[$300] Project UBahn | Update Login to use accounts.topcoder.com

[wdprice]

currently login flow goes through topcoder.auth0.com

Need to use accounts.topcoder.com for proper cross-site platform handling.

[callmekatootie]

Note to self - check out Laushcer or Vorbote for how we did this...

[callmekatootie]

@cwdcwd Is this available on npm - https://github.com/appirio-tech/accounts-app ? Lauscher seems to have copied code from this repo (some minification issues). Need to know if I should go the same way in this app or if there's a module that I can make use of...

[cwdcwd]

let's loop in @sachin-maheshwari for how best to incorporate the new login stuff. @sachin-maheshwari can we publish the new login component to npm for inclusion in our apps?

[sachin-maheshwari]

@cwdcwd I am investigating, will share my thoughts.

[sachin-maheshwari]

As i explored I think, we need to authenticate and authorize in this way - https://github.com/appirio-tech/connect-app/blob/test/auth0lib/src/components/AuthenticatedComponent.jsx
Whole "new Auth flow" releated changes we can find here - appirio-tech/connect-app#4082

In general, for authentication, currently we are using account-app (that is authenticating and setting topcoder cookies (JWT tokens) in browsers).

In authorization, we have common logic(lib) to read and validate that cookies (JWT token). For example - "New Auth Flow" https://github.com/topcoder-platform/tc-auth-lib/blob/dev/src/connector-wrapper.js#L68
And in current flow - https://github.com/appirio-tech/accounts-app/blob/dev/connector/connector-wrapper.js#L64

[sachin-maheshwari]

I think, in this app we are doing like -
Authorization - https://github.com/topcoder-platform/u-bahn-app/blob/3b8254481a5f020d2ec58290ec5fd3de05fedf9a/client/src/pages/Search/index.jsx#L72

Authentication - https://github.com/topcoder-platform/u-bahn-app/blob/develop/client/src/react-auth0-spa.js#L48

[cwdcwd]

@sachin-maheshwari are any of these pieces publishable via npm as modules so we can drop them into our code easily?

[sachin-maheshwari]

@cwdcwd no exactly, but can include like this -
For "new flow" - https://github.com/appirio-tech/connect-app/blob/test/auth0lib/package.json#L153
For "current flow" - https://github.com/appirio-tech/connect-app/blob/dev/package.json#L153

[cwdcwd]

I'm not a big fan or references by git url. Can I add a github action to publish "tc-auth-lib": "git+https://github.com/topcoder-platform/tc-auth-lib.git#dev" out to our NPM modules?

[sachin-maheshwari]

You can publish but some code clean-up required (like web-assets folder not related to this and iframe and refresh token logic).

[cwdcwd]

that's fine. we'll just do another release once that happens.I'll add a github action to publish

[callmekatootie]

Bump. Just checking in if we have the module to use

[cwdcwd]

@sachin-maheshwari do you care if I change the package to be @topcoder-platform/tc-auth-lib ?
I want to publish it with the rest of our topcoder-platform modules

[cwdcwd]

@sachin-maheshwari I made a PR here for this

[sachin-maheshwari]

NP, I'll take care. Thanks!

[cwdcwd]

thanks @sachin-maheshwari !
@callmekatootie I published a release here on NPM

[cwdcwd]

Contest https://www.topcoder.com/challenges/30143227 has been created for this ticket.

This is an automated message for lazybaer via Topcoder X

[callmekatootie]

@ all Ticket OPEN FOR PICKUP

Task Details:

• Remove auth0-spa js file and package and all the associated code.
• Replace all auth calls with Topcoder's own auth module - https://www.npmjs.com/package/@topcoder-platform/tc-auth-lib
• You can use https://github.com/topcoder-platform/Lauscher as reference. This app does NOT use the npm module, but a copy of it. You will find the same set of functions in the npm module.

[cwdcwd]

Contest https://www.topcoder.com/challenges/30143227 has been updated - it has been assigned to Narekvar90.

This is an automated message for lazybaer via Topcoder X

[callmekatootie]

@narekcat Just a FYI - the outcome of your changes will result in the user being redirected to accounts.topcoder(-dev).com and not to auth0 if they are not logged in.

You can visit http://lauscher.topcoder-dev.com/ to get an idea about how the app behaves when we use accounts.topcoder for login instead of auth0

(Laushcer is a different app - only mentioning it here to give you a reference of how to integrate with accounts.topcoder instead of auth0)

[narekcat]

@callmekatootie Okay.

[narekcat]

@callmekatootie I am actively working on this issue, I just need additional 24 hours to finish it. Is it ok ?

[callmekatootie]

I understand. No worries.

[narekcat]

Thanks.

[narekcat]

@callmekatootie Hi, I am still actively working on this issue, but it is much harder then I thought. I need more time to finish it. What you think about that ?

[callmekatootie]

Should be fine - however, I hope you will submit in the next 24 hours else I will have to explore other options

[narekcat]

I'll do my best to finish it in time, if I couldn't I'll put it back.

[callmekatootie]

@narekcat Status check

[callmekatootie]

My bad. Didn't see you marked it as open for pickup

[cwdcwd]

Contest https://www.topcoder.com/challenges/30143227 has been updated - callmekatootie has been unassigned.

This is an automated message for lazybaer via Topcoder X

[cwdcwd]

Contest https://www.topcoder.com/challenges/30143227 has been updated - it has been assigned to callmekatootie.

This is an automated message for lazybaer via Topcoder X

[cwdcwd]

Payment task has been updated: https://software.topcoder.com/review/actions/ViewProjectDetails?pid=30143227

This is an automated message for lazybaer via Topcoder X