Merge pull request #42 from CS3219-AY2526Sem1/david/user-middleware

David/user middleware

Author: kokerinks

.gitignore

@@ -1,2 +1,11 @@
 **/__pycache__/
-.vscode/
+
+# Ignore environment variables file
+.env
+
+# Ignore service account key file
+services/**/serviceAccountKey.json
+
+# Ignore node modules
+**/node_modules/
+.vscode/

README.md

@@ -4,3 +4,8 @@
 ### Note: 
 - You are required to develop individual microservices within separate folders within this repository.
 - The teaching team should be given access to the repositories as we may require viewing the history of the repository in case of any disputes or disagreements. 
+
+
+### for user-service
+- go to firebase project settings > service account > generate new private key.
+- rename the downloaded json file into serviceAccountKey.json and paste it the same dir as .env.

services/collaboration-service/requirements.txt

@@ -0,0 +1,2 @@
+# Copy this file to .env and fill in your own values
+GOOGLE_APPLICATION_CREDENTIALS="path/to/your/serviceAccountKey.json"

services/user-service/.env.example

@@ -0,0 +1,10 @@
+require("dotenv").config();
+const admin = require("firebase-admin");
+
+const serviceAccount = process.env.GOOGLE_APPLICATION_CREDENTIALS;
+
+admin.initializeApp({
+    credential: admin.credential.cert(serviceAccount),
+});
+
+module.exports = { admin };

services/user-service/firebase-admin-config.js

@@ -0,0 +1,72 @@
+const express = require("express");
+const cors = require("cors");
+const { createProxyMiddleware } = require("http-proxy-middleware");
+const { admin } = require("./firebase-admin-config");
+
+const app = express();
+app.use(cors());
+
+const MATCHING_SERVICE_URL = process.env.MATCHING_SERVICE_URL || "http://localhost:4001";
+const QUESTION_SERVICE_URL = process.env.QUESTION_SERVICE_URL || "http://localhost:4002";
+const COLLABORATION_SERVICE_URL = process.env.COLLABORATION_SERVICE_URL || "http://localhost:4003";
+
+const verifyToken = async (req, res, next) => {
+    const header = req.headers.authorization;
+    if (!header || !header.startsWith("Bearer ")) {
+        return res.status(401).json({ message: "Unauthorized" });
+    }
+    const token = header.split(" ")[1];
+    try {
+        const decodedToken = await admin.auth().verifyIdToken(token);
+        req.user = decodedToken;
+        next();
+    } catch (error) {
+        return res.status(401).json({ message: "Unauthorized" });
+    }
+};
+
+const onProxyReq = (proxyReq, req, res) => {
+    if (req.user) {
+        proxyReq.setHeader("x-user-id", req.user.uid);
+        proxyReq.setHeader("x-user-email", req.user.email);
+    }
+};
+
+app.use(
+    "/matching",
+    verifyToken,
+    createProxyMiddleware({
+        target: MATCHING_SERVICE_URL,
+        changeOrigin: true,
+        onProxyReq,
+    })
+);
+
+app.use(
+    "/questions",
+    verifyToken,
+    createProxyMiddleware({
+        target: QUESTION_SERVICE_URL,
+        changeOrigin: true,
+        onProxyReq,
+    })
+);
+
+app.use(
+    "/collaboration",
+    verifyToken,
+    createProxyMiddleware({
+        target: COLLABORATION_SERVICE_URL,
+        changeOrigin: true,
+        onProxyReq,
+    })
+);
+
+app.get("/health", (req, res) => {
+    res.send("User Service is healthy");
+});
+
+const PORT = process.env.PORT || 4000;
+app.listen(PORT, () => {
+    console.log(`User Service listening on port ${PORT}`);
+});