Identities Service

This includes the service that manages all the events in the Identities Domain.

Repository Structure

• Dockerfile: running the service just do a docker run
• docker-compose.yml: starts your development setup including the swagger editor as well as a mock server based on the swagger.yaml file located in /swagger/ directory
• /api: including the python modules for the api implementation (described in the sections below)
• /lib: includes currently only the library which implements a customer token validation.

Develop

You either can work with the dockerfile which includes all the commands to start the server or you develop locally which is suggested for development speed.

1. Create your swagger file including examples (they are used for the mock) and place it under /swagger/swagger.yaml
2. Setup your environment by doing

virtualenv venv --python=python3
source venv/bin/activate
# install pylint
pip install pylint
pip install -r requirements.txt

1. Then start the connxion mock server based on the swagger file: connexion run swagger/swagger.yaml --mock=all
2. Validate this with your customers like external API developers and your frontend developer and improve the API.
3. Then implement the API resources and methods under api.

Deploy and Run

It is suggested to use the docker container for your deployment using the container runtime of your choice.

We save the environment config:

# config for mongodb
export MONGODB_URL= mongodb://sampleUser:samplePassword@localhost:27017/identities // mongodb://mongodb:27017/test
export MONGODB_USERNAME=sampleUser
export MONGODB_PASSWORD=samplePassword
export MONGODB_ROOT_PASSWORD=samplePassword
# config apigee
export [email protected]
export apigee_client_secret=samplePassword
export apigee_management_endpoint=https://api.enterprise.apigee.com/v1/organizations/denseidel-trial
export apigee_auth_endpoint=https://login.apigee.com/oauth/token
#config auth0
export auth_client_id=dsfdfndfernd34fdfn3234djfdf
export auth_client_secret=ldfjn3f3o23nf23lfj0j23fn2lfn23nf232nf23nf2nfn32fn2ffn2
export auth0_endpoint=https://d10l.eu.auth0.com

Connect to Istio MongoDB with port forwarding

kubectl -n default port-forward \
$(kubectl -n default get pod -l app=mongodb -o jsonpath='{.items[0].metadata.name}') \
27017:27017 &

Auth0 Rules Code to create identity on first login:

function (user, context, done) {
  user.app_metadata = user.app_metadata || {};
  if (user.app_metadata.recordedAsLead) {
    return done(null,user,context);
  }

  
  //Populate the variables below with appropriate values
  var Auth0_CLIENT_ID = '29AbPa1fgzLU7EGInA7j5NnE6NX1WZuo';
  var Auth0_CLIENT_SECRET = 'qZCM5uo2fxfmte9dDOO5T9Q04oZJQcRJg5sjH1SVakz0h-jwLH6OYQrfhpz90GOw';
  var audiance = 'https://api.d10l.de';

  getAccessToken(Auth0_CLIENT_ID, Auth0_CLIENT_SECRET, audiance,
    function(r) {
      if (!r.access_token) {
        return;
      }
      var url = 'http://api.d10l.de/identities/' + user.user_id;
      createIdentity(url, r.access_token, function (e, result) {
        if (e || !result || !result.identity_id) {
          return;
        }

        user.app_metadata.recordedAsLead = true;
        auth0.users.updateAppMetadata(user.user_id, user.app_metadata);
      });
    });

  function createIdentity(url, access_token, callback){
    //Can use many more fields
    var data = {
      identity_id: user.user_id
    };

    request.post({
      url: url,
      headers: {
        "Authorization": "Bearer " + access_token
      },
      json: data
      }, function(e,r,b) {
        return callback(e, b);
      });
  }
  
  //Obtains a SFCOM access_token with user credentials
  function getAccessToken(client_id, client_secret, audience, callback) {
    request.post({
      url: 'https://d10l.eu.auth0.com/oauth/token',
      form: {
        grant_type: 'client_credentials',
        client_id: client_id,
        client_secret: client_secret,
        audience: audience
      }}, function(e,r,b) {
        return callback(JSON.parse(b));
      });
  }

  // don’t wait for the SF API call to finish, return right away (the request will continue on the sandbox)`
  done(null, user, context);
}