sample application using Ory open source projects
- docker and docker-compose
- docker and docker-compose
docker-compose build
- start services:
- user-management
- db-user-management
docker-compose up
2 - start services hydra oauthkeeper and keto
docker-compose -f docker-compose-hydra.yaml build
docker-compose -f docker-compose-hydra.yaml up
3 - create client hydra
docker-compose -f docker-compose-hydra.yaml exec hydra \
hydra clients create \
--endpoint http://127.0.0.1:4445 \
--id auth-code-client \
--secret secret \
--grant-types client_credentials,authorization_code,refresh_token \
--response-types code,id_token \
--scope openid,offline \
--callbacks http://localhost:9090/api-user-management/auth-callback
4 - register user
admin
curl --location --request POST 'http://localhost:9090/api-user-management/register' \
--header 'Content-Type: application/json' \
--data-raw '{
"name": "admin",
"email": "[email protected]",
"password": "123"
}'
user
curl --location --request POST 'http://localhost:9090/api-user-management/register' \
--header 'Content-Type: application/json' \
--data-raw '{
"name": "user",
"email": "[email protected]",
"password": "123"
}'
5 - create policies
admin
curl --location --request POST 'http://localhost:9090/api-user-management/keto/policies' \
--header 'Content-Type: application/json' \
--data-raw '{
"description": "policy admin",
"subjects": ["admin"],
"effect": "allow",
"resources": [
"user-management:user"
],
"actions": ["get", "post", "put", "delete"],
"conditions": null
}'
user
curl --location --request POST 'http://localhost:9090/api-user-management/keto/policies' \
--header 'Content-Type: application/json' \
--data-raw '{
"description": "policy user",
"subjects": ["user"],
"effect": "allow",
"resources": [
"user-management:user"
],
"actions": ["get"],
"conditions": null
}'
6 - create role
admin
curl --location --request POST 'http://localhost:9090/api-user-management/keto/roles' \
--header 'Content-Type: application/json' \
--data-raw '{
"id":"admin",
"members": [
"[email protected]"
]
}'
user
curl --location --request POST 'http://localhost:9090/api-user-management/keto/roles' \
--header 'Content-Type: application/json' \
--data-raw '{
"id":"user",
"members": [
"[email protected]"
]
}'
- login
http://localhost:9090/api-user-management/authorize
email: [email protected]
email: [email protected]
password: 123
curl --location --request GET 'http://localhost:4455/api-user-management/users' \
--header 'Authorization: Bearer {token}' \
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent