Vapor Authentication Template
This package is a Vapor 4 template to showcase different features and include authentication functions needed for a lot of apps. It uses concepts such as: repository pattern, queues, jwt, fluent, testing and mailgun
The template can be cloned and configured/changed to fit your needs, but should give a good starting point to anyone new to Vapor.
Features
- User registration
- User login
- Reset password
- Email verification
- Refresh and access tokens
- Testing
- JWT Authentication
- Queues for email sending
- Repository Pattern
- Mailgun
Routes
| URL | HTTP Method | Description | Content (Body) |
|---|---|---|---|
| /api/auth/register | POST | Registers a user and sends email verification | RegisterRequest |
| /api/auth/login | POST | Login with existing user (requires email verification) | LoginRequest |
| /api/auth/email-verification | GET | Used to verify an email with a email verification token | Query parameter token |
| /api/auth/email-verification | POST | (Re)sends email verification to a specific email | SendEmailVerification |
| /api/auth/reset-password | POST | Sends reset-password email with token | ResetPasswordRequest |
| /api/auth/reset-password/verify | GET | Verifies a given reset-password token | Query parameter token |
| /api/auth/recover | POST | Changes user password with reset-password token supplied | RecoverAccountRequest |
| /api/auth/me | GET | Returns the current authenticated user | None |
| /api/auth/accessToken | POST | Gives the user a new accesstoken and refresh token | AccessTokenRequest |
Configuration
Environment variables
These environment variables will be used for configuring different services by default:
| Key | Default Value | Description |
|---|---|---|
POSTGRES_HOSTNAME |
localhost |
Postgres hostname |
POSTGRES_USERNAME |
vapor |
Postgres usernane |
POSTGRES_PASSWORD |
password |
Postgres password |
POSTGRES_DATABASE |
vapor |
Postgres database |
JWKS_KEYPAIR_FILE |
keypair.jwks |
JWKS Keypair file relative to root directory see "JWT" section for more info |
MAILGUN_API_KEY |
None | Mailgun API Key |
SITE_API_URL |
None | The URL where your API will be hosted ex: "https://api.myapp.com" (used for email-verification URL) |
SITE_FRONTEND_URL |
None | The URL where your frontend will be hosted ex: "http://myapp.com" (used for reset-password URL) |
NO_REPLY_EMAIL |
None | The no reply email that will be used for Mailgun |
REDIS_URL |
redis://127.0.0.1:6379 |
Redis URL for Queues worker. |
App config
AppConfig contains configuration like API URL, frontend URL and no-reply email. It loads from environment variables by default. Otherwise you can override it inside configure.swift:
app.config = .init(...)Constants
Constants.swift contains constants releated to tokens lifetime.
| Token | Lifetime |
|---|---|
| Access Token | 15 minutes |
| Refresh Token | 7 days |
| Email Verification Token | 24 hours |
| Reset Password Token | 1 hour |
Mailgun
The template uses VaporMailgunService and be configured as it states in the documentation. Extensions/Mailgun+Domains.swift contains the domains.
JWT
This package uses JWT for Access Tokens, and by default it loads JWT credentials from a JWKS file called keypair.jwks in the root directory. You can generate a JWKS keypair at https://mkjwk.org/