Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

feat: user roles #46

Merged
merged 22 commits into from
Mar 2, 2024
Merged

feat: user roles #46

merged 22 commits into from
Mar 2, 2024

Conversation

izaiasmachado
Copy link
Owner

@izaiasmachado izaiasmachado commented Mar 1, 2024 •
edited
Loading

Issue

Esse PR implementa cargos para os usuários. Dessa forma, as rotas recebem mais uma camada de segurança.

Proposta deste PR

  • Criar um cargo para usuário USER
  • Criar um cargo para admin ADMIN

Impactos deste PR

  • Usuários com cargo USER conseguem somente fazer um GET /stocks
  • Usuários com cargo ADMIN conseguem administrar as ações e também os usuários
  • Como somente os admins que conseguem listar os usuários, coloquei para que mais informações fossem mostradas do ResponseUserDTO

Evidências de teste

Screenshot 2024-03-01 at 20 11 46

Screenshot 2024-03-01 at 20 12 54

@izaiasmachado
feat: generate jwt token after login
979e84e
@izaiasmachado
fix: autowire auth service dependencies
f44946e
@izaiasmachado
test: mock autowired auth service dependencies
635e530
@izaiasmachado
chore: add jwt secret variable to workflows
35be9f3
@izaiasmachado
feat: make all routes private except those in whitelist
6d42566
@izaiasmachado
feat: ask for jwt to access all private routes
463611f
@izaiasmachado
test: remove security in integration tests
fa78a7a
@izaiasmachado
Merge branch 'main' into feature/protect-routes
8a9a818
@izaiasmachado
refactor: remove unused imports
0d9803a
@izaiasmachado
chore: add spring security version properties
e4302cd
@izaiasmachado
fix: authorize http requests
b47da03
@izaiasmachado
feat: add default user permissions
bbfc93b
@izaiasmachado
test: remove impossible object mapping while dto is created
f827c5b
@izaiasmachado
fix: user role migration
068f4aa
@izaiasmachado
feat: configure protected routes based on role
8cefd40
@izaiasmachado
Merge branch 'main' into feature/user-roles
2cd97f9
@izaiasmachado izaiasmachado changed the base branch from main to feature/deposit-and-withdraw March 1, 2024 22:47
@izaiasmachado izaiasmachado changed the base branch from feature/deposit-and-withdraw to main March 1, 2024 22:48
@izaiasmachado izaiasmachado marked this pull request as ready for review March 1, 2024 23:17
@izaiasmachado izaiasmachado linked an issue Mar 2, 2024 that may be closed by this pull request
BDD Feature: Perfis de acesso do usuário #50
Closed
@izaiasmachado izaiasmachado merged commit 3a98edc into main Mar 2, 2024
4 checks passed
@izaiasmachado izaiasmachado deleted the feature/user-roles branch March 2, 2024 12:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@williambrunos williambrunos williambrunos approved these changes

@JonasFortes12 JonasFortes12 Awaiting requested review from JonasFortes12

@yannluk4 yannluk4 Awaiting requested review from yannluk4

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

BDD Feature: Perfis de acesso do usuário
2 participants
@izaiasmachado @williambrunos