin: {
+      enabled: false,
+      clientID: process.env.LINKEDIN_CLIENTID,
+      clientSecret: process.env.LINKEDIN_CLIENTSECRET,
+      callbackURL: '/api/auth/linkedin/callback',
+      scope: ['r_liteprofile']
+    },
+    google: {
+      enabled: false,
+      clientID: process.env.GOOGLE_CLIENTID,
+      clientSecret: process.env.GOOGLE_CLIENTSECRET,
+      callbackURL: '/api/auth/google/callback',
+      scope: ['https://www.googleapis.com/auth/userinfo.email', 'https://www.googleapis.com/auth/userinfo.profile']
+    }
+  }
+};

config/index.js

@@ -1,4 +1,5 @@
 export { default as app } from './app';
+export { default as auth } from './auth';
 export { default as db } from './db';
 export { default as mailer } from './mailer';
 export { default as analytics } from './analytics';

modules/authentication/client-react/access/AccessModule.ts

@@ -0,0 +1,49 @@
+import ClientModule, { ClientModuleShape } from '@restapp/module-client-react';
+
+/**
+ * Access module which provides authentication functions
+ */
+export interface AccessModuleShape extends ClientModuleShape {
+  // login handlers from all authentication modules
+  login?: Array<(callback?: () => void) => Promise<void>>;
+  // logout handlers from all authentication modules
+  logout?: Array<(callback?: () => void) => Promise<void>>;
+}
+
+interface AccessModule extends AccessModuleShape {}
+
+class AccessModule extends ClientModule {
+  /**
+   * Constructs access module representation, that folds all the feature modules
+   * into a single module represented by this instance.
+   *
+   * @param modules feature modules
+   */
+  constructor(...modules: AccessModuleShape[]) {
+    super(...modules);
+  }
+
+  /**
+   * call all methods of login in authentication modules.
+   *
+   * @returns merge login methods
+   */
+  public async doLogin(callback?: () => void) {
+    for (const login of this.login) {
+      await login(callback);
+    }
+  }
+
+  /**
+   * call all methods of logout in authentication modules.
+   *
+   * @returns merge logout methods
+   */
+  public async doLogout(callback?: () => void) {
+    for (const logout of this.logout) {
+      await logout(callback);
+    }
+  }
+}
+
+export default AccessModule;

modules/authentication/client-react/access/index.tsx

@@ -0,0 +1,47 @@
+import * as React from 'react';
+import jwt from './jwt';
+import session from './session';
+import AccessModule from './AccessModule';
+
+interface PageReloaderProps {
+  children?: React.ReactElement;
+}
+
+interface AuthPageReloaderProps extends PageReloaderProps {}
+
+const ref: React.RefObject<any> = React.createRef();
+
+const rerenderApp = () => {
+  ref.current.reloadPage();
+};
+
+const login = async (_clearStore?: () => void) => {
+  rerenderApp();
+};
+
+const logout = async (clearStore: () => void) => {
+  await clearStore();
+  rerenderApp();
+};
+
+class PageReloader extends React.Component<PageReloaderProps> {
+  public state = {
+    key: 1
+  };
+
+  public reloadPage() {
+    this.setState({ key: this.state.key + 1 });
+  }
+
+  public render() {
+    return React.cloneElement(this.props.children, { key: this.state.key });
+  }
+}
+
+const AuthPageReloader = ({ children }: AuthPageReloaderProps) => <PageReloader ref={ref}>{children}</PageReloader>;
+
+export default new AccessModule(jwt, session, {
+  dataRootComponent: [AuthPageReloader],
+  login: [login],
+  logout: [logout]
+});

modules/authentication/client-react/access/jwt/index.ts

@@ -0,0 +1,100 @@
+import axios from 'axios';
+import { getItem, setItem, removeItem } from '@restapp/core-common/clientStorage';
+import { Middleware } from 'redux';
+import settings from '../../../../../settings';
+import AccessModule from '../AccessModule';
+
+enum TokensEnum {
+  accessToken = 'accessToken',
+  refreshToken = 'refreshToken'
+}
+
+interface Tokens {
+  [key: string]: TokensEnum;
+}
+
+const saveTokens = async ({ accessToken, refreshToken }: Tokens) => {
+  await setItem(TokensEnum.accessToken, accessToken);
+  await setItem(TokensEnum.refreshToken, refreshToken);
+};
+
+const removeTokens = async () => {
+  await removeItem(TokensEnum.accessToken);
+  await removeItem(TokensEnum.refreshToken);
+};
+
+const refreshAccessToken = async () => {
+  try {
+    const { data } = await axios.post(`${__API_URL__}/refreshToken`, {
+      refreshToken: await getItem('refreshToken')
+    });
+    if (data) {
+      const { accessToken, refreshToken } = data;
+      await saveTokens({ accessToken, refreshToken });
+    } else {
+      await removeTokens();
+    }
+  } catch (e) {
+    await removeTokens();
+    throw e;
+  }
+};
+
+const reduxMiddleware: Middleware = ({ dispatch }) => next => action => {
+  const { types, status, ...rest } = action;
+  (async () => {
+    try {
+      if (status === 401) {
+        try {
+          await refreshAccessToken();
+          const newAction = { ...action, status: null };
+          return dispatch(newAction);
+        } catch (e) {
+          throw e;
+        }
+      }
+      return next(action);
+    } catch (e) {
+      next({
+        type: types.FAIL,
+        ...rest
+      });
+      throw e;
+    }
+  })();
+};
+
+axios.interceptors.request.use(async config => {
+  const accessToken = await getItem(TokensEnum.accessToken);
+
+  const arrayExceptions = ['login', 'refreshTokens'];
+  const checkInclude = arrayExceptions.some(exception => config.url.includes(exception));
+
+  config.headers = !checkInclude && accessToken ? { Authorization: `Bearer ${accessToken}` } : {};
+  return config;
+});
+
+axios.interceptors.response.use(async (res: any) => {
+  if (res.config.url.includes('login')) {
+    if (!!res.data && res.data.tokens) {
+      const {
+        data: {
+          tokens: { accessToken, refreshToken }
+        }
+      } = res;
+      await saveTokens({ accessToken, refreshToken });
+      res.data = res.data.user;
+      return res;
+    } else {
+      await removeTokens();
+    }
+  }
+  return res;
+});
+
+export default (settings.auth.jwt.enabled
+  ? new AccessModule({
+      logout: [removeTokens],
+      reduxMiddleware: [reduxMiddleware]
+    })
+  : undefined);

modules/authentication/client-react/access/session/index.ts

@@ -0,0 +1,12 @@
+import settings from '../../../../../settings';
+import AccessModule from '../AccessModule';
+import axios from 'axios';
+
+const logout = async () => {
+  axios.post(`${__API_URL__}/logout`);
+};
+export default (settings.auth.session.enabled
+  ? new AccessModule({
+      logout: [logout]
+    })
+  : undefined);

modules/authentication/client-react/helpers/index.ts

@@ -0,0 +1,12 @@
+import url from 'url';
+import { Constants } from 'expo';
+
+export default function buildRedirectUrlForMobile(authType: string) {
+  const { protocol, hostname, port } = url.parse(__WEBSITE_URL__);
+  const expoHostname = `${url.parse(Constants.linkingUri).hostname}.nip.io`;
+  const urlHostname = process.env.NODE_ENV === 'production' ? hostname : expoHostname;
+
+  return `${protocol}//${urlHostname}${port ? ':' + port : ''}/api/auth/${authType}?expoUrl=${encodeURIComponent(
+    Constants.linkingUri
+  )}`;
+}

modules/authentication/client-react/index.ts

@@ -0,0 +1,5 @@
+import authentication from './access';
+
+export * from './social';
+
+export default authentication;

modules/authentication/client-react/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "@restapp/authentication-client-react",
+  "version": "0.1.0",
+  "private": true,
+  "dependencies": {
+    "@restapp/core-common": "^0.1.0"
+  }
+}

modules/authentication/client-react/social/facebook/containers/FacebookButton.css

@@ -0,0 +1,39 @@
+.facebookBtn {
+  min-width: 320px;
+  margin-top: 10px;
+  background-color: #3769ae;
+  border-color: #3769ae;
+  display: flex;
+  justify-content: flex-start;
+  align-items: center;
+}
+
+.facebookBtn:hover {
+   background-color: #17427e;
+    border-color: #17427e;
+}
+
+.iconContainer { 
+  display: flex;
+  flex: 1 1 10%;
+  justify-content: flex-start;
+   align-items: center; 
+}
+
+.separator { 
+  height: 28px;
+  width: 1px;
+  background-color: #fff !important;
+  margin-left: 10px;
+}
+
+.btnText { 
+  display: flex;
+  justify-content: flex-start; 
+  flex: 5
+}
+
+.facebookIcon { 
+  color: #fff;
+  font-size: 30px;
+}