auth package WIP

cmd/cognito_test/cognito.auth.harness/main.go

@@ -0,0 +1,100 @@
+package main
+
+import (
+	"log/slog"
+	"net/http"
+	"os"
+	"time"
+
+	"github.com/labstack/echo/v4"
+	"github.com/labstack/echo/v4/middleware"
+	"queryorchestration/internal/cognitoauth" // Replace with your actual package import path
+)
+
+func main() {
+	// Create a new Echo instance
+	e := echo.New()
+
+	// Add basic middleware
+	e.Use(middleware.Logger())
+	e.Use(middleware.Recover())
+
+	// Initialize logger with appropriate level based on DEBUG env var
+	var logLevel slog.Level
+	if os.Getenv("DEBUG") == "true" {
+		logLevel = slog.LevelDebug
+	} else {
+		logLevel = slog.LevelInfo
+	}
+
+	logHandler := slog.NewTextHandler(os.Stdout, &slog.HandlerOptions{
+		Level: logLevel,
+	})
+	logger := slog.New(logHandler)
+
+	// Create auth config from environment variables
+	config := cognitoauth.NewConfigFromEnv("http://localhost:8080", logger)
+
+	// Set route permissions
+	routePermissions := map[string][]string{
+		"/users":                {"exporters", "uploaders", "querybuilders"},
+		"/users/:id":            {"exporters", "querybuilders"},
+		"/orders":               {"exporters"},
+		"/reports/sales":        {"exporters", "uploaders", "querybuilders"},
+		"/settings":             {"exporters"},
+		"/api/inventory/update": {"exporters", "uploaders"},
+	}
+	config.SetRoutePermissions(routePermissions)
+
+	// Register authentication routes
+	cognitoauth.RegisterRoutes(e, config)
+
+	// Register your application routes
+	// These will be protected based on the permissions set above
+	e.GET("/users", func(c echo.Context) error {
+		return c.String(http.StatusOK, "Users endpoint (OK)")
+	})
+
+	e.GET("/users/:id", func(c echo.Context) error {
+		id := c.Param("id")
+		return c.String(http.StatusOK, "User details endpoint for ID: "+id)
+	})
+
+	e.GET("/orders", func(c echo.Context) error {
+		return c.String(http.StatusOK, "Orders endpoint (OK)")
+	})
+
+	e.GET("/reports/sales", func(c echo.Context) error {
+		return c.String(http.StatusOK, "Sales reports endpoint (OK)")
+	})
+
+	e.GET("/settings", func(c echo.Context) error {
+		return c.String(http.StatusOK, "Settings endpoint (OK)")
+	})
+
+	e.PUT("/api/inventory/update", func(c echo.Context) error {
+		return c.String(http.StatusOK, "Inventory update endpoint (OK)")
+	})
+
+	// Alternative approach: Use the RequireGroups middleware for specific routes
+	// This can be used instead of or in addition to the global permissions map
+	adminGroup := e.Group("/admin")
+	adminGroup.Use(cognitoauth.RequireGroups("admin")) // Only admin group can access this route
+
+	adminGroup.GET("/dashboard", func(c echo.Context) error {
+		return c.String(http.StatusOK, "Admin Dashboard (OK)")
+	})
+
+	// Configure server
+	server := &http.Server{
+		Addr:              ":8080",
+		ReadHeaderTimeout: 3 * time.Second,
+		ReadTimeout:       20 * time.Second,
+		WriteTimeout:      20 * time.Second,
+		IdleTimeout:       120 * time.Second,
+	}
+
+	// Start server
+	logger.Info("Server starting on :8080")
+	e.Logger.Fatal(e.StartServer(server))
+}

cmd/cognito_test/cognito.auth.harness/readme.md

@@ -0,0 +1,3 @@
+# Cognito Auth Harness
+This is the the test harness for the pkce cognito package (internal/cognitoauth)
+that will be integrated into the main API application after its all tested.