MEAN SSO

Primitive Node.js SSO based on the generator-angular-fullstack version of the MEAN Stack and OAuth2orize middleware.

Project Goals:

• Create a stand-alone SSO supporting OAuth2.0 clients, simple JASIG CAS clients, including JASIG CAS OAuth2 server.
• Option to delegate primary user login to multiple third party providers, especially Facebook.
• Authenticate and Authorize API using cookies or bearer tokens and role based security.
• Web based configuration with role based authorization.
• Primitive CMS with web configuration interface.

Yeoman generator angular-fullstack (https://github.com/DaftMonk/generator-angular-fullstack) leverages the well established generator-angular (https://github.com/yeoman/generator-angular) to provide Yeoman boiler-plating for a MEAN stack application.

MEAN is a boilerplate that provides a nice starting point for MongoDB, Node.js, Express, and AngularJS based applications. It is designed to give you quick and organized way to start developing of MEAN based web apps with useful modules like mongoose and passport pre-bundled and configured. We mainly try to take care of the connection points between existing popular frameworks and solve common integration problems.

OAuth2orizeRecipes (https://github.com/FrankHassanabad/Oauth2orizeRecipes.git) is OAuth2 security recipes and examples based on OAuth2orize.

Getting Started

The dummydata.js will create an 'admin' user assigned the 'Admin' role. Like other generator-angular applications, the DEV and TEST environment's server default to port 9000.

** Requirements (as tested on Win 7/8.1 x64) **

• (optional) Chrome v32.0.1700.102 for karma unit testing
• (optional) msysgit v1.8.5.2 for bash shell (and version control)
• (optional) Heroku toolbelt v3.2.0 (tools only) for deployment
• MongoDB v2.4.9 (localhost with open credentials)
• Redis 2.4 (localhost with open credentials)
• Node.js v0.10.25
• npm install -g yo generator-angular-fullstack

** Other Coolness **

• (optional) Cloudinary image management with direct client side upload and download
• (optional) Authenticated WebSockets built on PrimusJS and Engineio
• Horizontal scaling notifications built on Redis Pub/Sub
• Simple 'best practices' route security model with CORS support for third party clients

** One time setup **

• git clone [email protected]:sullivanpt/mean-sso.git
• cd mean-sso
• npm install
• bower install
• grunt

** Development scenarios ** Use any of the generator-angular-fullstack commands, especially:

• 'grunt serve' to iteratively develop.
• 'grunt' to build and run the entire test suite.
• 'yo angular-fullstack:route ' to generate boiler plate for a new route.

** Heroku **

• heroku config:add ROOT_URL=https://yourdomain.com
• WebSockets: heroku labs:enable websockets

Scenarios currently implemented and verified

** OAuth2 Server (see ./lib/routes.js for API endpoints): **

• https://github.com/FrankHassanabad/Oauth2orizeRecipes/wiki/Resource-Owner-Password-Credentials
• https://github.com/FrankHassanabad/Oauth2orizeRecipes/wiki/Authorization-code
• https://github.com/FrankHassanabad/Oauth2orizeRecipes/wiki/Implicit
• https://github.com/FrankHassanabad/Oauth2orizeRecipes/wiki/Client-Credentials
• https://wiki.jasig.org/display/CASUM/Configuration+for+the+OAuth+server+support#ConfigurationfortheOAuthserversupport-I.HowtouseOAuthserversupportconfiguredforCASserver?
• http://www.jasig.org/cas/protocol (no support for advanced features).

** OAuth2 Client (see ./app/views/partials/providers.html for end user URLs): **

• Facebook http://passportjs.org/guide/facebook/

License

(The MIT License)

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the 'Software'), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.