- Add VerifyPassword RPC to Identity Service - Added to proto file and generated code - Implemented in Identity Service gRPC server - Added to Identity Service client interface and gRPC client - Complete RefreshToken implementation - Store refresh tokens in database using RefreshToken entity - Validate refresh tokens with expiration checking - Revoke refresh tokens on logout and token rotation - Integrate Authz Service for role retrieval - Added AuthzServiceClient to Auth Service - Get user roles during login and token refresh - Gracefully handle Authz Service failures - Require JWT secret in configuration - Removed default secret fallback - Service fails to start if JWT secret is not configured - Fix Consul health checks for Docker - Services now register with Docker service names (e.g., audit-service) - Allows Consul (in Docker) to reach services via Docker DNS - Health checks use gRPC service names instead of localhost This completes all TODOs in auth_service_fx.go and fixes the Consul health check failures in Docker environments.
149 lines
3.6 KiB
Protocol Buffer
149 lines
3.6 KiB
Protocol Buffer
syntax = "proto3";
|
|
|
|
package identity.v1;
|
|
|
|
option go_package = "git.dcentral.systems/toolz/goplt/api/proto/generated/identity/v1;identityv1";
|
|
|
|
// IdentityService provides user management operations.
|
|
service IdentityService {
|
|
// GetUser retrieves a user by ID.
|
|
rpc GetUser(GetUserRequest) returns (GetUserResponse);
|
|
|
|
// GetUserByEmail retrieves a user by email address.
|
|
rpc GetUserByEmail(GetUserByEmailRequest) returns (GetUserByEmailResponse);
|
|
|
|
// CreateUser creates a new user.
|
|
rpc CreateUser(CreateUserRequest) returns (CreateUserResponse);
|
|
|
|
// UpdateUser updates an existing user.
|
|
rpc UpdateUser(UpdateUserRequest) returns (UpdateUserResponse);
|
|
|
|
// DeleteUser deletes a user.
|
|
rpc DeleteUser(DeleteUserRequest) returns (DeleteUserResponse);
|
|
|
|
// VerifyEmail verifies a user's email address using a verification token.
|
|
rpc VerifyEmail(VerifyEmailRequest) returns (VerifyEmailResponse);
|
|
|
|
// RequestPasswordReset requests a password reset token.
|
|
rpc RequestPasswordReset(RequestPasswordResetRequest) returns (RequestPasswordResetResponse);
|
|
|
|
// ResetPassword resets a user's password using a reset token.
|
|
rpc ResetPassword(ResetPasswordRequest) returns (ResetPasswordResponse);
|
|
|
|
// VerifyPassword verifies a user's password.
|
|
rpc VerifyPassword(VerifyPasswordRequest) returns (VerifyPasswordResponse);
|
|
}
|
|
|
|
// User represents a user in the system.
|
|
message User {
|
|
string id = 1;
|
|
string email = 2;
|
|
string username = 3;
|
|
string first_name = 4;
|
|
string last_name = 5;
|
|
bool email_verified = 6;
|
|
int64 created_at = 7;
|
|
int64 updated_at = 8;
|
|
}
|
|
|
|
// GetUserRequest contains a user ID.
|
|
message GetUserRequest {
|
|
string id = 1;
|
|
}
|
|
|
|
// GetUserResponse contains a user.
|
|
message GetUserResponse {
|
|
User user = 1;
|
|
}
|
|
|
|
// GetUserByEmailRequest contains an email address.
|
|
message GetUserByEmailRequest {
|
|
string email = 1;
|
|
}
|
|
|
|
// GetUserByEmailResponse contains a user.
|
|
message GetUserByEmailResponse {
|
|
User user = 1;
|
|
}
|
|
|
|
// CreateUserRequest contains user data for creation.
|
|
message CreateUserRequest {
|
|
string email = 1;
|
|
string username = 2;
|
|
string password = 3;
|
|
string first_name = 4;
|
|
string last_name = 5;
|
|
}
|
|
|
|
// CreateUserResponse contains the created user.
|
|
message CreateUserResponse {
|
|
User user = 1;
|
|
}
|
|
|
|
// UpdateUserRequest contains user data for update.
|
|
message UpdateUserRequest {
|
|
string id = 1;
|
|
optional string email = 2;
|
|
optional string username = 3;
|
|
optional string first_name = 4;
|
|
optional string last_name = 5;
|
|
}
|
|
|
|
// UpdateUserResponse contains the updated user.
|
|
message UpdateUserResponse {
|
|
User user = 1;
|
|
}
|
|
|
|
// DeleteUserRequest contains a user ID.
|
|
message DeleteUserRequest {
|
|
string id = 1;
|
|
}
|
|
|
|
// DeleteUserResponse indicates success.
|
|
message DeleteUserResponse {
|
|
bool success = 1;
|
|
}
|
|
|
|
// VerifyEmailRequest contains a verification token.
|
|
message VerifyEmailRequest {
|
|
string token = 1;
|
|
}
|
|
|
|
// VerifyEmailResponse indicates success.
|
|
message VerifyEmailResponse {
|
|
bool success = 1;
|
|
}
|
|
|
|
// RequestPasswordResetRequest contains an email address.
|
|
message RequestPasswordResetRequest {
|
|
string email = 1;
|
|
}
|
|
|
|
// RequestPasswordResetResponse indicates success.
|
|
message RequestPasswordResetResponse {
|
|
bool success = 1;
|
|
}
|
|
|
|
// ResetPasswordRequest contains a reset token and new password.
|
|
message ResetPasswordRequest {
|
|
string token = 1;
|
|
string new_password = 2;
|
|
}
|
|
|
|
// ResetPasswordResponse indicates success.
|
|
message ResetPasswordResponse {
|
|
bool success = 1;
|
|
}
|
|
|
|
// VerifyPasswordRequest contains email and password.
|
|
message VerifyPasswordRequest {
|
|
string email = 1;
|
|
string password = 2;
|
|
}
|
|
|
|
// VerifyPasswordResponse contains the user if password is valid.
|
|
message VerifyPasswordResponse {
|
|
User user = 1;
|
|
}
|
|
|