11 | Scan the QrCode using authenticator app
13 | 
14 |
22 |
23 | );
24 | };
25 |
26 | export default QrCode;
27 |
--------------------------------------------------------------------------------
/two-factor-auth-client/package.json:
--------------------------------------------------------------------------------
1 | {
2 | "name": "two-factor-auth-client",
3 | "version": "0.1.0",
4 | "private": true,
5 | "dependencies": {
6 | "@ant-design/icons": "^4.2.1",
7 | "@testing-library/jest-dom": "^4.2.4",
8 | "@testing-library/react": "^9.5.0",
9 | "@testing-library/user-event": "^7.2.1",
10 | "antd": "^4.4.0",
11 | "react": "^16.13.1",
12 | "react-dom": "^16.13.1",
13 | "react-router": "^5.2.0",
14 | "react-router-dom": "^5.2.0",
15 | "react-scripts": "3.4.1"
16 | },
17 | "scripts": {
18 | "start": "react-scripts start",
19 | "build": "react-scripts build",
20 | "test": "react-scripts test",
21 | "eject": "react-scripts eject"
22 | },
23 | "eslintConfig": {
24 | "extends": "react-app"
25 | },
26 | "browserslist": {
27 | "production": [
28 | ">0.2%",
29 | "not dead",
30 | "not op_mini all"
31 | ],
32 | "development": [
33 | "last 1 chrome version",
34 | "last 1 firefox version",
35 | "last 1 safari version"
36 | ]
37 | }
38 | }
39 |
--------------------------------------------------------------------------------
/auth-service/src/main/java/com/clone/instagram/authservice/service/InstaUserDetailsService.java:
--------------------------------------------------------------------------------
1 | package com.clone.instagram.authservice.service;
2 |
3 | import com.clone.instagram.authservice.model.InstaUserDetails;
4 | import org.springframework.beans.factory.annotation.Autowired;
5 | import org.springframework.security.core.userdetails.UserDetails;
6 | import org.springframework.security.core.userdetails.UserDetailsService;
7 | import org.springframework.security.core.userdetails.UsernameNotFoundException;
8 | import org.springframework.stereotype.Service;
9 |
10 | @Service
11 | public class InstaUserDetailsService implements UserDetailsService {
12 |
13 | @Autowired
14 | private UserService userService;
15 |
16 | @Override
17 | public UserDetails loadUserByUsername(String username) throws UsernameNotFoundException {
18 |
19 | return userService
20 | .findByUsername(username)
21 | .map(InstaUserDetails::new)
22 | .orElseThrow(() -> new UsernameNotFoundException("Username not found"));
23 | }
24 | }
25 |
--------------------------------------------------------------------------------
/two-factor-auth-client/src/App.js:
--------------------------------------------------------------------------------
1 | import React from "react";
2 | import { BrowserRouter, Route, Switch } from "react-router-dom";
3 | import Signin from "./signin/Signin";
4 | import Signup from "./signup/Signup";
5 | import Profile from "./profile/Profile";
6 | import QrCode from "./qrcode/QrCode";
7 | import VerifyCode from "./verifycode/VerifyCode";
8 |
9 | import "./App.css";
10 |
11 | const App = (props) => {
12 | return (
13 |
14 |
15 |
16 |
38 |
39 |
40 | );
41 | };
42 |
43 | export default App;
44 |
--------------------------------------------------------------------------------
/auth-service/src/main/java/com/clone/instagram/authservice/model/InstaUserDetails.java:
--------------------------------------------------------------------------------
1 | package com.clone.instagram.authservice.model;
2 |
3 | import org.springframework.security.core.GrantedAuthority;
4 | import org.springframework.security.core.authority.SimpleGrantedAuthority;
5 | import org.springframework.security.core.userdetails.UserDetails;
6 | import java.util.Collection;
7 | import java.util.stream.Collectors;
8 |
9 |
10 | public class InstaUserDetails extends User implements UserDetails {
11 |
12 | public InstaUserDetails(final User user) {
13 | super(user);
14 | }
15 |
16 | @Override
17 | public Collection getAuthorities() {
18 |
19 | return getRoles()
20 | .stream()
21 | .map(role -> new SimpleGrantedAuthority("ROLE_" +role.getName()))
22 | .collect(Collectors.toSet());
23 | }
24 |
25 | @Override
26 | public boolean isAccountNonExpired() {
27 | return isActive();
28 | }
29 |
30 | @Override
31 | public boolean isAccountNonLocked() {
32 | return isActive();
33 | }
34 |
35 | @Override
36 | public boolean isCredentialsNonExpired() {
37 | return isActive();
38 | }
39 |
40 | @Override
41 | public boolean isEnabled() {
42 | return isActive();
43 | }
44 | }
45 |
--------------------------------------------------------------------------------
/two-factor-auth-client/src/profile/Profile.js:
--------------------------------------------------------------------------------
1 | import React, { useEffect, useState } from "react";
2 | import { Button, Card, Avatar } from "antd";
3 | import { LogoutOutlined } from "@ant-design/icons";
4 | import { getCurrentUser } from "../util/ApiUtil";
5 | import "./Profile.css";
6 |
7 | const { Meta } = Card;
8 |
9 | const Profile = (props) => {
10 | const [currentUser, setCurrentUser] = useState({});
11 | useEffect(() => {
12 | if (localStorage.getItem("accessToken") === null) {
13 | props.history.push("/login");
14 | }
15 | loadCurrentUser();
16 | }, []);
17 |
18 | const loadCurrentUser = () => {
19 | getCurrentUser()
20 | .then((response) => {
21 | console.log(response);
22 | setCurrentUser(response);
23 | })
24 | .catch((error) => {
25 | // logout();
26 | console.log(error);
27 | });
28 | };
29 |
30 | const logout = () => {
31 | localStorage.removeItem("accessToken");
32 | props.history.push("/login");
33 | };
34 |
35 | return (
36 |
37 |
53 | );
54 | };
55 |
56 | export default Profile;
57 |
--------------------------------------------------------------------------------
/two-factor-auth-client/src/util/ApiUtil.js:
--------------------------------------------------------------------------------
1 | const request = (options) => {
2 | const headers = new Headers();
3 |
4 | if (options.setContentType !== false) {
5 | headers.append("Content-Type", "application/json");
6 | }
7 |
8 | if (localStorage.getItem("accessToken")) {
9 | headers.append(
10 | "Authorization",
11 | "Bearer " + localStorage.getItem("accessToken")
12 | );
13 | }
14 |
15 | const defaults = { headers: headers };
16 | options = Object.assign({}, defaults, options);
17 |
18 | return fetch(options.url, options).then((response) =>
19 | response.json().then((json) => {
20 | if (!response.ok) {
21 | return Promise.reject(json);
22 | }
23 | return json;
24 | })
25 | );
26 | };
27 |
28 | export function login(loginRequest) {
29 | return request({
30 | url: "http://localhost:8081/signin",
31 | method: "POST",
32 | body: JSON.stringify(loginRequest),
33 | });
34 | }
35 |
36 | export function verify(verifyRequest) {
37 | return request({
38 | url: "http://localhost:8081/verify",
39 | method: "POST",
40 | body: JSON.stringify(verifyRequest),
41 | });
42 | }
43 |
44 | export function signup(signupRequest) {
45 | return request({
46 | url: "http://localhost:8081/users",
47 | method: "POST",
48 | body: JSON.stringify(signupRequest),
49 | });
50 | }
51 |
52 | export function getCurrentUser() {
53 | if (!localStorage.getItem("accessToken")) {
54 | return Promise.reject("No access token set.");
55 | }
56 |
57 | return request({
58 | url: "http://localhost:8081/users/me",
59 | method: "GET",
60 | });
61 | }
62 |
--------------------------------------------------------------------------------
/two-factor-auth-client/public/index.html:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |
6 |
7 |
8 |
12 |
13 |
17 |
18 |
27 |
43 |
76 | );
77 | };
78 |
79 | export default VerifyCode;
80 |
--------------------------------------------------------------------------------
/auth-service/src/main/java/com/clone/instagram/authservice/service/JwtTokenManager.java:
--------------------------------------------------------------------------------
1 | package com.clone.instagram.authservice.service;
2 |
3 | import com.clone.instagram.authservice.config.JwtConfig;
4 | import io.jsonwebtoken.*;
5 | import lombok.extern.slf4j.Slf4j;
6 | import org.springframework.security.core.Authentication;
7 | import org.springframework.security.core.GrantedAuthority;
8 | import org.springframework.stereotype.Service;
9 | import java.util.Date;
10 | import java.util.stream.Collectors;
11 |
12 |
13 | @Service
14 | @Slf4j
15 | public class JwtTokenManager {
16 |
17 | private final JwtConfig jwtConfig;
18 |
19 | public JwtTokenManager(JwtConfig jwtConfig) {
20 | this.jwtConfig = jwtConfig;
21 | }
22 |
23 | public String generateToken(Authentication authentication) {
24 |
25 | Long now = System.currentTimeMillis();
26 | return Jwts.builder()
27 | .setSubject(authentication.getName())
28 | .claim("authorities", authentication.getAuthorities().stream()
29 | .map(GrantedAuthority::getAuthority).collect(Collectors.toList()))
30 | .setIssuedAt(new Date(now))
31 | .setExpiration(new Date(now + jwtConfig.getExpiration() * 1000)) // in milliseconds
32 | .signWith(SignatureAlgorithm.HS512, jwtConfig.getSecret().getBytes())
33 | .compact();
34 | }
35 |
36 | public Claims getClaimsFromJWT(String token) {
37 | return Jwts.parser()
38 | .setSigningKey(jwtConfig.getSecret().getBytes())
39 | .parseClaimsJws(token)
40 | .getBody();
41 | }
42 |
43 | public boolean validateToken(String authToken) {
44 | try {
45 | Jwts.parser()
46 | .setSigningKey(jwtConfig.getSecret().getBytes())
47 | .parseClaimsJws(authToken);
48 |
49 | return true;
50 | } catch (SignatureException ex) {
51 | log.error("Invalid JWT signature");
52 | } catch (MalformedJwtException ex) {
53 | log.error("Invalid JWT token");
54 | } catch (ExpiredJwtException ex) {
55 | log.error("Expired JWT token");
56 | } catch (UnsupportedJwtException ex) {
57 | log.error("Unsupported JWT token");
58 | } catch (IllegalArgumentException ex) {
59 | log.error("JWT claims string is empty.");
60 | }
61 | return false;
62 | }
63 | }
64 |
--------------------------------------------------------------------------------
/two-factor-auth-client/src/logo.svg:
--------------------------------------------------------------------------------
1 |
8 |
--------------------------------------------------------------------------------
/two-factor-auth-client/README.md:
--------------------------------------------------------------------------------
1 | This project was bootstrapped with [Create React App](https://github.com/facebook/create-react-app).
2 |
3 | ## Available Scripts
4 |
5 | In the project directory, you can run:
6 |
7 | ### `npm start`
8 |
9 | Runs the app in the development mode.10 | Open [http://localhost:3000](http://localhost:3000) to view it in the browser. 11 | 12 | The page will reload if you make edits.
13 | You will also see any lint errors in the console. 14 | 15 | ### `npm test` 16 | 17 | Launches the test runner in the interactive watch mode.
18 | See the section about [running tests](https://facebook.github.io/create-react-app/docs/running-tests) for more information. 19 | 20 | ### `npm run build` 21 | 22 | Builds the app for production to the `build` folder.
23 | It correctly bundles React in production mode and optimizes the build for the best performance. 24 | 25 | The build is minified and the filenames include the hashes.
26 | Your app is ready to be deployed! 27 | 28 | See the section about [deployment](https://facebook.github.io/create-react-app/docs/deployment) for more information. 29 | 30 | ### `npm run eject` 31 | 32 | **Note: this is a one-way operation. Once you `eject`, you can’t go back!** 33 | 34 | If you aren’t satisfied with the build tool and configuration choices, you can `eject` at any time. This command will remove the single build dependency from your project. 35 | 36 | Instead, it will copy all the configuration files and the transitive dependencies (webpack, Babel, ESLint, etc) right into your project so you have full control over them. All of the commands except `eject` will still work, but they will point to the copied scripts so you can tweak them. At this point you’re on your own. 37 | 38 | You don’t have to ever use `eject`. The curated feature set is suitable for small and middle deployments, and you shouldn’t feel obligated to use this feature. However we understand that this tool wouldn’t be useful if you couldn’t customize it when you are ready for it. 39 | 40 | ## Learn More 41 | 42 | You can learn more in the [Create React App documentation](https://facebook.github.io/create-react-app/docs/getting-started). 43 | 44 | To learn React, check out the [React documentation](https://reactjs.org/). 45 | 46 | ### Code Splitting 47 | 48 | This section has moved here: https://facebook.github.io/create-react-app/docs/code-splitting 49 | 50 | ### Analyzing the Bundle Size 51 | 52 | This section has moved here: https://facebook.github.io/create-react-app/docs/analyzing-the-bundle-size 53 | 54 | ### Making a Progressive Web App 55 | 56 | This section has moved here: https://facebook.github.io/create-react-app/docs/making-a-progressive-web-app 57 | 58 | ### Advanced Configuration 59 | 60 | This section has moved here: https://facebook.github.io/create-react-app/docs/advanced-configuration 61 | 62 | ### Deployment 63 | 64 | This section has moved here: https://facebook.github.io/create-react-app/docs/deployment 65 | 66 | ### `npm run build` fails to minify 67 | 68 | This section has moved here: https://facebook.github.io/create-react-app/docs/troubleshooting#npm-run-build-fails-to-minify 69 | -------------------------------------------------------------------------------- /auth-service/src/main/java/com/clone/instagram/authservice/endpoint/UserEndpoint.java: -------------------------------------------------------------------------------- 1 | package com.clone.instagram.authservice.endpoint; 2 | 3 | import com.clone.instagram.authservice.exception.*; 4 | import com.clone.instagram.authservice.model.InstaUserDetails; 5 | import com.clone.instagram.authservice.model.User; 6 | import com.clone.instagram.authservice.payload.*; 7 | import com.clone.instagram.authservice.service.UserService; 8 | import lombok.extern.slf4j.Slf4j; 9 | import org.springframework.beans.factory.annotation.Autowired; 10 | import org.springframework.http.HttpStatus; 11 | import org.springframework.http.MediaType; 12 | import org.springframework.http.ResponseEntity; 13 | import org.springframework.security.access.prepost.PreAuthorize; 14 | import org.springframework.security.core.annotation.AuthenticationPrincipal; 15 | import org.springframework.web.bind.annotation.*; 16 | 17 | 18 | @RestController 19 | @Slf4j 20 | public class UserEndpoint { 21 | 22 | @Autowired 23 | private UserService userService; 24 | 25 | @GetMapping(value = "/users/{username}", produces = MediaType.APPLICATION_JSON_VALUE) 26 | public ResponseEntity findUser(@PathVariable("username") String username) { 27 | log.info("retrieving user {}", username); 28 | 29 | return userService 30 | .findByUsername(username) 31 | .map(user -> ResponseEntity.ok(user)) 32 | .orElseThrow(() -> new ResourceNotFoundException(username)); 33 | } 34 | 35 | @GetMapping(value = "/users", produces = MediaType.APPLICATION_JSON_VALUE) 36 | public ResponseEntity findAll() { 37 | log.info("retrieving all users"); 38 | 39 | return ResponseEntity 40 | .ok(userService.findAll()); 41 | } 42 | 43 | @GetMapping(value = "/users/me", produces = MediaType.APPLICATION_JSON_VALUE) 44 | @PreAuthorize("hasRole('USER') or hasRole('FACEBOOK_USER')") 45 | @ResponseStatus(HttpStatus.OK) 46 | public UserSummary getCurrentUser(@AuthenticationPrincipal InstaUserDetails userDetails) { 47 | return UserSummary 48 | .builder() 49 | .id(userDetails.getId()) 50 | .username(userDetails.getUsername()) 51 | .name(userDetails.getUserProfile().getDisplayName()) 52 | .profilePicture(userDetails.getUserProfile().getProfilePictureUrl()) 53 | .build(); 54 | } 55 | 56 | @GetMapping(value = "/users/summary/{username}", produces = MediaType.APPLICATION_JSON_VALUE) 57 | public ResponseEntity getUserSummary(@PathVariable("username") String username) { 58 | log.info("retrieving user {}", username); 59 | 60 | return userService 61 | .findByUsername(username) 62 | .map(user -> ResponseEntity.ok(convertTo(user))) 63 | .orElseThrow(() -> new ResourceNotFoundException(username)); 64 | } 65 | 66 | private UserSummary convertTo(User user) { 67 | return UserSummary 68 | .builder() 69 | .id(user.getId()) 70 | .username(user.getUsername()) 71 | .name(user.getUserProfile().getDisplayName()) 72 | .profilePicture(user.getUserProfile().getProfilePictureUrl()) 73 | .build(); 74 | } 75 | } -------------------------------------------------------------------------------- /two-factor-auth-client/src/signin/Signin.js: -------------------------------------------------------------------------------- 1 | import React, { useEffect, useState } from "react"; 2 | import { Form, Input, Button, notification } from "antd"; 3 | import { Redirect } from "react-router-dom"; 4 | import { 5 | UserOutlined, 6 | LockOutlined, 7 | DingtalkOutlined, 8 | } from "@ant-design/icons"; 9 | import { login } from "../util/ApiUtil"; 10 | import "./Signin.css"; 11 | 12 | const Signin = (props) => { 13 | const [loading, setLoading] = useState(false); 14 | const [redirect, setRedirect] = useState(); 15 | const [username, setUsername] = useState(); 16 | 17 | useEffect(() => { 18 | if (localStorage.getItem("accessToken") !== null) { 19 | props.history.push("/"); 20 | } 21 | }, []); 22 | 23 | const onFinish = (values) => { 24 | setLoading(true); 25 | login(values) 26 | .then((response) => { 27 | if (response.mfa) { 28 | setUsername(values.username); 29 | setRedirect("/verify"); 30 | } else { 31 | localStorage.setItem("accessToken", response.accessToken); 32 | props.history.push("/"); 33 | } 34 | setLoading(false); 35 | }) 36 | .catch((error) => { 37 | if (error.status === 401) { 38 | notification.error({ 39 | message: "Error", 40 | description: "Username or Password is incorrect. Please try again!", 41 | }); 42 | } else { 43 | notification.error({ 44 | message: "Error", 45 | description: 46 | error.message || "Sorry! Something went wrong. Please try again!", 47 | }); 48 | } 49 | setLoading(false); 50 | }); 51 | }; 52 | 53 | if (redirect) { 54 | return ( 55 |
61 |
103 | );
104 | };
105 |
106 | export default Signin;
107 |
--------------------------------------------------------------------------------
/auth-service/src/main/java/com/clone/instagram/authservice/endpoint/AuthEndpoint.java:
--------------------------------------------------------------------------------
1 | package com.clone.instagram.authservice.endpoint;
2 |
3 |
4 | import com.clone.instagram.authservice.exception.BadRequestException;
5 | import com.clone.instagram.authservice.exception.EmailAlreadyExistsException;
6 | import com.clone.instagram.authservice.exception.UsernameAlreadyExistsException;
7 | import com.clone.instagram.authservice.model.Profile;
8 | import com.clone.instagram.authservice.model.Role;
9 | import com.clone.instagram.authservice.model.User;
10 | import com.clone.instagram.authservice.payload.*;
11 | import com.clone.instagram.authservice.service.TotpManager;
12 | import com.clone.instagram.authservice.service.UserService;
13 | import lombok.extern.slf4j.Slf4j;
14 | import org.springframework.beans.factory.annotation.Autowired;
15 | import org.springframework.http.MediaType;
16 | import org.springframework.http.ResponseEntity;
17 | import org.springframework.util.StringUtils;
18 | import org.springframework.web.bind.annotation.PostMapping;
19 | import org.springframework.web.bind.annotation.RequestBody;
20 | import org.springframework.web.bind.annotation.RestController;
21 | import org.springframework.web.servlet.support.ServletUriComponentsBuilder;
22 |
23 | import javax.validation.Valid;
24 | import java.net.URI;
25 |
26 | @RestController
27 | @Slf4j
28 | public class AuthEndpoint {
29 |
30 | @Autowired private UserService userService;
31 | @Autowired private TotpManager totpManager;
32 |
33 | @PostMapping("/signin")
34 | public ResponseEntity authenticateUser(@Valid @RequestBody LoginRequest loginRequest) {
35 | String token = userService.loginUser(loginRequest.getUsername(), loginRequest.getPassword());
36 | return ResponseEntity.ok(new JwtAuthenticationResponse(token, StringUtils.isEmpty(token)));
37 | }
38 |
39 | @PostMapping("/verify")
40 | public ResponseEntity verifyCode(@Valid @RequestBody VerifyCodeRequest verifyCodeRequest) {
41 | String token = userService.verify(verifyCodeRequest.getUsername(), verifyCodeRequest.getCode());
42 | return ResponseEntity.ok(new JwtAuthenticationResponse(token, StringUtils.isEmpty(token)));
43 | }
44 |
45 | @PostMapping(value = "/users", produces = MediaType.APPLICATION_JSON_VALUE)
46 | public ResponseEntity createUser(@Valid @RequestBody SignUpRequest payload) {
47 | log.info("creating user {}", payload.getUsername());
48 |
49 | User user = User
50 | .builder()
51 | .username(payload.getUsername())
52 | .email(payload.getEmail())
53 | .password(payload.getPassword())
54 | .userProfile(Profile
55 | .builder()
56 | .displayName(payload.getName())
57 | .build())
58 | .mfa(payload.isMfa())
59 | .build();
60 |
61 | User saved;
62 | try {
63 | saved = userService.registerUser(user, Role.USER);
64 | } catch (UsernameAlreadyExistsException | EmailAlreadyExistsException e) {
65 | throw new BadRequestException(e.getMessage());
66 | }
67 |
68 | URI location = ServletUriComponentsBuilder
69 | .fromCurrentContextPath().path("/users/{username}")
70 | .buildAndExpand(user.getUsername()).toUri();
71 |
72 | return ResponseEntity
73 | .created(location)
74 | .body(new SignupResponse(saved.isMfa(),
75 | totpManager.getUriForImage(saved.getSecret())));
76 | }
77 | }
78 |
--------------------------------------------------------------------------------
/two-factor-auth-client/src/signup/Signup.js:
--------------------------------------------------------------------------------
1 | import React, { useEffect, useState } from "react";
2 | import { Form, Input, Button, notification, Checkbox } from "antd";
3 | import { Redirect } from "react-router-dom";
4 | import { DingtalkOutlined } from "@ant-design/icons";
5 | import { signup } from "../util/ApiUtil";
6 | import "./Signup.css";
7 |
8 | const Signup = (props) => {
9 | const [loading, setLoading] = useState(false);
10 | const [redirect, setRedirect] = useState();
11 | const [qrImageUrl, setQrImageUrl] = useState();
12 |
13 | useEffect(() => {
14 | if (localStorage.getItem("accessToken") !== null) {
15 | props.history.push("/");
16 | }
17 | }, []);
18 |
19 | const onFinish = (values) => {
20 | setLoading(true);
21 | signup(values)
22 | .then((response) => {
23 | notification.success({
24 | message: "Success",
25 | description:
26 | "Thank you! You're successfully registered. Please Login to continue!",
27 | });
28 | if (response.mfa) {
29 | console.log(response);
30 | setQrImageUrl(response.secretImageUri);
31 | setRedirect("/qrcode");
32 | } else {
33 | setRedirect("/");
34 | }
35 |
36 | setLoading(false);
37 | })
38 | .catch((error) => {
39 | notification.error({
40 | message: "Error",
41 | description:
42 | error.message || "Sorry! Something went wrong. Please try again!",
43 | });
44 | setLoading(false);
45 | });
46 | };
47 |
48 | if (redirect) {
49 | return (
50 |
56 |
104 | );
105 | };
106 |
107 | export default Signup;
108 |
--------------------------------------------------------------------------------
/auth-service/pom.xml:
--------------------------------------------------------------------------------
1 |
2 |