@sourceloop/user-tenant-service / Exports
@sourceloop/user-tenant-service¶
Overview¶
This microservice efficiently supports tenant-specific operations, empowering you to leverage the benefits of multitenancy.
- Multi-tenant support
- Tenant management with dedicated functionality
- Seamless team management within each tenant
- User management at both the team and tenant levels
- Role management specific to each tenant
- Efficient user permission management across the entire system.
Installation¶
Install UserTenantServiceComponent using npm
;
Usage¶
- Create a new Loopback4 Application (If you don't have one already)
lb4 testapp
- Install the authentication service
npm i @sourceloop/user-tenant-service
- Set the environment variables.
- Run the migrations.
- Add the
UserTenantServiceComponent
to your Loopback4 Application (inapplication.ts
). - Set up a Loopback4 Datasource with
dataSourceName
property set toAuthDb
. You can see an example datasource here. - Bind any of the custom providers you need.
-
Using with Sequelize
This service supports Sequelize as the underlying ORM using @loopback/sequelize extension. And in order to use it, you'll need to do following changes.
-
To use Sequelize in your application, add following to application.ts:
- Use the
SequelizeDataSource
in your datasource as the parent class. Refer this for more.
-
- Start the application
npm start
Environment Variables¶
Name | Required | Description | Default Value |
---|---|---|---|
NODE_ENV | Y | Node environment value, i.e. `dev`, `test`, `prod | |
LOG_LEVEL | Y | Log level value, i.e. `error`, `warn`, `info`, `verbose`, `debug` | |
DB_HOST | Y | Hostname for the database server. | |
DB_PORT | Y | Port for the database server. | |
DB_USER | Y | User for the database. | |
DB_PASSWORD | Y | Password for the database user. | |
DB_DATABASE | Y | Database to connect to on the database server. | |
DB_SCHEMA | Y | Database schema used for the data source. In PostgreSQL, this will be `public` unless a schema is made explicitly for the service. | |
REDIS_HOST | Y | Hostname of the Redis server. | |
REDIS_PORT | Y | Port to connect to the Redis server over. | |
REDIS_URL | Y | Fully composed URL for Redis connection. Used instead of other settings if set. | |
REDIS_PASSWORD | Y | Password for Redis if authentication is enabled. | |
REDIS_DATABASE | Y | Database within Redis to connect to. | |
JWT_PRIVATE_KEY | Y | Asymmetric signing key of the JWT token. | |
JWT_PUBLIC_KEY | Y | Verifying signed JWT Token. | |
JWT_SECRET | Y | Symmetric signing key of the JWT token. | |
JWT_ISSUER | Y | Issuer of the JWT token. |
Setting up a DataSource
¶
Here is a sample Implementation DataSource
implementation using environment variables and PostgreSQL as the data source.
Migrations¶
The migrations required for this service are processed during the installation automatically if you set the AUTH_MIGRATION
or SOURCELOOP_MIGRATION
env variable. The migrations use db-migrate
with db-migrate-pg
driver for migrations, so you will have to install these packages to use auto-migration. Please note that if you are using some pre-existing migrations or databases, they may be affected. In such a scenario, it is advised that you copy the migration files in your project root, using the AUTH_MIGRATION_COPY
or SOURCELOOP_MIGRATION_COPY
env variables. You can customize or cherry-pick the migrations in the copied files according to your specific requirements and then apply them to the DB.
Additionally, there is now an option to choose between SQL migration or PostgreSQL migration.
NOTE : For @sourceloop/cli
users, this choice can be specified during the scaffolding process by selecting the "type of datasource" option.
Database Schema¶
Providers¶
You can find documentation for some of the providers available in this service here
Common Headers¶
Authorization: Bearer Content-Type: application/json
in the response and in request if the API method is NOT GET
Common Request path Parameters¶
{version}
: Defines the API Version
Common Responses¶
200: Successful Response. Response body varies w.r.t API 401: Unauthorized: The JWT token is missing or invalid 403: Forbidden : Not allowed to execute the concerned API 404: Entity Not Found 400: Bad Request (Error message varies w.r.t API) 201: No content: Empty Response
API Details¶
Visit the OpenAPI spec docs