Issue JWT, provide JWKS endpoint, ...

Author: fmalcher

.gitignore

@@ -1,3 +1,4 @@
+keys/*.pem
 .DS_Store
 ._*
 node_modules/

README.md

@@ -1,3 +1,26 @@
 # stecker-auth
 
-Simple Auth server
+Simple Auth server with JWT
+
+
+## Installation and start
+
+```bash
+npm install
+npm run build
+npm start
+```
+
+Do not forget to provide RSA keys (see below).
+
+## Generating RSA key pair
+
+JWT tokens are signed with the asymmetric `RS256` algorithm.
+We need to provide an RSA key pair for that:
+
+```bash
+openssl genpkey -algorithm RSA -out keys/private.pem -pkeyopt rsa_keygen_bits:2048
+openssl rsa -pubout -in keys/private.pem -out keys/public.pem
+```
+
+

src/config.example.ts config.example.tssrc/config.example.ts renamed to config.example.ts

@@ -15,6 +15,5 @@ export const config = {
         admindn  : '',
         adminpw  : ''
     },
-    tokenLifetime: 3600,
-    secret: 'loremipsum' // secret the access token is signed with
+    tokenLifetime: 3600
 }

config.ts

@@ -0,0 +1,25 @@
+import * as path from 'path';
+
+export const config = {
+    port: 3000,
+    mysqlCred: {
+        host: 'pma.srv3.malcher-server.de',
+        user: 'lagersystem',
+        password: 'hZgF59CO9YmKJIlF4ST9tR',
+        database: 'steckeroauth'
+    },
+    ldap: {
+        server   : 'localhost',
+        port     : 11389,
+        basedn   : 'dc=club,dc=hft-leipzig,dc=de',
+        userbase : 'ou=users',
+        groupbase: 'ou=groups',
+        admindn  : 'cn=cisauth,ou=system,dc=club,dc=hft-leipzig,dc=de',
+        adminpw  : 'hJNJbK6Gvhjf3vRZjFV4h8jGdtKJ'
+    },
+    tokenLifetime: 3600,
+    keys: {
+        private: path.join(__dirname, 'keys', 'private.pem'),
+        public: path.join(__dirname, 'keys', 'public.pem')
+    }
+}