eqeqo-api-auth 0.0.1

Centralized authentication and authorization API for multiple independent services. Manages users, roles, permissions, and service associations.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100

# Demo Database Snapshot

Pre-seeded data loaded by `db/run_all.sql` (IDs are deterministic because the DB is recreated each time).

## Services (`auth.services`)
| id | name       | description                  |
| -- | ---------- | ---------------------------- |
| 1  | Service A  | Demo catalog service         |
| 2  | Service B  | Internal billing service     |
| 3  | Service C  | Customer support portal      |
| 4  | UI Store   | Frontend store surface       |
| 5  | ui-store   | Frontend store surface       |
Service name is used as the client/app identifier.

## Roles (`auth.role`)
| id | name   |
| -- | ------ |
| 1  | Admin  |
| 2  | User   |
| 3  | Editor |
| 4  | Viewer |

## Permissions (`auth.permission`)
| id | name   |
| -- | ------ |
| 1  | read   |
| 2  | write  |
| 3  | update |
| 4  | delete |
| 5  | share  |

## People (`auth.person`)
| id | username | name        | doc        |
| -- | -------- | ----------- | ---------- |
| 1  | adm1     | Admin One   | DNI 00000001 |
| 2  | usr1     | User One    | DNI 00000002 |
| 3  | usr2     | User Two    | DNI 00000003 |
| 4  | usr3     | User Three  | DNI 00000004 |
| 5  | editor1  | Editor One  | DNI 00000005 |
| 6  | viewer1  | Viewer One  | DNI 00000006 |
| 7  | juan     | Juan Demo   | DNI 00000007 |
| 8  | adm2     | Admin Two   | DNI 00000008 |
| 9  | adm3     | Admin Three | DNI 00000009 |
| 10 | usr4     | User Four   | DNI 00000010 |
| 11 | usr5     | User Five   | DNI 00000011 |
| 12 | editor2  | Editor Two  | DNI 00000012 |
| 13 | editor3  | Editor Three | DNI 00000013 |
| 14 | viewer2  | Viewer Two  | DNI 00000014 |
| 15 | viewer3  | Viewer Three | DNI 00000015 |
Passwords: stored as bcrypt hashes; for demo users the plaintext is `<username>-hash` (e.g., adm1-hash).

## Service ↔ Role links (`auth.service_roles`)
| service_id | role_id | meaning                 |
| ---------- | ------- | ----------------------- |
| 1          | 1       | Service A has Admin     |
| 1          | 2       | Service A has User      |
| 2          | 2       | Service B has User      |
| 3          | 3       | Service C has Editor    |
| 4          | 4       | UI Store has Viewer     |
| 4          | 1       | UI Store has Admin      |
| 4          | 2       | UI Store has User       |
| 4          | 3       | UI Store has Editor     |
| 5          | 4       | ui-store has Viewer     |

## Role ↔ Permission links (`auth.role_permission`)
| role_id | permission_id | note                    |
| ------- | ------------- | ----------------------- |
| 1       | 1             | Admin → read            |
| 1       | 2             | Admin → write           |
| 1       | 3             | Admin → update          |
| 1       | 4             | Admin → delete          |
| 2       | 1             | User  → read            |
| 2       | 2             | User  → write           |
| 2       | 3             | User  → update          |
| 2       | 4             | User  → delete          |
| 3       | 1             | Editor → read           |
| 3       | 3             | Editor → update         |
| 4       | 1             | Viewer → read           |

## Person ↔ Service ↔ Role links (`auth.person_service_role`)
| person_id | service_id | role_id | note                         |
| --------- | ---------- | ------- | ---------------------------- |
| 1         | 1          | 1       | adm1 is Admin in Service A   |
| 2         | 1          | 2       | usr1 is User in Service A    |
| 3         | 2          | 2       | usr2 is User in Service B    |
| 4         | 3          | 3       | usr3 is Editor in Service C  |
| 5         | 1          | 1       | editor1 is Admin in Service A |
| 5         | 3          | 3       | editor1 is Editor in Service C |
| 6         | 5          | 4       | viewer1 is Viewer in ui-store |
| 7         | 4          | 4       | juan is Viewer in UI Store   |
| 8         | 4          | 1       | adm2 is Admin in UI Store    |
| 9         | 4          | 1       | adm3 is Admin in UI Store    |
| 10        | 4          | 2       | usr4 is User in UI Store     |
| 11        | 4          | 2       | usr5 is User in UI Store     |
| 12        | 4          | 3       | editor2 is Editor in UI Store |
| 13        | 4          | 3       | editor3 is Editor in UI Store |
| 14        | 4          | 4       | viewer2 is Viewer in UI Store |
| 15        | 4          | 4       | viewer3 is Viewer in UI Store |

Use these IDs for quick manual requests (e.g., `GET /people/7/services/4` with `token` from user `juan`). Refresh by running `psql -U postgres -f db/run_all.sql`.