Merge pull request #362 from dadosfera/feature/auth-session

CI: add cookie secret

deploy/helm-chart/templates/deployment.yaml

@@ -94,6 +94,8 @@ spec:
               value: {{ .Values.maestro.open_group_id }}
             - name: DEDICATED_PROXY
               value: {{ .Values.maestro.dedicated_proxy }}
+            - name: COOKIE_SECRET
+              value: {{ .Values.maestro.cookie_secret }}
             - name: REDIS_DATABASE
               value: "{{ .Values.maestro.redis_database }}"
             - name: REDIS_HOST

deploy/helm-chart/templates/ingress.yaml

@@ -9,6 +9,9 @@ metadata:
     nginx.ingress.kubernetes.io/server-snippet: |
       underscores_in_headers on;
       ignore_invalid_headers on;
+    nginx.ingress.kubernetes.io/proxy-buffer-size: "16k"
+    nginx.ingress.kubernetes.io/proxy-buffers-number: "8"
+    nginx.ingress.kubernetes.io/proxy-busy-buffers-size: "64k"
     {{- if .Values.maestro.restricted_ip}}
     nginx.ingress.kubernetes.io/whitelist-source-range: {{ .Values.maestro.restricted_ip }}
     {{- end }}

deploy/helm-chart/values-stg.yaml

@@ -6,6 +6,7 @@ maestro:
   tr_factory_url: in-factory.stg.dadosfera.ai
   open_customer_id: b3e3dfe5-b992-4586-a73c-c0b0c00f615d
   open_group_id: e3f98a2f-7748-4981-8505-7695c8ca8218
+  cookie_secret: "ff7bc13823edb2ae50d248e5780bddc9d4b31c36"
 
 hostname: maestro.stg.dadosfera.ai
 

deploy/helm-chart/values.yaml

@@ -48,6 +48,7 @@ maestro:
   redis_host: "product-redis-prd.z4xvqj.0001.use1.cache.amazonaws.com"
   redis_port: "6379"
   redis_database: "0"
+  cookie_secret: "13cc5e136d3074bcc05bec8697092ec1f5f376bf"
 autoscaling:
   enabled: false
   minReplicas: 1

environment.d.ts

@@ -15,6 +15,7 @@ declare global {
       OPEN_GROUP_ID: string;
       OPEN_CUSTOMER_ID: string;
       DEDICATED_PROXY: string;
+      COOKIE_SECRET: string;
     }
   }
 }

src/modules/auth/auth.controller.ts

@@ -101,11 +101,15 @@ export class AuthController {
       const metadata = PackTheMetadata({ language });
       this.logger.info('metadata: ' + JSON.stringify(metadata.toJSON()));
       const data = await this.authClient.signIn({ username, password, totp }, metadata);
-      this.addTokenInCookie(res, {
-        accessToken: data.tokens.accessToken,
-        refreshToken: data.tokens.refreshToken,
-        userId: data.user.id
-      });
+
+      if (data.tokens) {
+        this.addTokenInCookie(res, {
+          accessToken: data.tokens.accessToken,
+          refreshToken: data.tokens.refreshToken,
+          userId: data.user.id
+        });
+      }
+
 
       return res.send(data);
     } catch (error) {