Fengling Auth Service - 认证服务
02c5d8c72d
- Set Logging__LogLevel__Npgsql to Error in ConfigMap - Prevents libgssapi_krb5.so.2 warning spam in logs |
||
|---|---|---|
| .gitea/workflows | ||
| .planning/codebase | ||
| k8s | ||
| src | ||
| .dockerignore | ||
| .gitignore | ||
| Directory.Packages.props | ||
| Dockerfile | ||
| Fengling.AuthService.slnx | ||
| NuGet.Config | ||
| README.md | ||
Fengling Auth Service
Authentication and authorization service using OpenIddict.
Features
- JWT token issuance
- OAuth2/OIDC support
- Multi-tenant support (TenantId in JWT claims)
- Role-based access control (RBAC)
- Health check endpoint
API Endpoints
Get Token
POST /connect/token
Content-Type: application/x-www-form-urlencoded
grant_type=password
username={username}
password={password}
scope=api offline_access
Health Check
GET /health
Default Users
- Admin: username=admin, password=Admin@123, role=Admin
- Test User: username=testuser, password=Test@123, role=User
Running Locally
dotnet run
Service runs on port 5000.
Docker
docker build -t fengling-auth:latest .
docker run -p 5000:80 fengling-auth:latest
Environment Variables
ConnectionStrings__DefaultConnection: PostgreSQL connection stringOpenIddict__Issuer: Token issuer URLOpenIddict__Audience: Token audience
Database
- PostgreSQL
- Uses ASP.NET Core Identity for user/role management
- Tenant isolation via
TenantIdcolumn