Passwords Microservice

This is a password authentication microservice from Pip.Services library.

• Sets user passwords and authenticate
• Safely change passwords
• Reset and recover passwords via emails

The microservice currently supports the following deployment options:

• Deployment platforms: Standalone Process, Seneca
• External APIs: HTTP/REST, Seneca
• Persistence: Flat Files, MongoDB

This microservice has optional dependencies on the following microservices:

• pip-services-activities - to log user activities
• pip-services-email - to send email notifications to users

Quick Links:

• Download Links
• Development Guide
• Configuration Guide
• Deployment Guide
• Client SDKs
  • Node.js SDK
• Communication Protocols
  • HTTP Version 1
  • Seneca Version 1

Contract

Logical contract of the microservice is presented below. For physical implementation (HTTP/REST, Thrift, Seneca, Lambda, etc.), please, refer to documentation of the specific protocol.

interface IPasswordsV1 {
    setPassword(correlationId: string, userId: string, password: string,
        callback: (err: any) => void): void;

    deletePassword(correlationId: string, userId: string,
        callback: (err: any) => void): void;

    authenticate(correlationId: string, userId: string, password: string,
        callback: (err: any, authenticated: boolean) => void): void;

    changePassword(correlationId: string, userId: string, oldPassword: string, newPassword: string,
        callback: (err: any) => void): void;

    resetPassword(correlationId: string, userId: string, code: string, password: string,
        callback: (err: any) => void): void;

    recoverPassword(correlationId: string, userId: string,
        callback: (err: any) => void): void;
}

Download

Right now the only way to get the microservice is to check it out directly from github repository

git clone [email protected]:pip-services-users/pip-services-passwords-node.git

Pip.Service team is working to implement packaging and make stable releases available for your as zip downloadable archieves.

Run

Add config.yml file to the root of the microservice folder and set configuration parameters. As the starting point you can use example configuration from config.example.yml file.

Example of microservice configuration

---
- descriptor: "pip-services-commons:logger:console:default:1.0"
  level: "trace"

- descriptor: "pip-services-passwords:persistence:file:default:1.0"
  path: "./data/passwords.json"

- descriptor: "pip-services-passwords:controller:default:default:1.0"
  options:
      lock_timeout: 1800000 # 30 mins
      attempt_timeout: 60000 # 1 min
      attempt_count: 4 # 4 times
      rec_expire_timeout: 7200000 # 2 hours
      lock_enabled: false # set to TRUE to enable locking logic
      magic_code: null # Universal code

      max_password_len: 20 # max password length
      min_password_len: 6 # min password length

      old_passwords_check: false # check if the new password is one of the old ones
      old_passwords_count: 6 # count of stored old passwords

- descriptor: "pip-services-passwords:service:http:default:1.0"
  connection:
    protocol: "http"
    host: "0.0.0.0"
    port: 8080

For more information on the microservice configuration see Configuration Guide.

Start the microservice using the command:

node run

Use

The easiest way to work with the microservice is to use client SDK. The complete list of available client SDKs for different languages is listed in the Quick Links

If you use Node.js then you should add dependency to the client SDK into package.json file of your project

{
    ...
    "dependencies": {
        ....
        "pip-clients-passwords-node": "^1.0.*",
        ...
    }
}

Inside your code get the reference to the client SDK

var sdk = new require('pip-clients-passwords-node');

Define client configuration parameters that match configuration of the microservice external API

// Client configuration
var config = {
    connection: {
        protocol: 'http',
        host: 'localhost', 
        port: 8080
    }
};

Instantiate the client and open connection to the microservice

// Create the client instance
var client = sdk.PasswordsHttpClientV1(config);

// Connect to the microservice
client.open(null, function(err) {
    if (err) {
        console.error('Connection to the microservice failed');
        console.error(err);
        return;
    }
    
    // Work with the microservice
    ...
});

Now the client is ready to perform operations

// Set a password for a new user
client.setPassword(
    null,
    user_id: '123',
    password: 'test123',
    function (err) {
        ...
    }
);

// Authenticate user
client.authenticate(
    null,
    '123',
    'test123',
    function(err, authenticated) {
    ...    
    }
);

Acknowledgements

This microservice was created and currently maintained by Sergey Seroukhov.