Add fauna db provider

fix: organize dbs

.dockerignore

@@ -7,3 +7,5 @@ ROADMAP.md
 build
 .env
 data.db
+app/node_modules
+app/build

.env.sample

@@ -2,8 +2,12 @@ ENV=production
 DATABASE_URL=data.db
 DATABASE_TYPE=sqlite
 ADMIN_SECRET=admin
-DISABLE_EMAIL_VERIFICATION=true
 JWT_SECRET=random_string
+SENDER_EMAIL=info@authorizer.dev
+SMTP_USERNAME=username
+SMTP_PASSWORD=password
+SMTP_HOST=smtp.mailtrap.io
+SMTP_PORT=2525
 JWT_TYPE=HS256
 ROLES=user
 DEFAULT_ROLES=user

.github/CONTRIBUTING.md

@@ -49,3 +49,181 @@ Please ask as many questions as you need, either directly in the issue or on [Di
 5. Build the code `make clean && make`
    > Note: if you don't have [`make`](https://www.ibm.com/docs/en/aix/7.2?topic=concepts-make-command), you can `cd` into `server` dir and build using the `go build` command
 6. Run binary `./build/server`
+
+### Testing
+
+Make sure you test before creating PR.
+
+If you want to test for all the databases that authorizer supports you will have to run `mongodb` & `arangodb` instances locally.
+
+Setup mongodb & arangodb using Docker
+
+```
+docker run --name mongodb -d -p 27017:27017 mongo
+
+// -e ARANGO_ROOT_PASSWORD=root
+docker run --name arangodb -d -p 8529:8529 -e ARANGO_NO_AUTH=1 arangodb/arangodb:3.8.4
+```
+
+> Note: If you are not making any changes in db schema / db operations, you can disable those db tests [here](https://github.com/authorizerdev/authorizer/blob/main/server/__test__/resolvers_test.go#L14)
+
+If you are adding new resolver,
+
+1. create new resolver test file [here](https://github.com/authorizerdev/authorizer/tree/main/server/__test__)
+   Naming convention filename: `resolver_name_test.go` function name: `resolverNameTest(t *testing.T, s TestSetup)`
+2. Add your tests [here](https://github.com/authorizerdev/authorizer/blob/main/server/__test__/resolvers_test.go#L38)
+
+**Command to run tests:**
+
+```sh
+make test
+```
+
+**Manual Testing:**
+
+For manually testing using graphql playground, you can paste following queries and mutations in your playground and test it
+
+```gql
+mutation Signup {
+	signup(
+		params: {
+			email: "lakhan@yopmail.com"
+			password: "test"
+			confirm_password: "test"
+			given_name: "lakhan"
+		}
+	) {
+		message
+		user {
+			id
+			family_name
+			given_name
+			email
+			email_verified
+		}
+	}
+}
+
+mutation ResendEamil {
+	resend_verify_email(
+		params: { email: "lakhan@yopmail.com", identifier: "basic_auth_signup" }
+	) {
+		message
+	}
+}
+
+query GetVerifyRequests {
+	_verification_requests {
+		id
+		token
+		expires
+		identifier
+	}
+}
+
+mutation VerifyEmail {
+	verify_email(params: { token: "" }) {
+		access_token
+		expires_at
+		user {
+			id
+			email
+			given_name
+			email_verified
+		}
+	}
+}
+
+mutation Login {
+	login(params: { email: "lakhan@yopmail.com", password: "test" }) {
+		access_token
+		expires_at
+		user {
+			id
+			family_name
+			given_name
+			email
+		}
+	}
+}
+
+query GetSession {
+	session {
+		access_token
+		expires_at
+		user {
+			id
+			given_name
+			family_name
+			email
+			email_verified
+			signup_methods
+			created_at
+			updated_at
+		}
+	}
+}
+
+mutation ForgotPassword {
+	forgot_password(params: { email: "lakhan@yopmail.com" }) {
+		message
+	}
+}
+
+mutation ResetPassword {
+	reset_password(
+		params: { token: "", password: "test", confirm_password: "test" }
+	) {
+		message
+	}
+}
+
+mutation UpdateProfile {
+	update_profile(params: { family_name: "samani" }) {
+		message
+	}
+}
+
+query GetUsers {
+	_users {
+		id
+		email
+		email_verified
+		given_name
+		family_name
+		picture
+		signup_methods
+		phone_number
+	}
+}
+
+mutation MagicLinkLogin {
+	magic_link_login(params: { email: "test@yopmail.com" }) {
+		message
+	}
+}
+
+mutation Logout {
+	logout {
+		message
+	}
+}
+
+mutation UpdateUser {
+	_update_user(
+		params: {
+			id: "dafc9400-d603-4ade-997c-83fcd54bbd67"
+			roles: ["user", "admin"]
+		}
+	) {
+		email
+		roles
+	}
+}
+
+mutation DeleteUser {
+	_delete_user(params: { email: "signup.test134523@yopmail.com" }) {
+		message
+	}
+}
+```

.github/workflows/release.yaml

@@ -8,26 +8,23 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
+      - uses: actions/setup-node@v2
+        with:
+          node-version: '16'
+      - uses: actions/setup-go@v2
+        with:
+          go-version: '^1.17.3'
       - name: Install dependencies
         run: |
           sudo apt-get install build-essential wget zip gcc-mingw-w64 && \
-          sudo apt-get remove --auto-remove golang-go && \
-          sudo rm -rf /usr/bin/go &&\
-          wget --progress=dot:mega https://golang.org/dl/go1.17.1.linux-amd64.tar.gz -O go-linux.tar.gz && \
-          sudo tar -zxf go-linux.tar.gz && \
-          sudo mv go /usr/bin/ && \
-          sudo mkdir -p /go/bin /go/src /go/pkg && \
-          export GO_HOME=/usr/bin/go && \
-          export GOPATH=/go && \
-          export PATH=${GOPATH}/bin:${GO_HOME}/bin/:$PATH && \
-          echo "/usr/bin/go/bin" >> $GITHUB_PATH
-          echo "/usr/bin/x86_64-w64-mingw32-gcc" >> GITHUB_PATH
-          go version && \
+          echo "/usr/bin/x86_64-w64-mingw32-gcc" >> GITHUB_PATH && \
           wget --no-check-certificate --progress=dot:mega https://github.com/wangyoucao577/assets-uploader/releases/download/v0.3.0/github-assets-uploader-v0.3.0-linux-amd64.tar.gz -O github-assets-uploader.tar.gz && \
           tar -zxf github-assets-uploader.tar.gz && \
           sudo mv github-assets-uploader /usr/sbin/ && \
           sudo rm -f github-assets-uploader.tar.gz && \
-          github-assets-uploader -version
+          github-assets-uploader -version && \
+          make build-app && \
+          make build-dashboard
       - name: Print Go paths
         run: whereis go
       - name: Print Go Version
@@ -41,12 +38,12 @@ jobs:
           make clean && \
           CGO_ENABLED=1 GOOS=windows CC=/usr/bin/x86_64-w64-mingw32-gcc make && \
           mv build/server build/server.exe && \
-          zip -vr authorizer-${VERSION}-windows-amd64.zip .env app/build build templates
+          zip -vr authorizer-${VERSION}-windows-amd64.zip .env app/build build templates dashboard/build
       - name: Package files for linux
         run: |
           make clean && \
           CGO_ENABLED=1 make && \
-          tar cvfz authorizer-${VERSION}-linux-amd64.tar.gz .env app/build build templates
+          tar cvfz authorizer-${VERSION}-linux-amd64.tar.gz .env app/build build templates dashboard/build
       - name: Upload assets
         run: |
           github-assets-uploader -f authorizer-${VERSION}-windows-amd64.zip -mediatype application/zip -repo authorizerdev/authorizer -token ${{secrets.RELEASE_TOKEN}} -tag ${VERSION} && \

.gitignore

@@ -2,6 +2,9 @@ server/server
 server/.env
 data
 app/node_modules
+app/build
+dashboard/node_modules
+dashboard/build
 build
 .env
 data.db

Dockerfile

@@ -1,5 +1,5 @@
-FROM golang:1.17-alpine as builder
-WORKDIR /app
+FROM golang:1.17-alpine as go-builder
+WORKDIR /authorizer
 COPY server server
 COPY Makefile .
 
@@ -7,15 +7,25 @@ ARG VERSION="latest"
 ENV VERSION="$VERSION"
 
 RUN echo "$VERSION"
-RUN apk add build-base nodejs &&\
+RUN apk add build-base &&\
     make clean && make && \
     chmod 777 build/server
 
-FROM alpine:latest
-RUN apk --no-cache add ca-certificates
-WORKDIR /root/
+FROM node:17-alpine3.12 as node-builder
+WORKDIR /authorizer
 COPY app app
+COPY dashboard dashboard
+COPY Makefile .
+RUN apk add build-base &&\
+    make build-app && \
+    make build-dashboard
+
+FROM alpine:latest
+WORKDIR /root/
+RUN mkdir app dashboard
+COPY --from=node-builder /authorizer/app/build app/build
+COPY --from=node-builder /authorizer/dashboard/build dashboard/build
+COPY --from=go-builder /authorizer/build build
 COPY templates templates
-COPY --from=builder /app/build build
 EXPOSE 8080
 CMD [ "./build/server" ]

Makefile

@@ -2,8 +2,12 @@ DEFAULT_VERSION=0.1.0-local
 VERSION := $(or $(VERSION),$(DEFAULT_VERSION))
 
 cmd:
-	cd server && go build -ldflags "-w -X main.Version=$(VERSION)" -o '../build/server'
+	cd server && go build -ldflags "-w -X main.VERSION=$(VERSION)" -o '../build/server'
+build-app:
+	cd app && npm i && npm run build
+build-dashboard:
+	cd dashboard && npm i && npm run build
 clean:
 	rm -rf build
 test:
-	cd server && go clean --testcache && go test -v ./...
+	cd server && go clean --testcache && go test -v ./test

README.md

@@ -151,7 +151,7 @@ Deploy production ready Authorizer instance using [railway.app](https://github.c
 
 ## Testing
 
-- Integration Test: This tests are written along with [authorizer-js](https://github.com/authorizerdev/authorizer-js/blob/main/__test__/index.test.js) lib.
+- Check the testing instructions [here](https://github.com/authorizerdev/authorizer/blob/main/.github/CONTRIBUTING.md#testing)
 
 ## Integrating into your website
 

TODO.md

@@ -1,5 +1,26 @@
 # Task List
 
+## Implement better way of handling jwt tokens
+
+Check: https://hasura.io/blog/best-practices-of-using-jwt-with-graphql/#server-side-rendering-ssr
+
+- [x] Set finger print in response cookie (https://github.com/hasura/jwt-guide/blob/60a7a86146d604fc48a799fffdee712be1c52cd0/lib/setFingerprintCookieAndSignJwt.ts#L8)
+- [x] Save refresh token in session store
+- [x] refresh token should be made more secure with the help of secure token rotation. Every time new token is requested new refresh token should be generated
+- [x] Return jwt in response
+- [x] To get session send finger print and refresh token [if they are valid -> a new access token is generated and sent to user]
+- [x] Refresh token should be long living token (refresh token + finger print hash should be verified)
+
+## Open ID compatible claims and schema
+
+- [x] Rename `schema.graphqls` and re generate schema
+- [x] Rename to snake case [files + schema]
+- [x] Refactor db models
+- [x] Check extra data in oauth profile and save accordingly
+- [x] Update all the resolver to make them compatible with schema changes
+- [x] Update JWT claims
+- [x] Write integration tests for all resolvers
+
 ## Feature Multiple sessions
 
 - Multiple sessions for users to login use hMset from redis for this

app/README.md

@@ -1,3 +1,14 @@
 # Authorizer APP
 
 App that can be used as login wall for your any application in combination with @authorizerdev/@authorizer.js
+
+### Getting started
+
+**Setting up locally**
+
+- `cd app`
+- `npm start`
+
+**Creating production build**
+
+- `make build-app`

app/build/bundle.css

@@ -1,16 +0,0 @@
-body {
-  margin: 0;
-  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen',
-    'Ubuntu', 'Cantarell', 'Fira Sans', 'Droid Sans', 'Helvetica Neue',
-    sans-serif;
-  -webkit-font-smoothing: antialiased;
-  -moz-osx-font-smoothing: grayscale;
-  color: #374151;
-  font-size: 14px;
-}
-
-*,
-*:before,
-*:after {
-  box-sizing: inherit;
-}

app/esbuild.config.js

@@ -0,0 +1,11 @@
+const __is_prod__ = process.env.NODE_ENV === 'production';
+require('esbuild').build({
+	entryPoints: ['src/index.tsx'],
+	chunkNames: '[name]-[hash]',
+	bundle: true,
+	minify: __is_prod__,
+	outdir: 'build',
+	splitting: true,
+	format: 'esm',
+	watch: !__is_prod__,
+});

app/package-lock.json

@@ -5,119 +5,119 @@
 	"requires": true,
 	"dependencies": {
 		"@authorizerdev/authorizer-js": {
-			"version": "0.1.0",
-			"resolved": "https://registry.npmjs.org/@authorizerdev/authorizer-js/-/authorizer-js-0.1.0.tgz",
-			"integrity": "sha512-wNtTrFYg4qjvI+Sm58d9E8x+XaiwCA0DCyG87e37YDXmMlvvOmRQf05dxRRxZoxNC1WUkA3UYMTAclCKkonZAg==",
+			"version": "0.2.1",
+			"resolved": "https://registry.npmjs.org/@authorizerdev/authorizer-js/-/authorizer-js-0.2.1.tgz",
+			"integrity": "sha512-5lQlh+nc5xTsPongfTyCSX24A1WESu/BjhmZwUNuScEOGady0qPoDHE3RBf46dpi5v05wbHCDN1IFEalX5zssQ==",
 			"requires": {
 				"node-fetch": "^2.6.1"
 			}
 		},
 		"@authorizerdev/authorizer-react": {
-			"version": "0.2.0",
-			"resolved": "https://registry.npmjs.org/@authorizerdev/authorizer-react/-/authorizer-react-0.2.0.tgz",
-			"integrity": "sha512-1JICta0rpgDlncIcvilWcYKP8QNq2v0RlcYS6ZeYZGJ5bymFlF6NOdMjh6Hn2IFfSWtqEPQ6zU++kAQ8kei1AA==",
+			"version": "0.4.3",
+			"resolved": "https://registry.npmjs.org/@authorizerdev/authorizer-react/-/authorizer-react-0.4.3.tgz",
+			"integrity": "sha512-o/wWe9zZ3ARYdjbDfhGfvOxe1YQrE1YQ+UN9pcq85YSDkbfBkOfcnJ4YxlxWdL0Obd/ErDIeQ3vskyrfvRf3sA==",
 			"requires": {
-				"@authorizerdev/authorizer-js": "^0.1.0",
+				"@authorizerdev/authorizer-js": "^0.2.1",
 				"final-form": "^4.20.2",
 				"react-final-form": "^6.5.3",
 				"styled-components": "^5.3.0"
 			}
 		},
 		"@babel/code-frame": {
-			"version": "7.16.0",
-			"resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.16.0.tgz",
-			"integrity": "sha512-IF4EOMEV+bfYwOmNxGzSnjR2EmQod7f1UXOpZM3l4i4o4QNwzjtJAu/HxdjHq0aYBvdqMuQEY1eg0nqW9ZPORA==",
+			"version": "7.16.7",
+			"resolved": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.16.7.tgz",
+			"integrity": "sha512-iAXqUn8IIeBTNd72xsFlgaXHkMBMt6y4HJp1tIaK465CWLT/fG1aqB7ykr95gHHmlBdGbFeWWfyB4NJJ0nmeIg==",
 			"requires": {
-				"@babel/highlight": "^7.16.0"
+				"@babel/highlight": "^7.16.7"
 			}
 		},
 		"@babel/generator": {
-			"version": "7.16.5",
-			"resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.16.5.tgz",
-			"integrity": "sha512-kIvCdjZqcdKqoDbVVdt5R99icaRtrtYhYK/xux5qiWCBmfdvEYMFZ68QCrpE5cbFM1JsuArUNs1ZkuKtTtUcZA==",
+			"version": "7.16.8",
+			"resolved": "https://registry.npmjs.org/@babel/generator/-/generator-7.16.8.tgz",
+			"integrity": "sha512-1ojZwE9+lOXzcWdWmO6TbUzDfqLD39CmEhN8+2cX9XkDo5yW1OpgfejfliysR2AWLpMamTiOiAp/mtroaymhpw==",
 			"requires": {
-				"@babel/types": "^7.16.0",
+				"@babel/types": "^7.16.8",
 				"jsesc": "^2.5.1",
 				"source-map": "^0.5.0"
 			}
 		},
 		"@babel/helper-annotate-as-pure": {
-			"version": "7.16.0",
-			"resolved": "https://registry.npmjs.org/@babel/helper-annotate-as-pure/-/helper-annotate-as-pure-7.16.0.tgz",
-			"integrity": "sha512-ItmYF9vR4zA8cByDocY05o0LGUkp1zhbTQOH1NFyl5xXEqlTJQCEJjieriw+aFpxo16swMxUnUiKS7a/r4vtHg==",
+			"version": "7.16.7",
+			"resolved": "https://registry.npmjs.org/@babel/helper-annotate-as-pure/-/helper-annotate-as-pure-7.16.7.tgz",
+			"integrity": "sha512-s6t2w/IPQVTAET1HitoowRGXooX8mCgtuP5195wD/QJPV6wYjpujCGF7JuMODVX2ZAJOf1GT6DT9MHEZvLOFSw==",
 			"requires": {
-				"@babel/types": "^7.16.0"
+				"@babel/types": "^7.16.7"
 			}
 		},
 		"@babel/helper-environment-visitor": {
-			"version": "7.16.5",
-			"resolved": "https://registry.npmjs.org/@babel/helper-environment-visitor/-/helper-environment-visitor-7.16.5.tgz",
-			"integrity": "sha512-ODQyc5AnxmZWm/R2W7fzhamOk1ey8gSguo5SGvF0zcB3uUzRpTRmM/jmLSm9bDMyPlvbyJ+PwPEK0BWIoZ9wjg==",
+			"version": "7.16.7",
+			"resolved": "https://registry.npmjs.org/@babel/helper-environment-visitor/-/helper-environment-visitor-7.16.7.tgz",
+			"integrity": "sha512-SLLb0AAn6PkUeAfKJCCOl9e1R53pQlGAfc4y4XuMRZfqeMYLE0dM1LMhqbGAlGQY0lfw5/ohoYWAe9V1yibRag==",
 			"requires": {
-				"@babel/types": "^7.16.0"
+				"@babel/types": "^7.16.7"
 			}
 		},
 		"@babel/helper-function-name": {
-			"version": "7.16.0",
-			"resolved": "https://registry.npmjs.org/@babel/helper-function-name/-/helper-function-name-7.16.0.tgz",
-			"integrity": "sha512-BZh4mEk1xi2h4HFjWUXRQX5AEx4rvaZxHgax9gcjdLWdkjsY7MKt5p0otjsg5noXw+pB+clMCjw+aEVYADMjog==",
+			"version": "7.16.7",
+			"resolved": "https://registry.npmjs.org/@babel/helper-function-name/-/helper-function-name-7.16.7.tgz",
+			"integrity": "sha512-QfDfEnIUyyBSR3HtrtGECuZ6DAyCkYFp7GHl75vFtTnn6pjKeK0T1DB5lLkFvBea8MdaiUABx3osbgLyInoejA==",
 			"requires": {
-				"@babel/helper-get-function-arity": "^7.16.0",
-				"@babel/template": "^7.16.0",
-				"@babel/types": "^7.16.0"
+				"@babel/helper-get-function-arity": "^7.16.7",
+				"@babel/template": "^7.16.7",
+				"@babel/types": "^7.16.7"
 			}
 		},
 		"@babel/helper-get-function-arity": {
-			"version": "7.16.0",
-			"resolved": "https://registry.npmjs.org/@babel/helper-get-function-arity/-/helper-get-function-arity-7.16.0.tgz",
-			"integrity": "sha512-ASCquNcywC1NkYh/z7Cgp3w31YW8aojjYIlNg4VeJiHkqyP4AzIvr4qx7pYDb4/s8YcsZWqqOSxgkvjUz1kpDQ==",
+			"version": "7.16.7",
+			"resolved": "https://registry.npmjs.org/@babel/helper-get-function-arity/-/helper-get-function-arity-7.16.7.tgz",
+			"integrity": "sha512-flc+RLSOBXzNzVhcLu6ujeHUrD6tANAOU5ojrRx/as+tbzf8+stUCj7+IfRRoAbEZqj/ahXEMsjhOhgeZsrnTw==",
 			"requires": {
-				"@babel/types": "^7.16.0"
+				"@babel/types": "^7.16.7"
 			}
 		},
 		"@babel/helper-hoist-variables": {
-			"version": "7.16.0",
-			"resolved": "https://registry.npmjs.org/@babel/helper-hoist-variables/-/helper-hoist-variables-7.16.0.tgz",
-			"integrity": "sha512-1AZlpazjUR0EQZQv3sgRNfM9mEVWPK3M6vlalczA+EECcPz3XPh6VplbErL5UoMpChhSck5wAJHthlj1bYpcmg==",
+			"version": "7.16.7",
+			"resolved": "https://registry.npmjs.org/@babel/helper-hoist-variables/-/helper-hoist-variables-7.16.7.tgz",
+			"integrity": "sha512-m04d/0Op34H5v7pbZw6pSKP7weA6lsMvfiIAMeIvkY/R4xQtBSMFEigu9QTZ2qB/9l22vsxtM8a+Q8CzD255fg==",
 			"requires": {
-				"@babel/types": "^7.16.0"
+				"@babel/types": "^7.16.7"
 			}
 		},
 		"@babel/helper-module-imports": {
-			"version": "7.16.0",
-			"resolved": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.16.0.tgz",
-			"integrity": "sha512-kkH7sWzKPq0xt3H1n+ghb4xEMP8k0U7XV3kkB+ZGy69kDk2ySFW1qPi06sjKzFY3t1j6XbJSqr4mF9L7CYVyhg==",
+			"version": "7.16.7",
+			"resolved": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.16.7.tgz",
+			"integrity": "sha512-LVtS6TqjJHFc+nYeITRo6VLXve70xmq7wPhWTqDJusJEgGmkAACWwMiTNrvfoQo6hEhFwAIixNkvB0jPXDL8Wg==",
 			"requires": {
-				"@babel/types": "^7.16.0"
+				"@babel/types": "^7.16.7"
 			}
 		},
 		"@babel/helper-split-export-declaration": {
-			"version": "7.16.0",
-			"resolved": "https://registry.npmjs.org/@babel/helper-split-export-declaration/-/helper-split-export-declaration-7.16.0.tgz",
-			"integrity": "sha512-0YMMRpuDFNGTHNRiiqJX19GjNXA4H0E8jZ2ibccfSxaCogbm3am5WN/2nQNj0YnQwGWM1J06GOcQ2qnh3+0paw==",
+			"version": "7.16.7",
+			"resolved": "https://registry.npmjs.org/@babel/helper-split-export-declaration/-/helper-split-export-declaration-7.16.7.tgz",
+			"integrity": "sha512-xbWoy/PFoxSWazIToT9Sif+jJTlrMcndIsaOKvTA6u7QEo7ilkRZpjew18/W3c7nm8fXdUDXh02VXTbZ0pGDNw==",
 			"requires": {
-				"@babel/types": "^7.16.0"
+				"@babel/types": "^7.16.7"
 			}
 		},
 		"@babel/helper-validator-identifier": {
-			"version": "7.15.7",
-			"resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.15.7.tgz",
-			"integrity": "sha512-K4JvCtQqad9OY2+yTU8w+E82ywk/fe+ELNlt1G8z3bVGlZfn/hOcQQsUhGhW/N+tb3fxK800wLtKOE/aM0m72w=="
+			"version": "7.16.7",
+			"resolved": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.16.7.tgz",
+			"integrity": "sha512-hsEnFemeiW4D08A5gUAZxLBTXpZ39P+a+DGDsHw1yxqyQ/jzFEnxf5uTEGp+3bzAbNOxU1paTgYS4ECU/IgfDw=="
 		},
 		"@babel/highlight": {
-			"version": "7.16.0",
-			"resolved": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.16.0.tgz",
-			"integrity": "sha512-t8MH41kUQylBtu2+4IQA3atqevA2lRgqA2wyVB/YiWmsDSuylZZuXOUy9ric30hfzauEFfdsuk/eXTRrGrfd0g==",
+			"version": "7.16.10",
+			"resolved": "https://registry.npmjs.org/@babel/highlight/-/highlight-7.16.10.tgz",
+			"integrity": "sha512-5FnTQLSLswEj6IkgVw5KusNUUFY9ZGqe/TRFnP/BKYHYgfh7tc+C7mwiy95/yNP7Dh9x580Vv8r7u7ZfTBFxdw==",
 			"requires": {
-				"@babel/helper-validator-identifier": "^7.15.7",
+				"@babel/helper-validator-identifier": "^7.16.7",
 				"chalk": "^2.0.0",
 				"js-tokens": "^4.0.0"
 			}
 		},
 		"@babel/parser": {
-			"version": "7.16.6",
-			"resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.16.6.tgz",
-			"integrity": "sha512-Gr86ujcNuPDnNOY8mi383Hvi8IYrJVJYuf3XcuBM/Dgd+bINn/7tHqsj+tKkoreMbmGsFLsltI/JJd8fOFWGDQ=="
+			"version": "7.16.12",
+			"resolved": "https://registry.npmjs.org/@babel/parser/-/parser-7.16.12.tgz",
+			"integrity": "sha512-VfaV15po8RiZssrkPweyvbGVSe4x2y+aciFCgn0n0/SJMR22cwofRV1mtnJQYcSB1wUTaA/X1LnA3es66MCO5A=="
 		},
 		"@babel/runtime": {
 			"version": "7.14.8",
@@ -128,38 +128,38 @@
 			}
 		},
 		"@babel/template": {
-			"version": "7.16.0",
-			"resolved": "https://registry.npmjs.org/@babel/template/-/template-7.16.0.tgz",
-			"integrity": "sha512-MnZdpFD/ZdYhXwiunMqqgyZyucaYsbL0IrjoGjaVhGilz+x8YB++kRfygSOIj1yOtWKPlx7NBp+9I1RQSgsd5A==",
+			"version": "7.16.7",
+			"resolved": "https://registry.npmjs.org/@babel/template/-/template-7.16.7.tgz",
+			"integrity": "sha512-I8j/x8kHUrbYRTUxXrrMbfCa7jxkE7tZre39x3kjr9hvI82cK1FfqLygotcWN5kdPGWcLdWMHpSBavse5tWw3w==",
 			"requires": {
-				"@babel/code-frame": "^7.16.0",
-				"@babel/parser": "^7.16.0",
-				"@babel/types": "^7.16.0"
+				"@babel/code-frame": "^7.16.7",
+				"@babel/parser": "^7.16.7",
+				"@babel/types": "^7.16.7"
 			}
 		},
 		"@babel/traverse": {
-			"version": "7.16.5",
-			"resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.16.5.tgz",
-			"integrity": "sha512-FOCODAzqUMROikDYLYxl4nmwiLlu85rNqBML/A5hKRVXG2LV8d0iMqgPzdYTcIpjZEBB7D6UDU9vxRZiriASdQ==",
+			"version": "7.16.10",
+			"resolved": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.16.10.tgz",
+			"integrity": "sha512-yzuaYXoRJBGMlBhsMJoUW7G1UmSb/eXr/JHYM/MsOJgavJibLwASijW7oXBdw3NQ6T0bW7Ty5P/VarOs9cHmqw==",
 			"requires": {
-				"@babel/code-frame": "^7.16.0",
-				"@babel/generator": "^7.16.5",
-				"@babel/helper-environment-visitor": "^7.16.5",
-				"@babel/helper-function-name": "^7.16.0",
-				"@babel/helper-hoist-variables": "^7.16.0",
-				"@babel/helper-split-export-declaration": "^7.16.0",
-				"@babel/parser": "^7.16.5",
-				"@babel/types": "^7.16.0",
+				"@babel/code-frame": "^7.16.7",
+				"@babel/generator": "^7.16.8",
+				"@babel/helper-environment-visitor": "^7.16.7",
+				"@babel/helper-function-name": "^7.16.7",
+				"@babel/helper-hoist-variables": "^7.16.7",
+				"@babel/helper-split-export-declaration": "^7.16.7",
+				"@babel/parser": "^7.16.10",
+				"@babel/types": "^7.16.8",
 				"debug": "^4.1.0",
 				"globals": "^11.1.0"
 			}
 		},
 		"@babel/types": {
-			"version": "7.16.0",
-			"resolved": "https://registry.npmjs.org/@babel/types/-/types-7.16.0.tgz",
-			"integrity": "sha512-PJgg/k3SdLsGb3hhisFvtLOw5ts113klrpLuIPtCJIU+BB24fqq6lf8RWqKJEjzqXR9AEH1rIb5XTqwBHB+kQg==",
+			"version": "7.16.8",
+			"resolved": "https://registry.npmjs.org/@babel/types/-/types-7.16.8.tgz",
+			"integrity": "sha512-smN2DQc5s4M7fntyjGtyIPbRJv6wW4rU/94fmYJ7PKQuZkC0qGMHXJbg6sNGt12JmVr4k5YaptI/XtiLJBnmIg==",
 			"requires": {
-				"@babel/helper-validator-identifier": "^7.15.7",
+				"@babel/helper-validator-identifier": "^7.16.7",
 				"to-fast-properties": "^2.0.0"
 			}
 		},
@@ -420,9 +420,9 @@
 			"integrity": "sha512-sGkPx+VjMtmA6MX27oA4FBFELFCZZ4S4XqeGOXCv68tT+jb3vk/RyaKWP0PTKyWtmLSM0b+adUTEvbs1PEaH2w=="
 		},
 		"node-fetch": {
-			"version": "2.6.6",
-			"resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.6.tgz",
-			"integrity": "sha512-Z8/6vRlTUChSdIgMa51jxQ4lrw/Jy5SOW10ObaA47/RElsAN2c5Pn8bTgFGWn/ibwzXTE8qwr1Yzx28vsecXEA==",
+			"version": "2.6.7",
+			"resolved": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.7.tgz",
+			"integrity": "sha512-ZjMPFEfVx5j+y2yF35Kzx5sF7kDzxuDj6ziH4FFbOp87zKDZNx8yExJIb05OGF4Nlt9IHFIMBkRl41VdvcNdbQ==",
 			"requires": {
 				"whatwg-url": "^5.0.0"
 			}
@@ -490,9 +490,9 @@
 			},
 			"dependencies": {
 				"@babel/runtime": {
-					"version": "7.16.5",
-					"resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.16.5.tgz",
-					"integrity": "sha512-TXWihFIS3Pyv5hzR7j6ihmeLkZfrXGxAr5UfSl8CHf+6q/wpiYDkUau0czckpYG8QmnCIuPpdLtuA9VmuGGyMA==",
+					"version": "7.16.7",
+					"resolved": "https://registry.npmjs.org/@babel/runtime/-/runtime-7.16.7.tgz",
+					"integrity": "sha512-9E9FJowqAsytyOY6LG+1KuueckRL+aQW+mKvXRXnuFGyRAyepJPmEo9vgMfXUA6O9u3IeEdv9MAkppFcaQwogQ==",
 					"requires": {
 						"regenerator-runtime": "^0.13.4"
 					}

app/package.json

@@ -4,13 +4,14 @@
 	"description": "",
 	"main": "index.js",
 	"scripts": {
-		"build": "esbuild src/index.tsx --bundle --minify --sourcemap --outfile=build/bundle.js"
+		"build": "rm -rf build && NODE_ENV=production node ./esbuild.config.js",
+		"start": "NODE_ENV=development node ./esbuild.config.js"
 	},
 	"keywords": [],
 	"author": "Lakhan Samani",
 	"license": "ISC",
 	"dependencies": {
-		"@authorizerdev/authorizer-react": "^0.2.0",
+		"@authorizerdev/authorizer-react": "latest",
 		"@types/react": "^17.0.15",
 		"@types/react-dom": "^17.0.9",
 		"esbuild": "^0.12.17",

app/src/App.tsx

@@ -42,7 +42,7 @@ export default function App() {
 				<BrowserRouter>
 					<AuthorizerProvider
 						config={{
-							authorizerURL: globalState.authorizerURL,
+							authorizerURL: window.location.origin,
 							redirectURL: globalState.redirectURL,
 						}}
 					>

app/src/Root.tsx

@@ -1,9 +1,10 @@
-import React, { useEffect } from 'react';
+import React, { useEffect, lazy, Suspense } from 'react';
 import { Switch, Route } from 'react-router-dom';
 import { useAuthorizer } from '@authorizerdev/authorizer-react';
-import Dashboard from './pages/dashboard';
-import Login from './pages/login';
-import ResetPassword from './pages/rest-password';
+
+const ResetPassword = lazy(() => import('./pages/rest-password'));
+const Login = lazy(() => import('./pages/login'));
+const Dashboard = lazy(() => import('./pages/dashboard'));
 
 export default function Root() {
 	const { token, loading, config } = useAuthorizer();
@@ -24,15 +25,18 @@ export default function Root() {
 
 	if (token) {
 		return (
+			<Suspense fallback={<></>}>
 				<Switch>
 					<Route path="/app" exact>
 						<Dashboard />
 					</Route>
 				</Switch>
+			</Suspense>
 		);
 	}
 
 	return (
+		<Suspense fallback={<></>}>
 			<Switch>
 				<Route path="/app" exact>
 					<Login />
@@ -41,5 +45,6 @@ export default function Root() {
 					<ResetPassword />
 				</Route>
 			</Switch>
+		</Suspense>
 	);
 }

app/src/index.css

@@ -0,0 +1,16 @@
+body {
+	margin: 0;
+	font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', 'Roboto', 'Oxygen',
+		'Ubuntu', 'Cantarell', 'Fira Sans', 'Droid Sans', 'Helvetica Neue',
+		sans-serif;
+	-webkit-font-smoothing: antialiased;
+	-moz-osx-font-smoothing: grayscale;
+	color: #374151;
+	font-size: 14px;
+}
+
+*,
+*:before,
+*:after {
+	box-sizing: inherit;
+}

app/src/index.tsx

@@ -1,5 +1,6 @@
 import React from 'react';
 import ReactDOM from 'react-dom';
 import App from './App';
+import './index.css';
 
 ReactDOM.render(<App />, document.getElementById('root'));

dashboard/README.md

@@ -0,0 +1,12 @@
+# Authorizer dashboard
+
+### Getting started
+
+**Setting up locally**
+
+- `cd dashboard`
+- `npm start`
+
+**Creating production build**
+
+- `make build-dashboard`

dashboard/esbuild.config.js

@@ -0,0 +1,12 @@
+const __is_prod__ = process.env.NODE_ENV === 'production';
+require('esbuild').build({
+	entryPoints: ['src/index.tsx'],
+	chunkNames: '[name]-[hash]',
+	bundle: true,
+	minify: __is_prod__,
+	outdir: 'build',
+	splitting: true,
+	format: 'esm',
+	watch: !__is_prod__,
+	logLevel: 'info',
+});

dashboard/package.json

@@ -0,0 +1,30 @@
+{
+	"name": "dashboard",
+	"version": "1.0.0",
+	"description": "",
+	"main": "index.js",
+	"scripts": {
+		"build": "rm -rf build && NODE_ENV=production node ./esbuild.config.js",
+		"start": "NODE_ENV=development node ./esbuild.config.js"
+	},
+	"keywords": [],
+	"author": "Lakhan Samani",
+	"license": "ISC",
+	"dependencies": {
+		"@chakra-ui/react": "^1.7.3",
+		"@emotion/react": "^11.7.1",
+		"@emotion/styled": "^11.6.0",
+		"@types/react": "^17.0.38",
+		"@types/react-dom": "^17.0.11",
+		"@types/react-router-dom": "^5.3.2",
+		"esbuild": "^0.14.9",
+		"framer-motion": "^5.5.5",
+		"graphql": "^16.2.0",
+		"react": "^17.0.2",
+		"react-dom": "^17.0.2",
+		"react-icons": "^4.3.1",
+		"react-router-dom": "^6.2.1",
+		"typescript": "^4.5.4",
+		"urql": "^2.0.6"
+	}
+}

dashboard/src/App.tsx

@@ -0,0 +1,45 @@
+import * as React from 'react';
+import { ChakraProvider, extendTheme } from '@chakra-ui/react';
+import { BrowserRouter } from 'react-router-dom';
+import { createClient, Provider } from 'urql';
+import { AppRoutes } from './routes';
+import { AuthContextProvider } from './contexts/AuthContext';
+
+const queryClient = createClient({
+	url: '/graphql',
+	fetchOptions: () => {
+		return {
+			credentials: 'include',
+		};
+	},
+});
+
+const theme = extendTheme({
+	styles: {
+		global: {
+			'html, body, #root': {
+				fontFamily: 'Avenir, Helvetica, Arial, sans-serif',
+				height: '100%',
+			},
+		},
+	},
+	colors: {
+		blue: {
+			500: 'rgb(59,130,246)',
+		},
+	},
+});
+
+export default function App() {
+	return (
+		<ChakraProvider theme={theme}>
+			<Provider value={queryClient}>
+				<BrowserRouter basename="/dashboard">
+					<AuthContextProvider>
+						<AppRoutes />
+					</AuthContextProvider>
+				</BrowserRouter>
+			</Provider>
+		</ChakraProvider>
+	);
+}

dashboard/src/components/Menu.tsx

@@ -0,0 +1,215 @@
+import React, { ReactNode } from 'react';
+import {
+	IconButton,
+	Avatar,
+	Box,
+	CloseButton,
+	Flex,
+	Image,
+	HStack,
+	VStack,
+	Icon,
+	useColorModeValue,
+	Link,
+	Text,
+	BoxProps,
+	FlexProps,
+	Menu,
+	MenuButton,
+	MenuItem,
+	MenuList,
+} from '@chakra-ui/react';
+import {
+	FiHome,
+	FiTrendingUp,
+	FiCompass,
+	FiStar,
+	FiSettings,
+	FiMenu,
+	FiUser,
+	FiUsers,
+	FiChevronDown,
+} from 'react-icons/fi';
+import { IconType } from 'react-icons';
+import { ReactText } from 'react';
+import { useMutation } from 'urql';
+import { NavLink, useNavigate, useLocation } from 'react-router-dom';
+import { useAuthContext } from '../contexts/AuthContext';
+import { AdminLogout } from '../graphql/mutation';
+
+interface LinkItemProps {
+	name: string;
+	icon: IconType;
+	route: string;
+}
+const LinkItems: Array<LinkItemProps> = [
+	{ name: 'Home', icon: FiHome, route: '/' },
+	{ name: 'Users', icon: FiUsers, route: '/users' },
+	{ name: 'Environment Variables', icon: FiSettings, route: '/environment' },
+];
+
+interface SidebarProps extends BoxProps {
+	onClose: () => void;
+}
+
+export const Sidebar = ({ onClose, ...rest }: SidebarProps) => {
+	const { pathname } = useLocation();
+	return (
+		<Box
+			transition="3s ease"
+			bg={useColorModeValue('white', 'gray.900')}
+			borderRight="1px"
+			borderRightColor={useColorModeValue('gray.200', 'gray.700')}
+			w={{ base: 'full', md: 60 }}
+			pos="fixed"
+			h="full"
+			{...rest}
+		>
+			<Flex h="20" alignItems="center" mx="8" justifyContent="space-between">
+				<NavLink to="/">
+					<Flex alignItems="center">
+						<Image
+							src="https://authorizer.dev/images/logo.png"
+							alt="logo"
+							height="36px"
+						/>
+						<Text fontSize="large" ml="2" letterSpacing="3">
+							AUTHORIZER
+						</Text>
+					</Flex>
+				</NavLink>
+				<CloseButton display={{ base: 'flex', md: 'none' }} onClick={onClose} />
+			</Flex>
+			{LinkItems.map((link) => (
+				<NavLink key={link.name} to={link.route}>
+					<NavItem
+						icon={link.icon}
+						color={pathname === link.route ? 'blue.500' : ''}
+					>
+						{link.name}
+					</NavItem>
+				</NavLink>
+			))}
+		</Box>
+	);
+};
+
+interface NavItemProps extends FlexProps {
+	icon: IconType;
+	children: ReactText;
+}
+export const NavItem = ({ icon, children, ...rest }: NavItemProps) => {
+	return (
+		<Link
+			href="#"
+			style={{ textDecoration: 'none' }}
+			_focus={{ boxShadow: 'none' }}
+		>
+			<Flex
+				align="center"
+				p="3"
+				mx="3"
+				borderRadius="md"
+				role="group"
+				cursor="pointer"
+				_hover={{
+					bg: 'blue.500',
+					color: 'white',
+				}}
+				{...rest}
+			>
+				{icon && (
+					<Icon
+						mr="4"
+						fontSize="16"
+						_groupHover={{
+							color: 'white',
+						}}
+						as={icon}
+					/>
+				)}
+				{children}
+			</Flex>
+		</Link>
+	);
+};
+
+interface MobileProps extends FlexProps {
+	onOpen: () => void;
+}
+export const MobileNav = ({ onOpen, ...rest }: MobileProps) => {
+	const [_, logout] = useMutation(AdminLogout);
+	const { setIsLoggedIn } = useAuthContext();
+	const navigate = useNavigate();
+
+	const handleLogout = async () => {
+		await logout();
+		setIsLoggedIn(false);
+		navigate('/', { replace: true });
+	};
+
+	return (
+		<Flex
+			ml={{ base: 0, md: 60 }}
+			px={{ base: 4, md: 4 }}
+			height="20"
+			position="fixed"
+			right="0"
+			left="0"
+			alignItems="center"
+			bg={useColorModeValue('white', 'gray.900')}
+			borderBottomWidth="1px"
+			borderBottomColor={useColorModeValue('gray.200', 'gray.700')}
+			justifyContent={{ base: 'space-between', md: 'flex-end' }}
+			{...rest}
+		>
+			<IconButton
+				display={{ base: 'flex', md: 'none' }}
+				onClick={onOpen}
+				variant="outline"
+				aria-label="open menu"
+				icon={<FiMenu />}
+			/>
+
+			<Image
+				src="https://authorizer.dev/images/logo.png"
+				alt="logo"
+				height="36px"
+				display={{ base: 'flex', md: 'none' }}
+			/>
+
+			<HStack spacing={{ base: '0', md: '6' }}>
+				<Flex alignItems={'center'}>
+					<Menu>
+						<MenuButton
+							py={2}
+							transition="all 0.3s"
+							_focus={{ boxShadow: 'none' }}
+						>
+							<HStack>
+								<FiUser />
+								<VStack
+									display={{ base: 'none', md: 'flex' }}
+									alignItems="flex-start"
+									spacing="1px"
+									ml="2"
+								>
+									<Text fontSize="sm">Admin</Text>
+								</VStack>
+								<Box display={{ base: 'none', md: 'flex' }}>
+									<FiChevronDown />
+								</Box>
+							</HStack>
+						</MenuButton>
+						<MenuList
+							bg={useColorModeValue('white', 'gray.900')}
+							borderColor={useColorModeValue('gray.200', 'gray.700')}
+						>
+							<MenuItem onClick={handleLogout}>Sign out</MenuItem>
+						</MenuList>
+					</Menu>
+				</Flex>
+			</HStack>
+		</Flex>
+	);
+};

dashboard/src/constants.ts

@@ -0,0 +1 @@
+export const LOGO_URL = "https://user-images.githubusercontent.com/6964334/147834043-fc384cab-e7ca-40f8-9663-38fc25fd5f3a.png"

dashboard/src/contexts/AuthContext.tsx

@@ -0,0 +1,48 @@
+import React, { createContext, useState, useContext, useEffect } from 'react';
+import { Center, Spinner } from '@chakra-ui/react';
+import { useQuery } from 'urql';
+import { useLocation, useNavigate } from 'react-router-dom';
+
+import { AdminSessionQuery } from '../graphql/queries';
+import { hasAdminSecret } from '../utils';
+
+const AuthContext = createContext({
+	isLoggedIn: false,
+	setIsLoggedIn: (data: boolean) => {},
+});
+
+export const AuthContextProvider = ({ children }: { children: any }) => {
+	const [isLoggedIn, setIsLoggedIn] = useState(false);
+
+	const { pathname } = useLocation();
+	const navigate = useNavigate();
+
+	const [{ fetching, data, error }] = useQuery({
+		query: AdminSessionQuery,
+	});
+
+	useEffect(() => {
+		if (!fetching && !error) {
+			setIsLoggedIn(true);
+			if (pathname === '/login' || pathname === 'signup') {
+				navigate('/', { replace: true });
+			}
+		}
+	}, [fetching, error]);
+
+	if (fetching) {
+		return (
+			<Center>
+				<Spinner />
+			</Center>
+		);
+	}
+
+	return (
+		<AuthContext.Provider value={{ isLoggedIn, setIsLoggedIn }}>
+			{children}
+		</AuthContext.Provider>
+	);
+};
+
+export const useAuthContext = () => useContext(AuthContext);

dashboard/src/graphql/mutation/index.ts

@@ -0,0 +1,23 @@
+export const AdminSignup = `
+ mutation adminSignup($secret: String!) {
+    _admin_signup (params: {admin_secret: $secret}) {
+      message
+    }
+  }
+`;
+
+export const AdminLogin = `
+mutation adminLogin($secret: String!){
+  _admin_login(params: { admin_secret: $secret }) {
+    message
+  }
+}
+`;
+
+export const AdminLogout = `
+  mutation adminLogout {
+    _admin_logout {
+      message
+    }
+  }
+`;

dashboard/src/graphql/queries/index.ts

@@ -0,0 +1,7 @@
+export const AdminSessionQuery = `
+  query {
+    _admin_session{
+	    message
+    }
+  }
+`;

dashboard/src/index.tsx

@@ -0,0 +1,5 @@
+import React from 'react';
+import ReactDOM from 'react-dom';
+import App from './App';
+
+ReactDOM.render(<App />, document.getElementById('root'));

dashboard/src/layouts/AuthLayout.tsx

@@ -0,0 +1,31 @@
+import { Box, Center, Flex, Image, Text } from '@chakra-ui/react';
+import React from 'react';
+import { LOGO_URL } from '../constants';
+
+export function AuthLayout({ children }: { children: React.ReactNode }) {
+	return (
+		<Flex
+			flexWrap="wrap"
+			h="100%"
+			bg="gray.100"
+			alignItems="center"
+			justifyContent="center"
+			flexDirection="column"
+		>
+			<Flex alignItems="center">
+				<Image
+					src="https://authorizer.dev/images/logo.png"
+					alt="logo"
+					height="50"
+				/>
+				<Text fontSize="x-large" ml="3" letterSpacing="3">
+					AUTHORIZER
+				</Text>
+			</Flex>
+
+			<Box p="6" m="5" rounded="5" bg="white" w="500px" shadow="xl">
+				{children}
+			</Box>
+		</Flex>
+	);
+}

dashboard/src/layouts/DashboardLayout.tsx

@@ -0,0 +1,39 @@
+import {
+	Box,
+	Drawer,
+	DrawerContent,
+	useDisclosure,
+	useColorModeValue,
+} from '@chakra-ui/react';
+import React, { ReactNode } from 'react';
+import { Sidebar, MobileNav } from '../components/Menu';
+
+export function DashboardLayout({ children }: { children: ReactNode }) {
+	const { isOpen, onOpen, onClose } = useDisclosure();
+	return (
+		<Box minH="100vh" bg={useColorModeValue('gray.100', 'gray.900')}>
+			<Sidebar
+				onClose={() => onClose}
+				display={{ base: 'none', md: 'block' }}
+			/>
+			<Drawer
+				autoFocus={false}
+				isOpen={isOpen}
+				placement="left"
+				onClose={onClose}
+				returnFocusOnClose={false}
+				onOverlayClick={onClose}
+				size="full"
+			>
+				<DrawerContent>
+					<Sidebar onClose={onClose} />
+				</DrawerContent>
+			</Drawer>
+			{/* mobilenav */}
+			<MobileNav onOpen={onOpen} />
+			<Box ml={{ base: 0, md: 60 }} p="4" pt="24">
+				{children}
+			</Box>
+		</Box>
+	);
+}

dashboard/src/pages/Auth.tsx

@@ -0,0 +1,124 @@
+import {
+	Button,
+	FormControl,
+	FormLabel,
+	Input,
+	useToast,
+	VStack,
+	Text,
+	Divider,
+} from '@chakra-ui/react';
+import React, { useEffect } from 'react';
+import { useMutation } from 'urql';
+
+import { AuthLayout } from '../layouts/AuthLayout';
+import { AdminLogin, AdminSignup } from '../graphql/mutation';
+import { useNavigate } from 'react-router-dom';
+import { useAuthContext } from '../contexts/AuthContext';
+import { capitalizeFirstLetter, hasAdminSecret } from '../utils';
+
+export default function Auth() {
+	const [loginResult, login] = useMutation(AdminLogin);
+	const [signUpResult, signup] = useMutation(AdminSignup);
+	const { setIsLoggedIn } = useAuthContext();
+
+	const toast = useToast();
+	const navigate = useNavigate();
+	const isLogin = hasAdminSecret();
+
+	const handleSubmit = (e: any) => {
+		e.preventDefault();
+		const formValues = [...e.target.elements].reduce((agg: any, elem: any) => {
+			if (elem.id) {
+				return {
+					...agg,
+					[elem.id]: elem.value,
+				};
+			}
+
+			return agg;
+		}, {});
+
+		(isLogin ? login : signup)({
+			secret: formValues['admin-secret'],
+		}).then((res) => {
+			if (res.data) {
+				setIsLoggedIn(true);
+				navigate('/', { replace: true });
+			}
+		});
+	};
+
+	const errors = isLogin ? loginResult.error : signUpResult.error;
+
+	useEffect(() => {
+		if (errors?.graphQLErrors) {
+			(errors?.graphQLErrors || []).map((error: any) => {
+				toast({
+					title: capitalizeFirstLetter(error.message),
+					isClosable: true,
+					status: 'error',
+					position: 'bottom-right',
+				});
+			});
+		}
+	}, [errors]);
+
+	return (
+		<AuthLayout>
+			<Text
+				fontSize="large"
+				textAlign="center"
+				color="gray.600"
+				fontWeight="bold"
+				mb="2"
+			>
+				Hi there 👋 <br />
+			</Text>
+			<Text fontSize="large" textAlign="center" color="gray.500" mb="8">
+				Welcome to Authorizer Administrative Dashboard
+			</Text>
+			<form onSubmit={handleSubmit}>
+				<VStack spacing="5" justify="space-between">
+					<FormControl isRequired>
+						{/* <FormLabel htmlFor="admin-secret">
+							{isLogin ? 'Enter' : 'Configure'} Admin Secret
+						</FormLabel> */}
+						<Input
+							size="lg"
+							id="admin-secret"
+							placeholder="Admin secret"
+							type="password"
+							minLength={!isLogin ? 6 : 1}
+						/>
+					</FormControl>
+					<Button
+						isLoading={signUpResult.fetching || loginResult.fetching}
+						colorScheme="blue"
+						size="lg"
+						w="100%"
+						d="block"
+						type="submit"
+					>
+						{isLogin ? 'Login' : 'Sign up'}
+					</Button>
+					{isLogin ? (
+						<Text color="gray.600" fontSize="sm">
+							<b>Note:</b> In case if you have forgot your admin secret, you can
+							reset it by updating <code>ADMIN_SECRET</code> environment
+							variable. For more information, please refer to the{' '}
+							<a href="https://docs.authorizer.dev/core/env/">documentation</a>.
+						</Text>
+					) : (
+						<Text color="gray.600" fontSize="sm">
+							<b>Note:</b> You can also configure admin secret by setting{' '}
+							<code>ADMIN_SECRET</code> environment variable. For more
+							information, please refer to the{' '}
+							<a href="https://docs.authorizer.dev/core/env/">documentation</a>.
+						</Text>
+					)}
+				</VStack>
+			</form>
+		</AuthLayout>
+	);
+}

dashboard/src/pages/Environment.tsx

@@ -0,0 +1,35 @@
+import { Box, Divider, Flex } from '@chakra-ui/react';
+import React from 'react';
+
+// Don't allow changing database from here as it can cause persistence issues
+export default function Environment() {
+	return (
+		<Box m="5" p="5" bg="white" rounded="md">
+			<h1>Social Media Logins</h1>
+			<Divider />- Add horizontal input for clientID and secret for - Google -
+			Github - Facebook
+			<h1>Roles</h1>
+			<Divider />- Add tagged input for roles, default roles, and protected
+			roles
+			<h1>JWT Configurations</h1>
+			<Divider />- Add input for JWT Type (keep this disabled for now with
+			notice saying, "More JWT types will be enabled in upcoming releases"),JWT
+			secret, JWT role claim
+			<h1>Session Storage</h1>
+			<Divider />- Add input for redis url
+			<h1>Email Configurations</h1>
+			<Divider />- Add input for SMTP Host, PORT, Username, Password, From
+			Email,
+			<h1>White Listing</h1>
+			<Divider />- Add input for allowed origins
+			<h1>Organization Information</h1>
+			<Divider />- Add input for organization name, and logo
+			<h1>Custom Scripts</h1>
+			<Divider />- For now add text area input for CUSTOM_ACCESS_TOKEN_SCRIPT
+			<h1>Disable Features</h1>
+			<Divider />
+			<h1>Danger</h1>
+			<Divider />- Include changing admin secret
+		</Box>
+	);
+}

dashboard/src/pages/Home.tsx

@@ -0,0 +1,18 @@
+import { Text } from '@chakra-ui/react';
+import React from 'react';
+
+export default function Home() {
+	return (
+		<>
+			<Text fontSize="2xl" fontWeight="bold">
+				Hi there 👋 <br />
+			</Text>
+
+			<Text fontSize="xl" color="gray.700">
+				Welcome to Authorizer Administrative Dashboard! <br />
+				Please use this dashboard to configure your environment variables or
+				have look at your users
+			</Text>
+		</>
+	);
+}

dashboard/src/pages/Users.tsx

@@ -0,0 +1,6 @@
+import { Box } from '@chakra-ui/react';
+import React from 'react';
+
+export default function Users() {
+	return <Box>Welcome to Users Page</Box>;
+}

dashboard/src/routes/index.tsx

@@ -0,0 +1,41 @@
+import React, { lazy, Suspense } from 'react';
+import { Outlet, Route, Routes } from 'react-router-dom';
+
+import { useAuthContext } from '../contexts/AuthContext';
+import { DashboardLayout } from '../layouts/DashboardLayout';
+
+const Auth = lazy(() => import('../pages/Auth'));
+const Environment = lazy(() => import('../pages/Environment'));
+const Home = lazy(() => import('../pages/Home'));
+const Users = lazy(() => import('../pages/Users'));
+
+export const AppRoutes = () => {
+	const { isLoggedIn } = useAuthContext();
+
+	if (isLoggedIn) {
+		return (
+			<Suspense fallback={<></>}>
+				<Routes>
+					<Route
+						element={
+							<DashboardLayout>
+								<Outlet />
+							</DashboardLayout>
+						}
+					>
+						<Route path="/" element={<Home />} />
+						<Route path="users" element={<Users />} />
+						<Route path="environment" element={<Environment />} />
+					</Route>
+				</Routes>
+			</Suspense>
+		);
+	}
+	return (
+		<Suspense fallback={<></>}>
+			<Routes>
+				<Route path="/" element={<Auth />} />
+			</Routes>
+		</Suspense>
+	);
+};

dashboard/src/utils/index.ts

@@ -0,0 +1,6 @@
+export const hasAdminSecret = () => {
+	return (<any>window)['__authorizer__'].isOnboardingCompleted === true;
+};
+
+export const capitalizeFirstLetter = (data: string): string =>
+	data.charAt(0).toUpperCase() + data.slice(1);

dashboard/tsconfig.json

@@ -0,0 +1,72 @@
+{
+	"compilerOptions": {
+		/* Visit https://aka.ms/tsconfig.json to read more about this file */
+
+		/* Basic Options */
+		// "incremental": true,                         /* Enable incremental compilation */
+		"target": "es6" /* Specify ECMAScript target version: 'ES3' (default), 'ES5', 'ES2015', 'ES2016', 'ES2017', 'ES2018', 'ES2019', 'ES2020', 'ES2021', or 'ESNEXT'. */,
+		"module": "commonjs" /* Specify module code generation: 'none', 'commonjs', 'amd', 'system', 'umd', 'es2015', 'es2020', or 'ESNext'. */,
+		// "lib": ["es2018", "dom"],                                   /* Specify library files to be included in the compilation. */
+		// "allowJs": true,                             /* Allow javascript files to be compiled. */
+		// "checkJs": true,                             /* Report errors in .js files. */
+		"jsx": "react" /* Specify JSX code generation: 'preserve', 'react-native', 'react', 'react-jsx' or 'react-jsxdev'. */,
+		// "declaration": true,                         /* Generates corresponding '.d.ts' file. */
+		// "declarationMap": true,                      /* Generates a sourcemap for each corresponding '.d.ts' file. */
+		// "sourceMap": true,                           /* Generates corresponding '.map' file. */
+		// "outFile": "./",                             /* Concatenate and emit output to single file. */
+		// "outDir": "./",                              /* Redirect output structure to the directory. */
+		"rootDir": "src" /* Specify the root directory of input files. Use to control the output directory structure with --outDir. */,
+		// "composite": true,                           /* Enable project compilation */
+		// "tsBuildInfoFile": "./",                     /* Specify file to store incremental compilation information */
+		// "removeComments": true,                      /* Do not emit comments to output. */
+		// "noEmit": true,                              /* Do not emit outputs. */
+		// "importHelpers": true,                       /* Import emit helpers from 'tslib'. */
+		// "downlevelIteration": true,                  /* Provide full support for iterables in 'for-of', spread, and destructuring when targeting 'ES5' or 'ES3'. */
+		// "isolatedModules": true,                     /* Transpile each file as a separate module (similar to 'ts.transpileModule'). */
+
+		/* Strict Type-Checking Options */
+		"strict": true /* Enable all strict type-checking options. */,
+		// "noImplicitAny": true,                       /* Raise error on expressions and declarations with an implied 'any' type. */
+		// "strictNullChecks": true,                    /* Enable strict null checks. */
+		// "strictFunctionTypes": true,                 /* Enable strict checking of function types. */
+		// "strictBindCallApply": true,                 /* Enable strict 'bind', 'call', and 'apply' methods on functions. */
+		// "strictPropertyInitialization": true,        /* Enable strict checking of property initialization in classes. */
+		// "noImplicitThis": true,                      /* Raise error on 'this' expressions with an implied 'any' type. */
+		// "alwaysStrict": true,                        /* Parse in strict mode and emit "use strict" for each source file. */
+
+		/* Additional Checks */
+		// "noUnusedLocals": true,                      /* Report errors on unused locals. */
+		// "noUnusedParameters": true,                  /* Report errors on unused parameters. */
+		// "noImplicitReturns": true,                   /* Report error when not all code paths in function return a value. */
+		// "noFallthroughCasesInSwitch": true,          /* Report errors for fallthrough cases in switch statement. */
+		// "noUncheckedIndexedAccess": true,            /* Include 'undefined' in index signature results */
+		// "noImplicitOverride": true,                  /* Ensure overriding members in derived classes are marked with an 'override' modifier. */
+		// "noPropertyAccessFromIndexSignature": true,  /* Require undeclared properties from index signatures to use element accesses. */
+
+		/* Module Resolution Options */
+		// "moduleResolution": "node",                  /* Specify module resolution strategy: 'node' (Node.js) or 'classic' (TypeScript pre-1.6). */
+		// "baseUrl": "./",                             /* Base directory to resolve non-absolute module names. */
+		// "paths": {},                                 /* A series of entries which re-map imports to lookup locations relative to the 'baseUrl'. */
+		// "rootDirs": [],                              /* List of root folders whose combined content represents the structure of the project at runtime. */
+		// "typeRoots": [],                             /* List of folders to include type definitions from. */
+		// "types": [],                                 /* Type declaration files to be included in compilation. */
+		// "allowSyntheticDefaultImports": true,        /* Allow default imports from modules with no default export. This does not affect code emit, just typechecking. */
+		"esModuleInterop": true /* Enables emit interoperability between CommonJS and ES Modules via creation of namespace objects for all imports. Implies 'allowSyntheticDefaultImports'. */,
+		// "preserveSymlinks": true,                    /* Do not resolve the real path of symlinks. */
+		// "allowUmdGlobalAccess": true,                /* Allow accessing UMD globals from modules. */
+
+		/* Source Map Options */
+		// "sourceRoot": "",                            /* Specify the location where debugger should locate TypeScript files instead of source locations. */
+		// "mapRoot": "",                               /* Specify the location where debugger should locate map files instead of generated locations. */
+		// "inlineSourceMap": true,                     /* Emit a single file with source maps instead of having a separate file. */
+		// "inlineSources": true,                       /* Emit the source alongside the sourcemaps within a single file; requires '--inlineSourceMap' or '--sourceMap' to be set. */
+
+		/* Experimental Options */
+		// "experimentalDecorators": true,              /* Enables experimental support for ES7 decorators. */
+		// "emitDecoratorMetadata": true,               /* Enables experimental support for emitting type metadata for decorators. */
+
+		/* Advanced Options */
+		"skipLibCheck": true /* Skip type checking of declaration files. */,
+		"forceConsistentCasingInFileNames": true /* Disallow inconsistently-cased references to the same file. */
+	}
+}

scripts/build-mac.sh

@@ -1,7 +1,7 @@
 VERSION="$1"
-make clean && CGO_ENABLED=1 VERSION=${VERSION} make
+make clean && make build-app && CGO_ENABLED=1 VERSION=${VERSION} make
 FILE_NAME=authorizer-${VERSION}-darwin-amd64.tar.gz
-tar cvfz ${FILE_NAME} .env app/build build templates
+tar cvfz ${FILE_NAME} .env app/build build templates dashboard/build
 AUTH="Authorization: token $GITHUB_TOKEN"
 RELASE_INFO=$(curl -sH "$AUTH" https://api.github.com/repos/authorizerdev/authorizer/releases/tags/${VERSION})
 echo $RELASE_INFO

server/constants/constants.go

@@ -1,48 +0,0 @@
-package constants
-
-var (
-	ADMIN_SECRET                 = ""
-	ENV                          = ""
-	ENV_PATH                     = ""
-	VERSION                      = ""
-	DATABASE_TYPE                = ""
-	DATABASE_URL                 = ""
-	DATABASE_NAME                = ""
-	SMTP_HOST                    = ""
-	SMTP_PORT                    = ""
-	SENDER_EMAIL                 = ""
-	SENDER_PASSWORD              = ""
-	JWT_TYPE                     = ""
-	JWT_SECRET                   = ""
-	ALLOWED_ORIGINS              = []string{}
-	AUTHORIZER_URL               = ""
-	APP_URL                      = ""
-	PORT                         = "8080"
-	REDIS_URL                    = ""
-	IS_PROD                      = false
-	COOKIE_NAME                  = ""
-	RESET_PASSWORD_URL           = ""
-	DISABLE_EMAIL_VERIFICATION   = false
-	DISABLE_BASIC_AUTHENTICATION = false
-	DISABLE_MAGIC_LOGIN          = false
-
-	// ROLES
-	ROLES           = []string{}
-	PROTECTED_ROLES = []string{}
-	DEFAULT_ROLES   = []string{}
-	JWT_ROLE_CLAIM  = "role"
-
-	// OAuth login
-	GOOGLE_CLIENT_ID       = ""
-	GOOGLE_CLIENT_SECRET   = ""
-	GITHUB_CLIENT_ID       = ""
-	GITHUB_CLIENT_SECRET   = ""
-	FACEBOOK_CLIENT_ID     = ""
-	FACEBOOK_CLIENT_SECRET = ""
-	TWITTER_CLIENT_ID      = ""
-	TWITTER_CLIENT_SECRET  = ""
-
-	// Org envs
-	ORGANIZATION_NAME = "Authorizer"
-	ORGANIZATION_LOGO = "https://authorizer.dev/images/logo.png"
-)

server/constants/db_types.go

@@ -0,0 +1,18 @@
+package constants
+
+const (
+	// DbTypePostgres is the postgres database type
+	DbTypePostgres = "postgres"
+	// DbTypeSqlite is the sqlite database type
+	DbTypeSqlite = "sqlite"
+	// DbTypeMysql is the mysql database type
+	DbTypeMysql = "mysql"
+	// DbTypeSqlserver is the sqlserver database type
+	DbTypeSqlserver = "sqlserver"
+	// DbTypeArangodb is the arangodb database type
+	DbTypeArangodb = "arangodb"
+	// DbTypeMongodb is the mongodb database type
+	DbTypeMongodb = "mongodb"
+	// DbTypeFaunadb is the faunadb database type
+	DbTypeFaunadb = "faunadb"
+)

server/constants/env.go

@@ -0,0 +1,95 @@
+package constants
+
+const (
+	// Envstore identifier
+	// StringStore string store identifier
+	StringStoreIdentifier = "stringStore"
+	// BoolStore bool store identifier
+	BoolStoreIdentifier = "boolStore"
+	// SliceStore slice store identifier
+	SliceStoreIdentifier = "sliceStore"
+
+	// EnvKeyEnv key for env variable ENV
+	EnvKeyEnv = "ENV"
+	// EnvKeyEnvPath key for cli arg variable ENV_PATH
+	EnvKeyEnvPath = "ENV_PATH"
+	// EnvKeyVersion key for build arg version
+	EnvKeyVersion = "VERSION"
+	// EnvKeyAuthorizerURL key for env variable AUTHORIZER_URL
+	EnvKeyAuthorizerURL = "AUTHORIZER_URL"
+	// EnvKeyPort key for env variable PORT
+	EnvKeyPort = "PORT"
+
+	// EnvKeyAdminSecret key for env variable ADMIN_SECRET
+	EnvKeyAdminSecret = "ADMIN_SECRET"
+	// EnvKeyDatabaseType key for env variable DATABASE_TYPE
+	EnvKeyDatabaseType = "DATABASE_TYPE"
+	// EnvKeyDatabaseURL key for env variable DATABASE_URL
+	EnvKeyDatabaseURL = "DATABASE_URL"
+	// EnvKeyDatabaseName key for env variable DATABASE_NAME
+	EnvKeyDatabaseName = "DATABASE_NAME"
+	// EnvKeySmtpHost key for env variable SMTP_HOST
+	EnvKeySmtpHost = "SMTP_HOST"
+	// EnvKeySmtpPort key for env variable SMTP_PORT
+	EnvKeySmtpPort = "SMTP_PORT"
+	// EnvKeySmtpUsername key for env variable SMTP_USERNAME
+	EnvKeySmtpUsername = "SMTP_USERNAME"
+	// EnvKeySmtpPassword key for env variable SMTP_PASSWORD
+	EnvKeySmtpPassword = "SMTP_PASSWORD"
+	// EnvKeySenderEmail key for env variable SENDER_EMAIL
+	EnvKeySenderEmail = "SENDER_EMAIL"
+	// EnvKeyJwtType key for env variable JWT_TYPE
+	EnvKeyJwtType = "JWT_TYPE"
+	// EnvKeyJwtSecret key for env variable JWT_SECRET
+	EnvKeyJwtSecret = "JWT_SECRET"
+	// EnvKeyAllowedOrigins key for env variable ALLOWED_ORIGINS
+	EnvKeyAllowedOrigins = "ALLOWED_ORIGINS"
+	// EnvKeyAppURL key for env variable APP_URL
+	EnvKeyAppURL = "APP_URL"
+	// EnvKeyRedisURL key for env variable REDIS_URL
+	EnvKeyRedisURL = "REDIS_URL"
+	// EnvKeyCookieName key for env variable COOKIE_NAME
+	EnvKeyCookieName = "COOKIE_NAME"
+	// EnvKeyAdminCookieName key for env variable ADMIN_COOKIE_NAME
+	EnvKeyAdminCookieName = "ADMIN_COOKIE_NAME"
+	// EnvKeyResetPasswordURL key for env variable RESET_PASSWORD_URL
+	EnvKeyResetPasswordURL = "RESET_PASSWORD_URL"
+	// EnvKeyEncryptionKey key for env variable ENCRYPTION_KEY
+	EnvKeyEncryptionKey = "ENCRYPTION_KEY"
+	// EnvKeyDisableEmailVerification key for env variable DISABLE_EMAIL_VERIFICATION
+	EnvKeyDisableEmailVerification = "DISABLE_EMAIL_VERIFICATION"
+	// EnvKeyDisableBasicAuthentication key for env variable DISABLE_BASIC_AUTH
+	EnvKeyDisableBasicAuthentication = "DISABLE_BASIC_AUTHENTICATION"
+	// EnvKeyDisableMagicLinkLogin key for env variable DISABLE_MAGIC_LINK_LOGIN
+	EnvKeyDisableMagicLinkLogin = "DISABLE_MAGIC_LINK_LOGIN"
+	// EnvKeyDisableLoginPage key for env variable DISABLE_LOGIN_PAGE
+	EnvKeyDisableLoginPage = "DISABLE_LOGIN_PAGE"
+	// EnvKeyRoles key for env variable ROLES
+	EnvKeyRoles = "ROLES"
+	// EnvKeyProtectedRoles key for env variable PROTECTED_ROLES
+	EnvKeyProtectedRoles = "PROTECTED_ROLES"
+	// EnvKeyDefaultRoles key for env variable DEFAULT_ROLES
+	EnvKeyDefaultRoles = "DEFAULT_ROLES"
+	// EnvKeyJwtRoleClaim key for env variable JWT_ROLE_CLAIM
+	EnvKeyJwtRoleClaim = "JWT_ROLE_CLAIM"
+	// EnvKeyGoogleClientID key for env variable GOOGLE_CLIENT_ID
+	EnvKeyGoogleClientID = "GOOGLE_CLIENT_ID"
+	// EnvKeyGoogleClientSecret key for env variable GOOGLE_CLIENT_SECRET
+	EnvKeyGoogleClientSecret = "GOOGLE_CLIENT_SECRET"
+	// EnvKeyGithubClientID key for env variable GITHUB_CLIENT_ID
+	EnvKeyGithubClientID = "GITHUB_CLIENT_ID"
+	// EnvKeyGithubClientSecret key for env variable GITHUB_CLIENT_SECRET
+	EnvKeyGithubClientSecret = "GITHUB_CLIENT_SECRET"
+	// EnvKeyFacebookClientID key for env variable FACEBOOK_CLIENT_ID
+	EnvKeyFacebookClientID = "FACEBOOK_CLIENT_ID"
+	// EnvKeyFacebookClientSecret key for env variable FACEBOOK_CLIENT_SECRET
+	EnvKeyFacebookClientSecret = "FACEBOOK_CLIENT_SECRET"
+	// EnvKeyOrganizationName key for env variable ORGANIZATION_NAME
+	EnvKeyOrganizationName = "ORGANIZATION_NAME"
+	// EnvKeyOrganizationLogo key for env variable ORGANIZATION_LOGO
+	EnvKeyOrganizationLogo = "ORGANIZATION_LOGO"
+	// EnvKeyIsProd key for env variable IS_PROD
+	EnvKeyIsProd = "IS_PROD"
+	// EnvKeyCustomAccessTokenScript key for env variable CUSTOM_ACCESS_TOKEN_SCRIPT
+	EnvKeyCustomAccessTokenScript = "CUSTOM_ACCESS_TOKEN_SCRIPT"
+)

server/constants/oauth_info_urls.go

@@ -1,6 +1,6 @@
 package constants
 
-var (
+const (
 	// Ref: https://github.com/qor/auth/blob/master/providers/google/google.go
 	// deprecated and not used. instead we follow open id approach for google login
 	GoogleUserInfoURL = "https://www.googleapis.com/oauth2/v3/userinfo"

server/constants/signup_methods.go

@@ -0,0 +1,14 @@
+package constants
+
+const (
+	// SignupMethodBasicAuth is the basic_auth signup method
+	SignupMethodBasicAuth = "basic_auth"
+	// SignupMethodMagicLinkLogin is the magic_link_login signup method
+	SignupMethodMagicLinkLogin = "magic_link_login"
+	// SignupMethodGoogle is the google signup method
+	SignupMethodGoogle = "google"
+	// SignupMethodGithub is the github signup method
+	SignupMethodGithub = "github"
+	// SignupMethodFacebook is the facebook signup method
+	SignupMethodFacebook = "facebook"
+)

server/constants/token_types.go

@@ -0,0 +1,8 @@
+package constants
+
+const (
+	// TokenTypeRefreshToken is the refresh_token token type
+	TokenTypeRefreshToken = "refresh_token"
+	// TokenTypeAccessToken is the access_token token type
+	TokenTypeAccessToken = "access_token"
+)

server/constants/verification_types.go

@@ -0,0 +1,12 @@
+package constants
+
+const (
+	// VerificationTypeBasicAuthSignup is the basic_auth_signup verification type
+	VerificationTypeBasicAuthSignup = "basic_auth_signup"
+	// VerificationTypeMagicLinkLogin is the magic_link_login verification type
+	VerificationTypeMagicLinkLogin = "magic_link_login"
+	// VerificationTypeUpdateEmail is the update_email verification type
+	VerificationTypeUpdateEmail = "update_email"
+	// VerificationTypeForgotPassword is the forgot_password verification type
+	VerificationTypeForgotPassword = "forgot_password"
+)

server/cookie/admin_cookie.go

@@ -0,0 +1,44 @@
+package cookie
+
+import (
+	"net/url"
+
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/envstore"
+	"github.com/authorizerdev/authorizer/server/utils"
+	"github.com/gin-gonic/gin"
+)
+
+// SetAdminCookie sets the admin cookie in the response
+func SetAdminCookie(gc *gin.Context, token string) {
+	secure := true
+	httpOnly := true
+	host, _ := utils.GetHostParts(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyAuthorizerURL))
+
+	gc.SetCookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyAdminCookieName), token, 3600, "/", host, secure, httpOnly)
+}
+
+// GetAdminCookie gets the admin cookie from the request
+func GetAdminCookie(gc *gin.Context) (string, error) {
+	cookie, err := gc.Request.Cookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyAdminCookieName))
+	if err != nil {
+		return "", err
+	}
+
+	// cookie escapes special characters like $
+	// hence we need to unescape before comparing
+	decodedValue, err := url.QueryUnescape(cookie.Value)
+	if err != nil {
+		return "", err
+	}
+	return decodedValue, nil
+}
+
+// DeleteAdminCookie sets the response cookie to empty
+func DeleteAdminCookie(gc *gin.Context) {
+	secure := true
+	httpOnly := true
+	host, _ := utils.GetHostParts(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyAuthorizerURL))
+
+	gc.SetCookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyAdminCookieName), "", -1, "/", host, secure, httpOnly)
+}

server/cookie/cookie.go

@@ -0,0 +1,101 @@
+package cookie
+
+import (
+	"net/http"
+	"net/url"
+
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/envstore"
+	"github.com/authorizerdev/authorizer/server/utils"
+	"github.com/gin-gonic/gin"
+)
+
+// SetCookie sets the cookie in the response. It sets 4 cookies
+// 1 COOKIE_NAME.access_token jwt token for the host (temp.abc.com)
+// 2 COOKIE_NAME.access_token.domain jwt token for the domain (abc.com).
+// 3 COOKIE_NAME.fingerprint fingerprint hash for the refresh token verification.
+// 4 COOKIE_NAME.refresh_token refresh token
+// Note all sites don't allow 2nd type of cookie
+func SetCookie(gc *gin.Context, accessToken, refreshToken, fingerprintHash string) {
+	secure := true
+	httpOnly := true
+	host, _ := utils.GetHostParts(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyAuthorizerURL))
+	domain := utils.GetDomainName(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyAuthorizerURL))
+	if domain != "localhost" {
+		domain = "." + domain
+	}
+
+	year := 60 * 60 * 24 * 365
+	thirtyMin := 60 * 30
+
+	gc.SetSameSite(http.SameSiteNoneMode)
+	// set cookie for host
+	gc.SetCookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName)+".access_token", accessToken, thirtyMin, "/", host, secure, httpOnly)
+
+	// in case of subdomain, set cookie for domain
+	gc.SetCookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName)+".access_token.domain", accessToken, thirtyMin, "/", domain, secure, httpOnly)
+
+	// set finger print cookie (this should be accessed via cookie only)
+	gc.SetCookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName)+".fingerprint", fingerprintHash, year, "/", host, secure, httpOnly)
+
+	// set refresh token cookie (this should be accessed via cookie only)
+	gc.SetCookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName)+".refresh_token", refreshToken, year, "/", host, secure, httpOnly)
+}
+
+// GetAccessTokenCookie to get access token cookie from the request
+func GetAccessTokenCookie(gc *gin.Context) (string, error) {
+	cookie, err := gc.Request.Cookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName) + ".access_token")
+	if err != nil {
+		cookie, err = gc.Request.Cookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName) + ".access_token.domain")
+		if err != nil {
+			return "", err
+		}
+	}
+
+	return cookie.Value, nil
+}
+
+// GetRefreshTokenCookie to get refresh token cookie
+func GetRefreshTokenCookie(gc *gin.Context) (string, error) {
+	cookie, err := gc.Request.Cookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName) + ".refresh_token")
+	if err != nil {
+		return "", err
+	}
+
+	return cookie.Value, nil
+}
+
+// GetFingerPrintCookie to get fingerprint cookie
+func GetFingerPrintCookie(gc *gin.Context) (string, error) {
+	cookie, err := gc.Request.Cookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName) + ".fingerprint")
+	if err != nil {
+		return "", err
+	}
+
+	// cookie escapes special characters like $
+	// hence we need to unescape before comparing
+	decodedValue, err := url.QueryUnescape(cookie.Value)
+	if err != nil {
+		return "", err
+	}
+
+	return decodedValue, nil
+}
+
+// DeleteCookie sets response cookies to expire
+func DeleteCookie(gc *gin.Context) {
+	secure := true
+	httpOnly := true
+
+	host, _ := utils.GetHostParts(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyAuthorizerURL))
+	domain := utils.GetDomainName(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyAuthorizerURL))
+	if domain != "localhost" {
+		domain = "." + domain
+	}
+
+	gc.SetSameSite(http.SameSiteNoneMode)
+	gc.SetCookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName)+".access_token", "", -1, "/", host, secure, httpOnly)
+	gc.SetCookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName)+".access_token.domain", "", -1, "/", domain, secure, httpOnly)
+	gc.SetCookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName)+".fingerprint", "", -1, "/", host, secure, httpOnly)
+	gc.SetCookie(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyCookieName)+".refresh_token", "", -1, "/", host, secure, httpOnly)
+}

server/db/arangodb.go

@@ -1,112 +0,0 @@
-package db
-
-import (
-	"context"
-	"log"
-
-	"github.com/arangodb/go-driver"
-	arangoDriver "github.com/arangodb/go-driver"
-	"github.com/arangodb/go-driver/http"
-	"github.com/authorizerdev/authorizer/server/constants"
-)
-
-// for this we need arangodb instance up and running
-// for local testing we can use dockerized version of it
-// docker run -p 8529:8529 -e ARANGO_ROOT_PASSWORD=root arangodb/arangodb:3.8.4
-
-func initArangodb() (arangoDriver.Database, error) {
-	ctx := context.Background()
-	conn, err := http.NewConnection(http.ConnectionConfig{
-		Endpoints: []string{constants.DATABASE_URL},
-	})
-	if err != nil {
-		return nil, err
-	}
-
-	arangoClient, err := arangoDriver.NewClient(arangoDriver.ClientConfig{
-		Connection: conn,
-	})
-	if err != nil {
-		return nil, err
-	}
-
-	var arangodb driver.Database
-
-	arangodb_exists, err := arangoClient.DatabaseExists(nil, constants.DATABASE_NAME)
-
-	if arangodb_exists {
-		log.Println(constants.DATABASE_NAME + " db exists already")
-
-		arangodb, err = arangoClient.Database(nil, constants.DATABASE_NAME)
-
-		if err != nil {
-			return nil, err
-		}
-
-	} else {
-		arangodb, err = arangoClient.CreateDatabase(nil, constants.DATABASE_NAME, nil)
-
-		if err != nil {
-			return nil, err
-		}
-	}
-
-	userCollectionExists, err := arangodb.CollectionExists(ctx, Collections.User)
-	if userCollectionExists {
-		log.Println(Collections.User + " collection exists already")
-	} else {
-		_, err = arangodb.CreateCollection(ctx, Collections.User, nil)
-		if err != nil {
-			log.Println("error creating collection("+Collections.User+"):", err)
-		}
-	}
-	userCollection, _ := arangodb.Collection(nil, Collections.User)
-	userCollection.EnsureHashIndex(ctx, []string{"id"}, &arangoDriver.EnsureHashIndexOptions{
-		Unique: true,
-		Sparse: true,
-	})
-	userCollection.EnsureHashIndex(ctx, []string{"email"}, &arangoDriver.EnsureHashIndexOptions{
-		Unique: true,
-		Sparse: true,
-	})
-
-	verificationRequestCollectionExists, err := arangodb.CollectionExists(ctx, Collections.VerificationRequest)
-	if verificationRequestCollectionExists {
-		log.Println(Collections.VerificationRequest + " collection exists already")
-	} else {
-		_, err = arangodb.CreateCollection(ctx, Collections.VerificationRequest, nil)
-		if err != nil {
-			log.Println("error creating collection("+Collections.VerificationRequest+"):", err)
-		}
-	}
-	verificationRequestCollection, _ := arangodb.Collection(nil, Collections.VerificationRequest)
-	verificationRequestCollection.EnsureHashIndex(ctx, []string{"id"}, &arangoDriver.EnsureHashIndexOptions{
-		Unique: true,
-		Sparse: true,
-	})
-	verificationRequestCollection.EnsureHashIndex(ctx, []string{"email", "identifier"}, &arangoDriver.EnsureHashIndexOptions{
-		Unique: true,
-		Sparse: true,
-	})
-	verificationRequestCollection.EnsureHashIndex(ctx, []string{"token"}, &arangoDriver.EnsureHashIndexOptions{
-		Sparse: true,
-	})
-
-	sessionCollectionExists, err := arangodb.CollectionExists(ctx, Collections.Session)
-	if sessionCollectionExists {
-		log.Println(Collections.Session + " collection exists already")
-	} else {
-		_, err = arangodb.CreateCollection(ctx, Collections.Session, nil)
-		if err != nil {
-			log.Println("error creating collection("+Collections.Session+"):", err)
-		}
-	}
-
-	sessionCollection, _ := arangodb.Collection(nil, Collections.Session)
-	sessionCollection.EnsureHashIndex(ctx, []string{"id"}, &arangoDriver.EnsureHashIndexOptions{
-		Unique: true,
-		Sparse: true,
-	})
-
-	return arangodb, err
-}

server/db/db.go

@@ -3,126 +3,51 @@ package db
 import (
 	"log"
 
-	arangoDriver "github.com/arangodb/go-driver"
 	"github.com/authorizerdev/authorizer/server/constants"
-	"github.com/authorizerdev/authorizer/server/enum"
-	"go.mongodb.org/mongo-driver/mongo"
-	"gorm.io/driver/mysql"
-	"gorm.io/driver/postgres"
-	"gorm.io/driver/sqlite"
-	"gorm.io/driver/sqlserver"
-	"gorm.io/gorm"
-	"gorm.io/gorm/schema"
+	"github.com/authorizerdev/authorizer/server/db/providers"
+	"github.com/authorizerdev/authorizer/server/db/providers/arangodb"
+	"github.com/authorizerdev/authorizer/server/db/providers/faunadb"
+	"github.com/authorizerdev/authorizer/server/db/providers/mongodb"
+	"github.com/authorizerdev/authorizer/server/db/providers/sql"
+	"github.com/authorizerdev/authorizer/server/envstore"
 )
 
-type Manager interface {
-	AddUser(user User) (User, error)
-	UpdateUser(user User) (User, error)
-	DeleteUser(user User) error
-	GetUsers() ([]User, error)
-	GetUserByEmail(email string) (User, error)
-	GetUserByID(email string) (User, error)
-	AddVerification(verification VerificationRequest) (VerificationRequest, error)
-	GetVerificationByToken(token string) (VerificationRequest, error)
-	DeleteVerificationRequest(verificationRequest VerificationRequest) error
-	GetVerificationRequests() ([]VerificationRequest, error)
-	GetVerificationByEmail(email string) (VerificationRequest, error)
-	AddSession(session Session) error
-}
-
-type manager struct {
-	sqlDB    *gorm.DB
-	arangodb arangoDriver.Database
-	mongodb  *mongo.Database
-}
-
-// mainly used by nosql dbs
-type CollectionList struct {
-	User                string
-	VerificationRequest string
-	Session             string
-}
-
-var (
-	IsORMSupported bool
-	IsArangoDB     bool
-	IsMongoDB      bool
-	Mgr            Manager
-	Prefix         = "authorizer_"
-	Collections    = CollectionList{
-		User:                Prefix + "users",
-		VerificationRequest: Prefix + "verification_requests",
-		Session:             Prefix + "sessions",
-	}
-)
+// Provider returns the current database provider
+var Provider providers.Provider
 
 func InitDB() {
-	var sqlDB *gorm.DB
 	var err error
 
-	IsORMSupported = constants.DATABASE_TYPE != enum.Arangodb.String() && constants.DATABASE_TYPE != enum.Mongodb.String()
-	IsArangoDB = constants.DATABASE_TYPE == enum.Arangodb.String()
-	IsMongoDB = constants.DATABASE_TYPE == enum.Mongodb.String()
+	isSQL := envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseType) != constants.DbTypeArangodb && envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseType) != constants.DbTypeMongodb && envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseType) != constants.DbTypeFaunadb
+	isArangoDB := envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseType) == constants.DbTypeArangodb
+	isMongoDB := envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseType) == constants.DbTypeMongodb
+	isFaunaDB := envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseType) == constants.DbTypeFaunadb
 
-	// sql db orm config
-	ormConfig := &gorm.Config{
-		NamingStrategy: schema.NamingStrategy{
-			TablePrefix: Prefix,
-		},
-	}
-
-	log.Println("db type:", constants.DATABASE_TYPE)
-
-	switch constants.DATABASE_TYPE {
-	case enum.Postgres.String():
-		sqlDB, err = gorm.Open(postgres.Open(constants.DATABASE_URL), ormConfig)
-		break
-	case enum.Sqlite.String():
-		sqlDB, err = gorm.Open(sqlite.Open(constants.DATABASE_URL), ormConfig)
-		break
-	case enum.Mysql.String():
-		sqlDB, err = gorm.Open(mysql.Open(constants.DATABASE_URL), ormConfig)
-		break
-	case enum.SQLServer.String():
-		sqlDB, err = gorm.Open(sqlserver.Open(constants.DATABASE_URL), ormConfig)
-		break
-	case enum.Arangodb.String():
-		arangodb, err := initArangodb()
+	if isSQL {
+		Provider, err = sql.NewProvider()
 		if err != nil {
-			log.Fatal("error initializing arangodb:", err)
+			log.Fatal("=> error setting sql provider:", err)
+		}
 	}
 
-		Mgr = &manager{
-			sqlDB:    nil,
-			mongodb:  nil,
-			arangodb: arangodb,
-		}
-
-		break
-	case enum.Mongodb.String():
-		mongodb, err := initMongodb()
+	if isArangoDB {
+		Provider, err = arangodb.NewProvider()
 		if err != nil {
-			log.Fatal("error initializing mongodb connection:", err)
-		}
-
-		Mgr = &manager{
-			sqlDB:    nil,
-			arangodb: nil,
-			mongodb:  mongodb,
+			log.Fatal("=> error setting arangodb provider:", err)
 		}
 	}
 
-	// common for all sql dbs that are configured via go-orm
-	if IsORMSupported {
+	if isMongoDB {
+		Provider, err = mongodb.NewProvider()
 		if err != nil {
-			log.Fatal("Failed to init sqlDB:", err)
-		} else {
-			sqlDB.AutoMigrate(&User{}, &VerificationRequest{}, &Session{})
+			log.Fatal("=> error setting arangodb provider:", err)
 		}
-		Mgr = &manager{
-			sqlDB:    sqlDB,
-			arangodb: nil,
-			mongodb:  nil,
+	}
+
+	if isFaunaDB {
+		Provider, err = faunadb.NewProvider()
+		if err != nil {
+			log.Fatal("=> error setting arangodb provider:", err)
 		}
 	}
 }

server/db/models/env.go

@@ -0,0 +1,11 @@
+package models
+
+// Env model for db
+type Env struct {
+	Key       string `json:"_key,omitempty" bson:"_key"` // for arangodb
+	ID        string `gorm:"primaryKey;type:char(36)" json:"_id" bson:"_id"`
+	EnvData   []byte `gorm:"type:text" json:"env" bson:"env"`
+	Hash      string `gorm:"type:hash" json:"hash" bson:"hash"`
+	UpdatedAt int64  `gorm:"autoUpdateTime" json:"updated_at" bson:"updated_at"`
+	CreatedAt int64  `gorm:"autoCreateTime" json:"created_at" bson:"created_at"`
+}

server/db/models/model.go

@@ -0,0 +1,21 @@
+package models
+
+// Collections / Tables available for authorizer in the database
+type CollectionList struct {
+	User                string
+	VerificationRequest string
+	Session             string
+	Env                 string
+}
+
+var (
+	// Prefix for table name / collection names
+	Prefix = "authorizer_"
+	// Collections / Tables available for authorizer in the database (used for dbs other than gorm)
+	Collections = CollectionList{
+		User:                Prefix + "users",
+		VerificationRequest: Prefix + "verification_requests",
+		Session:             Prefix + "sessions",
+		Env:                 Prefix + "env",
+	}
+)

server/db/models/session.go

@@ -0,0 +1,13 @@
+package models
+
+// Session model for db
+type Session struct {
+	Key       string `json:"_key,omitempty" bson:"_key,omitempty"` // for arangodb
+	ID        string `gorm:"primaryKey;type:char(36)" json:"_id" bson:"_id"`
+	UserID    string `gorm:"type:char(36),index:" json:"user_id" bson:"user_id"`
+	User      User   `json:"-" bson:"-"`
+	UserAgent string `json:"user_agent" bson:"user_agent"`
+	IP        string `json:"ip" bson:"ip"`
+	CreatedAt int64  `gorm:"autoCreateTime" json:"created_at" bson:"created_at"`
+	UpdatedAt int64  `gorm:"autoUpdateTime" json:"updated_at" bson:"updated_at"`
+}

server/db/models/user.go

@@ -0,0 +1,54 @@
+package models
+
+import (
+	"strings"
+
+	"github.com/authorizerdev/authorizer/server/graph/model"
+)
+
+// User model for db
+type User struct {
+	Key string `json:"_key,omitempty" bson:"_key"` // for arangodb
+	ID  string `gorm:"primaryKey;type:char(36)" json:"_id" bson:"_id"`
+
+	Email                 string  `gorm:"unique" json:"email" bson:"email"`
+	EmailVerifiedAt       *int64  `json:"email_verified_at" bson:"email_verified_at"`
+	Password              *string `gorm:"type:text" json:"password" bson:"password"`
+	SignupMethods         string  `json:"signup_methods" bson:"signup_methods"`
+	GivenName             *string `json:"given_name" bson:"given_name"`
+	FamilyName            *string `json:"family_name" bson:"family_name"`
+	MiddleName            *string `json:"middle_name" bson:"middle_name"`
+	Nickname              *string `json:"nickname" bson:"nickname"`
+	Gender                *string `json:"gender" bson:"gender"`
+	Birthdate             *string `json:"birthdate" bson:"birthdate"`
+	PhoneNumber           *string `gorm:"unique" json:"phone_number" bson:"phone_number"`
+	PhoneNumberVerifiedAt *int64  `json:"phone_number_verified_at" bson:"phone_number_verified_at"`
+	Picture               *string `gorm:"type:text" json:"picture" bson:"picture"`
+	Roles                 string  `json:"roles" bson:"roles"`
+	UpdatedAt             int64   `gorm:"autoUpdateTime" json:"updated_at" bson:"updated_at"`
+	CreatedAt             int64   `gorm:"autoCreateTime" json:"created_at" bson:"created_at"`
+}
+
+func (user *User) AsAPIUser() *model.User {
+	isEmailVerified := user.EmailVerifiedAt != nil
+	isPhoneVerified := user.PhoneNumberVerifiedAt != nil
+	return &model.User{
+		ID:                  user.ID,
+		Email:               user.Email,
+		EmailVerified:       isEmailVerified,
+		SignupMethods:       user.SignupMethods,
+		GivenName:           user.GivenName,
+		FamilyName:          user.FamilyName,
+		MiddleName:          user.MiddleName,
+		Nickname:            user.Nickname,
+		PreferredUsername:   &user.Email,
+		Gender:              user.Gender,
+		Birthdate:           user.Birthdate,
+		PhoneNumber:         user.PhoneNumber,
+		PhoneNumberVerified: &isPhoneVerified,
+		Picture:             user.Picture,
+		Roles:               strings.Split(user.Roles, ","),
+		CreatedAt:           &user.CreatedAt,
+		UpdatedAt:           &user.UpdatedAt,
+	}
+}

server/db/models/verification_requests.go

@@ -0,0 +1,13 @@
+package models
+
+// VerificationRequest model for db
+type VerificationRequest struct {
+	Key        string `json:"_key,omitempty" bson:"_key"` // for arangodb
+	ID         string `gorm:"primaryKey;type:char(36)" json:"_id" bson:"_id"`
+	Token      string `gorm:"type:text" json:"token" bson:"token"`
+	Identifier string `gorm:"uniqueIndex:idx_email_identifier" json:"identifier" bson:"identifier"`
+	ExpiresAt  int64  `json:"expires_at" bson:"expires_at"`
+	CreatedAt  int64  `gorm:"autoCreateTime" json:"created_at" bson:"created_at"`
+	UpdatedAt  int64  `gorm:"autoUpdateTime" json:"updated_at" bson:"updated_at"`
+	Email      string `gorm:"uniqueIndex:idx_email_identifier" json:"email" bson:"email"`
+}

server/db/providers/arangodb/arangodb.go

@@ -0,0 +1,123 @@
+package arangodb
+
+import (
+	"context"
+	"log"
+
+	"github.com/arangodb/go-driver"
+	arangoDriver "github.com/arangodb/go-driver"
+	"github.com/arangodb/go-driver/http"
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/authorizerdev/authorizer/server/envstore"
+)
+
+type provider struct {
+	db arangoDriver.Database
+}
+
+// for this we need arangodb instance up and running
+// for local testing we can use dockerized version of it
+// docker run -p 8529:8529 -e ARANGO_ROOT_PASSWORD=root arangodb/arangodb:3.8.4
+
+// NewProvider to initialize arangodb connection
+func NewProvider() (*provider, error) {
+	ctx := context.Background()
+	conn, err := http.NewConnection(http.ConnectionConfig{
+		Endpoints: []string{envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseURL)},
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	arangoClient, err := arangoDriver.NewClient(arangoDriver.ClientConfig{
+		Connection: conn,
+	})
+	if err != nil {
+		return nil, err
+	}
+
+	var arangodb driver.Database
+
+	arangodb_exists, err := arangoClient.DatabaseExists(nil, envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseName))
+
+	if arangodb_exists {
+		log.Println(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseName) + " db exists already")
+		arangodb, err = arangoClient.Database(nil, envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseName))
+		if err != nil {
+			return nil, err
+		}
+	} else {
+		arangodb, err = arangoClient.CreateDatabase(nil, envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseName), nil)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	userCollectionExists, err := arangodb.CollectionExists(ctx, models.Collections.User)
+	if userCollectionExists {
+		log.Println(models.Collections.User + " collection exists already")
+	} else {
+		_, err = arangodb.CreateCollection(ctx, models.Collections.User, nil)
+		if err != nil {
+			log.Println("error creating collection("+models.Collections.User+"):", err)
+		}
+	}
+	userCollection, _ := arangodb.Collection(nil, models.Collections.User)
+	userCollection.EnsureHashIndex(ctx, []string{"email"}, &arangoDriver.EnsureHashIndexOptions{
+		Unique: true,
+		Sparse: true,
+	})
+	userCollection.EnsureHashIndex(ctx, []string{"phone_number"}, &arangoDriver.EnsureHashIndexOptions{
+		Unique: true,
+		Sparse: true,
+	})
+
+	verificationRequestCollectionExists, err := arangodb.CollectionExists(ctx, models.Collections.VerificationRequest)
+	if verificationRequestCollectionExists {
+		log.Println(models.Collections.VerificationRequest + " collection exists already")
+	} else {
+		_, err = arangodb.CreateCollection(ctx, models.Collections.VerificationRequest, nil)
+		if err != nil {
+			log.Println("error creating collection("+models.Collections.VerificationRequest+"):", err)
+		}
+	}
+
+	verificationRequestCollection, _ := arangodb.Collection(nil, models.Collections.VerificationRequest)
+	verificationRequestCollection.EnsureHashIndex(ctx, []string{"email", "identifier"}, &arangoDriver.EnsureHashIndexOptions{
+		Unique: true,
+		Sparse: true,
+	})
+	verificationRequestCollection.EnsureHashIndex(ctx, []string{"token"}, &arangoDriver.EnsureHashIndexOptions{
+		Sparse: true,
+	})
+
+	sessionCollectionExists, err := arangodb.CollectionExists(ctx, models.Collections.Session)
+	if sessionCollectionExists {
+		log.Println(models.Collections.Session + " collection exists already")
+	} else {
+		_, err = arangodb.CreateCollection(ctx, models.Collections.Session, nil)
+		if err != nil {
+			log.Println("error creating collection("+models.Collections.Session+"):", err)
+		}
+	}
+
+	sessionCollection, _ := arangodb.Collection(nil, models.Collections.Session)
+	sessionCollection.EnsureHashIndex(ctx, []string{"user_id"}, &arangoDriver.EnsureHashIndexOptions{
+		Sparse: true,
+	})
+
+	configCollectionExists, err := arangodb.CollectionExists(ctx, models.Collections.Env)
+	if configCollectionExists {
+		log.Println(models.Collections.Env + " collection exists already")
+	} else {
+		_, err = arangodb.CreateCollection(ctx, models.Collections.Env, nil)
+		if err != nil {
+			log.Println("error creating collection("+models.Collections.Env+"):", err)
+		}
+	}
+
+	return &provider{
+		db: arangodb,
+	}, err
+}

server/db/providers/arangodb/env.go

@@ -0,0 +1,73 @@
+package arangodb
+
+import (
+	"fmt"
+	"log"
+	"time"
+
+	arangoDriver "github.com/arangodb/go-driver"
+	"github.com/google/uuid"
+
+	"github.com/authorizerdev/authorizer/server/db/models"
+)
+
+// AddEnv to save environment information in database
+func (p *provider) AddEnv(env models.Env) (models.Env, error) {
+	if env.ID == "" {
+		env.ID = uuid.New().String()
+	}
+
+	env.CreatedAt = time.Now().Unix()
+	env.UpdatedAt = time.Now().Unix()
+	configCollection, _ := p.db.Collection(nil, models.Collections.Env)
+	meta, err := configCollection.CreateDocument(arangoDriver.WithOverwrite(nil), env)
+	if err != nil {
+		log.Println("error adding config:", err)
+		return env, err
+	}
+	env.Key = meta.Key
+	env.ID = meta.ID.String()
+	return env, nil
+}
+
+// UpdateEnv to update environment information in database
+func (p *provider) UpdateEnv(env models.Env) (models.Env, error) {
+	env.UpdatedAt = time.Now().Unix()
+	collection, _ := p.db.Collection(nil, models.Collections.Env)
+	meta, err := collection.UpdateDocument(nil, env.Key, env)
+	if err != nil {
+		log.Println("error updating config:", err)
+		return env, err
+	}
+
+	env.Key = meta.Key
+	env.ID = meta.ID.String()
+	return env, nil
+}
+
+// GetEnv to get environment information from database
+func (p *provider) GetEnv() (models.Env, error) {
+	var env models.Env
+	query := fmt.Sprintf("FOR d in %s RETURN d", models.Collections.Env)
+
+	cursor, err := p.db.Query(nil, query, nil)
+	if err != nil {
+		return env, err
+	}
+	defer cursor.Close()
+
+	for {
+		if !cursor.HasMore() {
+			if env.Key == "" {
+				return env, fmt.Errorf("config not found")
+			}
+			break
+		}
+		_, err := cursor.ReadDocument(nil, &env)
+		if err != nil {
+			return env, err
+		}
+	}
+
+	return env, nil
+}

server/db/providers/arangodb/session.go

@@ -0,0 +1,42 @@
+package arangodb
+
+import (
+	"fmt"
+	"log"
+	"time"
+
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/google/uuid"
+)
+
+// AddSession to save session information in database
+func (p *provider) AddSession(session models.Session) error {
+	if session.ID == "" {
+		session.ID = uuid.New().String()
+	}
+
+	session.CreatedAt = time.Now().Unix()
+	session.UpdatedAt = time.Now().Unix()
+	sessionCollection, _ := p.db.Collection(nil, models.Collections.Session)
+	_, err := sessionCollection.CreateDocument(nil, session)
+	if err != nil {
+		log.Println(`error saving session`, err)
+		return err
+	}
+	return nil
+}
+
+// DeleteSession to delete session information from database
+func (p *provider) DeleteSession(userId string) error {
+	query := fmt.Sprintf(`FOR d IN %s FILTER d.user_id == @userId REMOVE { _key: d._key } IN %s`, models.Collections.Session, models.Collections.Session)
+	bindVars := map[string]interface{}{
+		"userId": userId,
+	}
+	cursor, err := p.db.Query(nil, query, bindVars)
+	if err != nil {
+		log.Println("=> error deleting arangodb session:", err)
+		return err
+	}
+	defer cursor.Close()
+	return nil
+}

server/db/providers/arangodb/user.go

@@ -0,0 +1,157 @@
+package arangodb
+
+import (
+	"fmt"
+	"log"
+	"strings"
+	"time"
+
+	"github.com/arangodb/go-driver"
+	arangoDriver "github.com/arangodb/go-driver"
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/authorizerdev/authorizer/server/envstore"
+	"github.com/google/uuid"
+)
+
+// AddUser to save user information in database
+func (p *provider) AddUser(user models.User) (models.User, error) {
+	if user.ID == "" {
+		user.ID = uuid.New().String()
+	}
+
+	if user.Roles == "" {
+		user.Roles = strings.Join(envstore.EnvInMemoryStoreObj.GetSliceStoreEnvVariable(constants.EnvKeyDefaultRoles), ",")
+	}
+
+	user.CreatedAt = time.Now().Unix()
+	user.UpdatedAt = time.Now().Unix()
+	userCollection, _ := p.db.Collection(nil, models.Collections.User)
+	meta, err := userCollection.CreateDocument(arangoDriver.WithOverwrite(nil), user)
+	if err != nil {
+		log.Println("error adding user:", err)
+		return user, err
+	}
+	user.Key = meta.Key
+	user.ID = meta.ID.String()
+
+	return user, nil
+}
+
+// UpdateUser to update user information in database
+func (p *provider) UpdateUser(user models.User) (models.User, error) {
+	user.UpdatedAt = time.Now().Unix()
+	collection, _ := p.db.Collection(nil, models.Collections.User)
+	meta, err := collection.UpdateDocument(nil, user.Key, user)
+	if err != nil {
+		log.Println("error updating user:", err)
+		return user, err
+	}
+
+	user.Key = meta.Key
+	user.ID = meta.ID.String()
+	return user, nil
+}
+
+// DeleteUser to delete user information from database
+func (p *provider) DeleteUser(user models.User) error {
+	collection, _ := p.db.Collection(nil, models.Collections.User)
+	_, err := collection.RemoveDocument(nil, user.Key)
+	if err != nil {
+		log.Println(`error deleting user:`, err)
+		return err
+	}
+
+	return nil
+}
+
+// ListUsers to get list of users from database
+func (p *provider) ListUsers() ([]models.User, error) {
+	var users []models.User
+	query := fmt.Sprintf("FOR d in %s RETURN d", models.Collections.User)
+
+	cursor, err := p.db.Query(nil, query, nil)
+	if err != nil {
+		return users, err
+	}
+	defer cursor.Close()
+
+	for {
+		var user models.User
+		meta, err := cursor.ReadDocument(nil, &user)
+
+		if driver.IsNoMoreDocuments(err) {
+			break
+		} else if err != nil {
+			return users, err
+		}
+
+		if meta.Key != "" {
+			users = append(users, user)
+		}
+	}
+
+	return users, nil
+}
+
+// GetUserByEmail to get user information from database using email address
+func (p *provider) GetUserByEmail(email string) (models.User, error) {
+	var user models.User
+
+	query := fmt.Sprintf("FOR d in %s FILTER d.email == @email RETURN d", models.Collections.User)
+	bindVars := map[string]interface{}{
+		"email": email,
+	}
+
+	cursor, err := p.db.Query(nil, query, bindVars)
+	if err != nil {
+		return user, err
+	}
+	defer cursor.Close()
+
+	for {
+		if !cursor.HasMore() {
+			if user.Key == "" {
+				return user, fmt.Errorf("user not found")
+			}
+			break
+		}
+		_, err := cursor.ReadDocument(nil, &user)
+		if err != nil {
+			return user, err
+		}
+	}
+
+	return user, nil
+}
+
+// GetUserByID to get user information from database using user ID
+func (p *provider) GetUserByID(id string) (models.User, error) {
+	var user models.User
+
+	query := fmt.Sprintf("FOR d in %s FILTER d._id == @id LIMIT 1 RETURN d", models.Collections.User)
+	bindVars := map[string]interface{}{
+		"id": id,
+	}
+
+	cursor, err := p.db.Query(nil, query, bindVars)
+	if err != nil {
+		return user, err
+	}
+	defer cursor.Close()
+
+	for {
+		if !cursor.HasMore() {
+			if user.Key == "" {
+				return user, fmt.Errorf("user not found")
+			}
+			break
+		}
+		_, err := cursor.ReadDocument(nil, &user)
+		if err != nil {
+			return user, err
+		}
+	}
+
+	return user, nil
+}

server/db/providers/arangodb/verification_requests.go

@@ -0,0 +1,135 @@
+package arangodb
+
+import (
+	"fmt"
+	"log"
+	"time"
+
+	"github.com/arangodb/go-driver"
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/google/uuid"
+)
+
+// AddVerification to save verification request in database
+func (p *provider) AddVerificationRequest(verificationRequest models.VerificationRequest) (models.VerificationRequest, error) {
+	if verificationRequest.ID == "" {
+		verificationRequest.ID = uuid.New().String()
+	}
+
+	verificationRequest.CreatedAt = time.Now().Unix()
+	verificationRequest.UpdatedAt = time.Now().Unix()
+	verificationRequestRequestCollection, _ := p.db.Collection(nil, models.Collections.VerificationRequest)
+	meta, err := verificationRequestRequestCollection.CreateDocument(nil, verificationRequest)
+	if err != nil {
+		log.Println("error saving verificationRequest record:", err)
+		return verificationRequest, err
+	}
+	verificationRequest.Key = meta.Key
+	verificationRequest.ID = meta.ID.String()
+
+	return verificationRequest, nil
+}
+
+// GetVerificationRequestByToken to get verification request from database using token
+func (p *provider) GetVerificationRequestByToken(token string) (models.VerificationRequest, error) {
+	var verificationRequest models.VerificationRequest
+	query := fmt.Sprintf("FOR d in %s FILTER d.token == @token LIMIT 1 RETURN d", models.Collections.VerificationRequest)
+	bindVars := map[string]interface{}{
+		"token": token,
+	}
+
+	cursor, err := p.db.Query(nil, query, bindVars)
+	if err != nil {
+		return verificationRequest, err
+	}
+	defer cursor.Close()
+
+	for {
+		if !cursor.HasMore() {
+			if verificationRequest.Key == "" {
+				return verificationRequest, fmt.Errorf("verification request not found")
+			}
+			break
+		}
+		_, err := cursor.ReadDocument(nil, &verificationRequest)
+		if err != nil {
+			return verificationRequest, err
+		}
+	}
+
+	return verificationRequest, nil
+}
+
+// GetVerificationRequestByEmail to get verification request by email from database
+func (p *provider) GetVerificationRequestByEmail(email string, identifier string) (models.VerificationRequest, error) {
+	var verificationRequest models.VerificationRequest
+
+	query := fmt.Sprintf("FOR d in %s FILTER d.email == @email FILTER d.identifier == @identifier LIMIT 1 RETURN d", models.Collections.VerificationRequest)
+	bindVars := map[string]interface{}{
+		"email":      email,
+		"identifier": identifier,
+	}
+
+	cursor, err := p.db.Query(nil, query, bindVars)
+	if err != nil {
+		return verificationRequest, err
+	}
+	defer cursor.Close()
+
+	for {
+		if !cursor.HasMore() {
+			if verificationRequest.Key == "" {
+				return verificationRequest, fmt.Errorf("verification request not found")
+			}
+			break
+		}
+		_, err := cursor.ReadDocument(nil, &verificationRequest)
+		if err != nil {
+			return verificationRequest, err
+		}
+	}
+
+	return verificationRequest, nil
+}
+
+// ListVerificationRequests to get list of verification requests from database
+func (p *provider) ListVerificationRequests() ([]models.VerificationRequest, error) {
+	var verificationRequests []models.VerificationRequest
+
+	query := fmt.Sprintf("FOR d in %s RETURN d", models.Collections.VerificationRequest)
+
+	cursor, err := p.db.Query(nil, query, nil)
+	if err != nil {
+		return verificationRequests, err
+	}
+	defer cursor.Close()
+
+	for {
+		var verificationRequest models.VerificationRequest
+		meta, err := cursor.ReadDocument(nil, &verificationRequest)
+
+		if driver.IsNoMoreDocuments(err) {
+			break
+		} else if err != nil {
+			return verificationRequests, err
+		}
+
+		if meta.Key != "" {
+			verificationRequests = append(verificationRequests, verificationRequest)
+		}
+
+	}
+
+	return verificationRequests, nil
+}
+
+// DeleteVerificationRequest to delete verification request from database
+func (p *provider) DeleteVerificationRequest(verificationRequest models.VerificationRequest) error {
+	collection, _ := p.db.Collection(nil, models.Collections.VerificationRequest)
+	_, err := collection.RemoveDocument(nil, verificationRequest.Key)
+	if err != nil {
+		log.Println(`error deleting verification request:`, err)
+		return err
+	}
+	return nil
+}

server/db/providers/faunadb/env.go

@@ -0,0 +1,51 @@
+package faunadb
+
+import (
+	"log"
+	"time"
+
+	f "github.com/fauna/faunadb-go/v5/faunadb"
+	"github.com/google/uuid"
+
+	"github.com/authorizerdev/authorizer/server/db/models"
+)
+
+// AddEnv to save environment information in database
+func (p *provider) AddEnv(env models.Env) (models.Env, error) {
+	if env.ID == "" {
+		env.ID = uuid.New().String()
+		env.Key = env.ID
+	}
+
+	env.CreatedAt = time.Now().Unix()
+	env.UpdatedAt = time.Now().Unix()
+
+	_, err := p.db.Query(
+		f.Create(
+			f.Collection(models.Collections.Env),
+			f.Obj{
+				"data": env,
+			},
+		),
+	)
+	if err != nil {
+		log.Println("error adding env:", err)
+		return env, err
+	}
+
+	return env, nil
+}
+
+// UpdateEnv to update environment information in database
+func (p *provider) UpdateEnv(env models.Env) (models.Env, error) {
+	env.UpdatedAt = time.Now().Unix()
+
+	return env, nil
+}
+
+// GetEnv to get environment information from database
+func (p *provider) GetEnv() (models.Env, error) {
+	var env models.Env
+
+	return env, nil
+}

server/db/providers/faunadb/faunadb.go

@@ -0,0 +1,164 @@
+package faunadb
+
+import (
+	"errors"
+	"log"
+	"strings"
+
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/authorizerdev/authorizer/server/envstore"
+	f "github.com/fauna/faunadb-go/v5/faunadb"
+)
+
+type provider struct {
+	db *f.FaunaClient
+}
+
+// NewProvider returns a new faunadb provider
+func NewProvider() (*provider, error) {
+	secret := ""
+	dbURL := "https://db.fauna.com"
+
+	// secret,url is stored in DATABASE_URL
+	dbURLSplit := strings.Split(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseURL), ":")
+	secret = dbURLSplit[0]
+
+	if len(dbURLSplit) > 1 {
+		dbURL = dbURLSplit[1]
+	}
+
+	client := f.NewFaunaClient(secret, f.Endpoint(dbURL))
+	if client == nil {
+		return nil, errors.New("failed to create faunadb client")
+	}
+
+	_, err := client.Query(
+		f.CreateCollection(f.Obj{"name": models.Collections.Env}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateIndex(
+			f.Obj{
+				"name":   "env_id",
+				"source": f.Collection(models.Collections.Env),
+				"values": "_id",
+				"unique": true,
+			}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateIndex(
+			f.Obj{
+				"name":   "env_key",
+				"source": f.Collection(models.Collections.Env),
+				"values": "_key",
+				"unique": true,
+			}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateCollection(f.Obj{"name": models.Collections.User}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateIndex(
+			f.Obj{
+				"name":   "_id",
+				"source": f.Collection(models.Collections.User),
+				"unique": true,
+			}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateIndex(
+			f.Obj{
+				"name":   "_key",
+				"source": f.Collection(models.Collections.User),
+				"unique": true,
+			}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateIndex(
+			f.Obj{
+				"name":   "email",
+				"source": f.Collection(models.Collections.User),
+				"unique": true,
+			}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateCollection(f.Obj{"name": models.Collections.Session}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateIndex(
+			f.Obj{
+				"name":   "_id",
+				"source": f.Collection(models.Collections.Session),
+				"unique": true,
+			}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateIndex(
+			f.Obj{
+				"name":   "_key",
+				"source": f.Collection(models.Collections.Session),
+				"unique": true,
+			}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateCollection(f.Obj{"name": models.Collections.VerificationRequest}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateIndex(
+			f.Obj{
+				"name":   "_id",
+				"source": f.Collection(models.Collections.VerificationRequest),
+				"unique": true,
+			}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	_, err = client.Query(
+		f.CreateIndex(
+			f.Obj{
+				"name":   "_key",
+				"source": f.Collection(models.Collections.VerificationRequest),
+				"unique": true,
+			}))
+	if err != nil {
+		log.Println("error:", err)
+	}
+
+	return &provider{
+		db: client,
+	}, nil
+}

server/db/providers/faunadb/session.go

@@ -0,0 +1,25 @@
+package faunadb
+
+import (
+	"time"
+
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/google/uuid"
+)
+
+// AddSession to save session information in database
+func (p *provider) AddSession(session models.Session) error {
+	if session.ID == "" {
+		session.ID = uuid.New().String()
+	}
+
+	session.CreatedAt = time.Now().Unix()
+	session.UpdatedAt = time.Now().Unix()
+
+	return nil
+}
+
+// DeleteSession to delete session information from database
+func (p *provider) DeleteSession(userId string) error {
+	return nil
+}

server/db/providers/faunadb/user.go

@@ -0,0 +1,60 @@
+package faunadb
+
+import (
+	"strings"
+	"time"
+
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/authorizerdev/authorizer/server/envstore"
+	"github.com/google/uuid"
+)
+
+// AddUser to save user information in database
+func (p *provider) AddUser(user models.User) (models.User, error) {
+	if user.ID == "" {
+		user.ID = uuid.New().String()
+	}
+
+	if user.Roles == "" {
+		user.Roles = strings.Join(envstore.EnvInMemoryStoreObj.GetSliceStoreEnvVariable(constants.EnvKeyDefaultRoles), ",")
+	}
+
+	user.CreatedAt = time.Now().Unix()
+	user.UpdatedAt = time.Now().Unix()
+
+	return user, nil
+}
+
+// UpdateUser to update user information in database
+func (p *provider) UpdateUser(user models.User) (models.User, error) {
+	user.UpdatedAt = time.Now().Unix()
+
+	return user, nil
+}
+
+// DeleteUser to delete user information from database
+func (p *provider) DeleteUser(user models.User) error {
+	return nil
+}
+
+// ListUsers to get list of users from database
+func (p *provider) ListUsers() ([]models.User, error) {
+	var users []models.User
+
+	return users, nil
+}
+
+// GetUserByEmail to get user information from database using email address
+func (p *provider) GetUserByEmail(email string) (models.User, error) {
+	var user models.User
+
+	return user, nil
+}
+
+// GetUserByID to get user information from database using user ID
+func (p *provider) GetUserByID(id string) (models.User, error) {
+	var user models.User
+
+	return user, nil
+}

server/db/providers/faunadb/verification_requests.go

@@ -0,0 +1,46 @@
+package faunadb
+
+import (
+	"time"
+
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/google/uuid"
+)
+
+// AddVerification to save verification request in database
+func (p *provider) AddVerificationRequest(verificationRequest models.VerificationRequest) (models.VerificationRequest, error) {
+	if verificationRequest.ID == "" {
+		verificationRequest.ID = uuid.New().String()
+	}
+
+	verificationRequest.CreatedAt = time.Now().Unix()
+	verificationRequest.UpdatedAt = time.Now().Unix()
+
+	return verificationRequest, nil
+}
+
+// GetVerificationRequestByToken to get verification request from database using token
+func (p *provider) GetVerificationRequestByToken(token string) (models.VerificationRequest, error) {
+	var verificationRequest models.VerificationRequest
+
+	return verificationRequest, nil
+}
+
+// GetVerificationRequestByEmail to get verification request by email from database
+func (p *provider) GetVerificationRequestByEmail(email string, identifier string) (models.VerificationRequest, error) {
+	var verificationRequest models.VerificationRequest
+
+	return verificationRequest, nil
+}
+
+// ListVerificationRequests to get list of verification requests from database
+func (p *provider) ListVerificationRequests() ([]models.VerificationRequest, error) {
+	var verificationRequests []models.VerificationRequest
+
+	return verificationRequests, nil
+}
+
+// DeleteVerificationRequest to delete verification request from database
+func (p *provider) DeleteVerificationRequest(verificationRequest models.VerificationRequest) error {
+	return nil
+}

server/db/providers/mongodb/env.go

@@ -0,0 +1,66 @@
+package mongodb
+
+import (
+	"fmt"
+	"log"
+	"time"
+
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/google/uuid"
+	"go.mongodb.org/mongo-driver/bson"
+	"go.mongodb.org/mongo-driver/mongo/options"
+)
+
+// AddEnv to save environment information in database
+func (p *provider) AddEnv(env models.Env) (models.Env, error) {
+	if env.ID == "" {
+		env.ID = uuid.New().String()
+	}
+
+	env.CreatedAt = time.Now().Unix()
+	env.UpdatedAt = time.Now().Unix()
+	env.Key = env.ID
+	configCollection := p.db.Collection(models.Collections.Env, options.Collection())
+	_, err := configCollection.InsertOne(nil, env)
+	if err != nil {
+		log.Println("error adding config:", err)
+		return env, err
+	}
+	return env, nil
+}
+
+// UpdateEnv to update environment information in database
+func (p *provider) UpdateEnv(env models.Env) (models.Env, error) {
+	env.UpdatedAt = time.Now().Unix()
+	configCollection := p.db.Collection(models.Collections.Env, options.Collection())
+	_, err := configCollection.UpdateOne(nil, bson.M{"_id": bson.M{"$eq": env.ID}}, bson.M{"$set": env}, options.MergeUpdateOptions())
+	if err != nil {
+		log.Println("error updating config:", err)
+		return env, err
+	}
+	return env, nil
+}
+
+// GetEnv to get environment information from database
+func (p *provider) GetEnv() (models.Env, error) {
+	var env models.Env
+	configCollection := p.db.Collection(models.Collections.Env, options.Collection())
+	cursor, err := configCollection.Find(nil, bson.M{}, options.Find())
+	if err != nil {
+		return env, err
+	}
+	defer cursor.Close(nil)
+
+	for cursor.Next(nil) {
+		err := cursor.Decode(&env)
+		if err != nil {
+			return env, err
+		}
+	}
+
+	if env.ID == "" {
+		return env, fmt.Errorf("config not found")
+	}
+
+	return env, nil
+}

server/db/providers/mongodb/mongodb.go

@@ -1,18 +1,25 @@
-package db
+package mongodb
 
 import (
 	"context"
 	"time"
 
 	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/authorizerdev/authorizer/server/envstore"
 	"go.mongodb.org/mongo-driver/bson"
 	"go.mongodb.org/mongo-driver/mongo"
 	"go.mongodb.org/mongo-driver/mongo/options"
 	"go.mongodb.org/mongo-driver/mongo/readpref"
 )
 
-func initMongodb() (*mongo.Database, error) {
-	mongodbOptions := options.Client().ApplyURI(constants.DATABASE_URL)
+type provider struct {
+	db *mongo.Database
+}
+
+// NewProvider to initialize mongodb connection
+func NewProvider() (*provider, error) {
+	mongodbOptions := options.Client().ApplyURI(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseURL))
 	maxWait := time.Duration(5 * time.Second)
 	mongodbOptions.ConnectTimeout = &maxWait
 	mongoClient, err := mongo.NewClient(mongodbOptions)
@@ -30,31 +37,27 @@ func initMongodb() (*mongo.Database, error) {
 		return nil, err
 	}
 
-	mongodb := mongoClient.Database(constants.DATABASE_NAME, options.Database())
+	mongodb := mongoClient.Database(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseName), options.Database())
 
-	mongodb.CreateCollection(ctx, Collections.User, options.CreateCollection())
-	userCollection := mongodb.Collection(Collections.User, options.Collection())
-	userCollection.Indexes().CreateMany(ctx, []mongo.IndexModel{
-		mongo.IndexModel{
-			Keys:    bson.M{"id": 1},
-			Options: options.Index().SetUnique(true).SetSparse(true),
-		},
-	}, options.CreateIndexes())
+	mongodb.CreateCollection(ctx, models.Collections.User, options.CreateCollection())
+	userCollection := mongodb.Collection(models.Collections.User, options.Collection())
 	userCollection.Indexes().CreateMany(ctx, []mongo.IndexModel{
 		mongo.IndexModel{
 			Keys:    bson.M{"email": 1},
 			Options: options.Index().SetUnique(true).SetSparse(true),
 		},
 	}, options.CreateIndexes())
-
-	mongodb.CreateCollection(ctx, Collections.VerificationRequest, options.CreateCollection())
-	verificationRequestCollection := mongodb.Collection(Collections.VerificationRequest, options.Collection())
-	verificationRequestCollection.Indexes().CreateMany(ctx, []mongo.IndexModel{
+	userCollection.Indexes().CreateMany(ctx, []mongo.IndexModel{
 		mongo.IndexModel{
-			Keys:    bson.M{"id": 1},
-			Options: options.Index().SetUnique(true).SetSparse(true),
+			Keys: bson.M{"phone_number": 1},
+			Options: options.Index().SetUnique(true).SetSparse(true).SetPartialFilterExpression(map[string]interface{}{
+				"phone_number": map[string]string{"$type": "string"},
+			}),
 		},
 	}, options.CreateIndexes())
+
+	mongodb.CreateCollection(ctx, models.Collections.VerificationRequest, options.CreateCollection())
+	verificationRequestCollection := mongodb.Collection(models.Collections.VerificationRequest, options.Collection())
 	verificationRequestCollection.Indexes().CreateMany(ctx, []mongo.IndexModel{
 		mongo.IndexModel{
 			Keys:    bson.M{"email": 1, "identifier": 1},
@@ -68,14 +71,18 @@ func initMongodb() (*mongo.Database, error) {
 		},
 	}, options.CreateIndexes())
 
-	mongodb.CreateCollection(ctx, Collections.Session, options.CreateCollection())
-	sessionCollection := mongodb.Collection(Collections.Session, options.Collection())
+	mongodb.CreateCollection(ctx, models.Collections.Session, options.CreateCollection())
+	sessionCollection := mongodb.Collection(models.Collections.Session, options.Collection())
 	sessionCollection.Indexes().CreateMany(ctx, []mongo.IndexModel{
 		mongo.IndexModel{
-			Keys:    bson.M{"id": 1},
-			Options: options.Index().SetUnique(true).SetSparse(true),
+			Keys:    bson.M{"user_id": 1},
+			Options: options.Index().SetSparse(true),
 		},
 	}, options.CreateIndexes())
 
-	return mongodb, nil
+	mongodb.CreateCollection(ctx, models.Collections.Env, options.CreateCollection())
+
+	return &provider{
+		db: mongodb,
+	}, nil
 }

server/db/providers/mongodb/session.go

@@ -0,0 +1,40 @@
+package mongodb
+
+import (
+	"log"
+	"time"
+
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/google/uuid"
+	"go.mongodb.org/mongo-driver/bson"
+	"go.mongodb.org/mongo-driver/mongo/options"
+)
+
+// AddSession to save session information in database
+func (p *provider) AddSession(session models.Session) error {
+	if session.ID == "" {
+		session.ID = uuid.New().String()
+	}
+
+	session.Key = session.ID
+	session.CreatedAt = time.Now().Unix()
+	session.UpdatedAt = time.Now().Unix()
+	sessionCollection := p.db.Collection(models.Collections.Session, options.Collection())
+	_, err := sessionCollection.InsertOne(nil, session)
+	if err != nil {
+		log.Println(`error saving session`, err)
+		return err
+	}
+	return nil
+}
+
+// DeleteSession to delete session information from database
+func (p *provider) DeleteSession(userId string) error {
+	sessionCollection := p.db.Collection(models.Collections.Session, options.Collection())
+	_, err := sessionCollection.DeleteMany(nil, bson.M{"user_id": userId}, options.Delete())
+	if err != nil {
+		log.Println("error deleting session:", err)
+		return err
+	}
+	return nil
+}

server/db/providers/mongodb/user.go

@@ -0,0 +1,108 @@
+package mongodb
+
+import (
+	"log"
+	"strings"
+	"time"
+
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/authorizerdev/authorizer/server/envstore"
+	"github.com/google/uuid"
+	"go.mongodb.org/mongo-driver/bson"
+	"go.mongodb.org/mongo-driver/mongo/options"
+)
+
+// AddUser to save user information in database
+func (p *provider) AddUser(user models.User) (models.User, error) {
+	if user.ID == "" {
+		user.ID = uuid.New().String()
+	}
+
+	if user.Roles == "" {
+		user.Roles = strings.Join(envstore.EnvInMemoryStoreObj.GetSliceStoreEnvVariable(constants.EnvKeyDefaultRoles), ",")
+	}
+	user.CreatedAt = time.Now().Unix()
+	user.UpdatedAt = time.Now().Unix()
+	user.Key = user.ID
+	userCollection := p.db.Collection(models.Collections.User, options.Collection())
+	_, err := userCollection.InsertOne(nil, user)
+	if err != nil {
+		log.Println("error adding user:", err)
+		return user, err
+	}
+
+	return user, nil
+}
+
+// UpdateUser to update user information in database
+func (p *provider) UpdateUser(user models.User) (models.User, error) {
+	user.UpdatedAt = time.Now().Unix()
+	userCollection := p.db.Collection(models.Collections.User, options.Collection())
+	_, err := userCollection.UpdateOne(nil, bson.M{"_id": bson.M{"$eq": user.ID}}, bson.M{"$set": user}, options.MergeUpdateOptions())
+	if err != nil {
+		log.Println("error updating user:", err)
+		return user, err
+	}
+	return user, nil
+}
+
+// DeleteUser to delete user information from database
+func (p *provider) DeleteUser(user models.User) error {
+	userCollection := p.db.Collection(models.Collections.User, options.Collection())
+	_, err := userCollection.DeleteOne(nil, bson.M{"_id": user.ID}, options.Delete())
+	if err != nil {
+		log.Println("error deleting user:", err)
+		return err
+	}
+
+	return nil
+}
+
+// ListUsers to get list of users from database
+func (p *provider) ListUsers() ([]models.User, error) {
+	var users []models.User
+	userCollection := p.db.Collection(models.Collections.User, options.Collection())
+	cursor, err := userCollection.Find(nil, bson.M{}, options.Find())
+	if err != nil {
+		log.Println("error getting users:", err)
+		return users, err
+	}
+	defer cursor.Close(nil)
+
+	for cursor.Next(nil) {
+		var user models.User
+		err := cursor.Decode(&user)
+		if err != nil {
+			return users, err
+		}
+		users = append(users, user)
+	}
+
+	return users, nil
+}
+
+// GetUserByEmail to get user information from database using email address
+func (p *provider) GetUserByEmail(email string) (models.User, error) {
+	var user models.User
+	userCollection := p.db.Collection(models.Collections.User, options.Collection())
+	err := userCollection.FindOne(nil, bson.M{"email": email}).Decode(&user)
+	if err != nil {
+		return user, err
+	}
+
+	return user, nil
+}
+
+// GetUserByID to get user information from database using user ID
+func (p *provider) GetUserByID(id string) (models.User, error) {
+	var user models.User
+
+	userCollection := p.db.Collection(models.Collections.User, options.Collection())
+	err := userCollection.FindOne(nil, bson.M{"_id": id}).Decode(&user)
+	if err != nil {
+		return user, err
+	}
+
+	return user, nil
+}

server/db/providers/mongodb/verification_requests.go

@@ -0,0 +1,91 @@
+package mongodb
+
+import (
+	"log"
+	"time"
+
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/google/uuid"
+	"go.mongodb.org/mongo-driver/bson"
+	"go.mongodb.org/mongo-driver/mongo/options"
+)
+
+// AddVerification to save verification request in database
+func (p *provider) AddVerificationRequest(verificationRequest models.VerificationRequest) (models.VerificationRequest, error) {
+	if verificationRequest.ID == "" {
+		verificationRequest.ID = uuid.New().String()
+
+		verificationRequest.CreatedAt = time.Now().Unix()
+		verificationRequest.UpdatedAt = time.Now().Unix()
+		verificationRequest.Key = verificationRequest.ID
+		verificationRequestCollection := p.db.Collection(models.Collections.VerificationRequest, options.Collection())
+		_, err := verificationRequestCollection.InsertOne(nil, verificationRequest)
+		if err != nil {
+			log.Println("error saving verification record:", err)
+			return verificationRequest, err
+		}
+	}
+
+	return verificationRequest, nil
+}
+
+// GetVerificationRequestByToken to get verification request from database using token
+func (p *provider) GetVerificationRequestByToken(token string) (models.VerificationRequest, error) {
+	var verificationRequest models.VerificationRequest
+
+	verificationRequestCollection := p.db.Collection(models.Collections.VerificationRequest, options.Collection())
+	err := verificationRequestCollection.FindOne(nil, bson.M{"token": token}).Decode(&verificationRequest)
+	if err != nil {
+		return verificationRequest, err
+	}
+
+	return verificationRequest, nil
+}
+
+// GetVerificationRequestByEmail to get verification request by email from database
+func (p *provider) GetVerificationRequestByEmail(email string, identifier string) (models.VerificationRequest, error) {
+	var verificationRequest models.VerificationRequest
+
+	verificationRequestCollection := p.db.Collection(models.Collections.VerificationRequest, options.Collection())
+	err := verificationRequestCollection.FindOne(nil, bson.M{"email": email, "identifier": identifier}).Decode(&verificationRequest)
+	if err != nil {
+		return verificationRequest, err
+	}
+
+	return verificationRequest, nil
+}
+
+// ListVerificationRequests to get list of verification requests from database
+func (p *provider) ListVerificationRequests() ([]models.VerificationRequest, error) {
+	var verificationRequests []models.VerificationRequest
+	verificationRequestCollection := p.db.Collection(models.Collections.VerificationRequest, options.Collection())
+	cursor, err := verificationRequestCollection.Find(nil, bson.M{}, options.Find())
+	if err != nil {
+		log.Println("error getting verification requests:", err)
+		return verificationRequests, err
+	}
+	defer cursor.Close(nil)
+
+	for cursor.Next(nil) {
+		var verificationRequest models.VerificationRequest
+		err := cursor.Decode(&verificationRequest)
+		if err != nil {
+			return verificationRequests, err
+		}
+		verificationRequests = append(verificationRequests, verificationRequest)
+	}
+
+	return verificationRequests, nil
+}
+
+// DeleteVerificationRequest to delete verification request from database
+func (p *provider) DeleteVerificationRequest(verificationRequest models.VerificationRequest) error {
+	verificationRequestCollection := p.db.Collection(models.Collections.VerificationRequest, options.Collection())
+	_, err := verificationRequestCollection.DeleteOne(nil, bson.M{"_id": verificationRequest.ID}, options.Delete())
+	if err != nil {
+		log.Println("error deleting verification request::", err)
+		return err
+	}
+
+	return nil
+}

server/db/providers/providers.go

@@ -0,0 +1,41 @@
+package providers
+
+import "github.com/authorizerdev/authorizer/server/db/models"
+
+type Provider interface {
+	// AddUser to save user information in database
+	AddUser(user models.User) (models.User, error)
+	// UpdateUser to update user information in database
+	UpdateUser(user models.User) (models.User, error)
+	// DeleteUser to delete user information from database
+	DeleteUser(user models.User) error
+	// ListUsers to get list of users from database
+	ListUsers() ([]models.User, error)
+	// GetUserByEmail to get user information from database using email address
+	GetUserByEmail(email string) (models.User, error)
+	// GetUserByID to get user information from database using user ID
+	GetUserByID(id string) (models.User, error)
+
+	// AddVerification to save verification request in database
+	AddVerificationRequest(verificationRequest models.VerificationRequest) (models.VerificationRequest, error)
+	// GetVerificationRequestByToken to get verification request from database using token
+	GetVerificationRequestByToken(token string) (models.VerificationRequest, error)
+	// GetVerificationRequestByEmail to get verification request by email from database
+	GetVerificationRequestByEmail(email string, identifier string) (models.VerificationRequest, error)
+	// ListVerificationRequests to get list of verification requests from database
+	ListVerificationRequests() ([]models.VerificationRequest, error)
+	// DeleteVerificationRequest to delete verification request from database
+	DeleteVerificationRequest(verificationRequest models.VerificationRequest) error
+
+	// AddSession to save session information in database
+	AddSession(session models.Session) error
+	// DeleteSession to delete session information from database
+	DeleteSession(userId string) error
+
+	// AddEnv to save environment information in database
+	AddEnv(env models.Env) (models.Env, error)
+	// UpdateEnv to update environment information in database
+	UpdateEnv(env models.Env) (models.Env, error)
+	// GetEnv to get environment information from database
+	GetEnv() (models.Env, error)
+}

server/db/providers/sql/env.go

@@ -0,0 +1,49 @@
+package sql
+
+import (
+	"log"
+	"time"
+
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/google/uuid"
+)
+
+// AddEnv to save environment information in database
+func (p *provider) AddEnv(env models.Env) (models.Env, error) {
+	if env.ID == "" {
+		env.ID = uuid.New().String()
+	}
+
+	env.Key = env.ID
+	result := p.db.Create(&env)
+
+	if result.Error != nil {
+		log.Println("error adding config:", result.Error)
+		return env, result.Error
+	}
+	return env, nil
+}
+
+// UpdateEnv to update environment information in database
+func (p *provider) UpdateEnv(env models.Env) (models.Env, error) {
+	env.UpdatedAt = time.Now().Unix()
+	result := p.db.Save(&env)
+
+	if result.Error != nil {
+		log.Println("error updating config:", result.Error)
+		return env, result.Error
+	}
+	return env, nil
+}
+
+// GetEnv to get environment information from database
+func (p *provider) GetEnv() (models.Env, error) {
+	var env models.Env
+	result := p.db.First(&env)
+
+	if result.Error != nil {
+		return env, result.Error
+	}
+
+	return env, nil
+}

server/db/providers/sql/session.go

@@ -0,0 +1,38 @@
+package sql
+
+import (
+	"log"
+
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/google/uuid"
+	"gorm.io/gorm/clause"
+)
+
+// AddSession to save session information in database
+func (p *provider) AddSession(session models.Session) error {
+	if session.ID == "" {
+		session.ID = uuid.New().String()
+	}
+
+	session.Key = session.ID
+	res := p.db.Clauses(
+		clause.OnConflict{
+			DoNothing: true,
+		}).Create(&session)
+	if res.Error != nil {
+		log.Println(`error saving session`, res.Error)
+		return res.Error
+	}
+	return nil
+}
+
+// DeleteSession to delete session information from database
+func (p *provider) DeleteSession(userId string) error {
+	result := p.db.Where("user_id = ?", userId).Delete(&models.Session{})
+
+	if result.Error != nil {
+		log.Println(`error deleting session:`, result.Error)
+		return result.Error
+	}
+	return nil
+}

server/db/providers/sql/sql.go

@@ -0,0 +1,53 @@
+package sql
+
+import (
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/authorizerdev/authorizer/server/envstore"
+	"gorm.io/driver/mysql"
+	"gorm.io/driver/postgres"
+	"gorm.io/driver/sqlite"
+	"gorm.io/driver/sqlserver"
+	"gorm.io/gorm"
+	"gorm.io/gorm/schema"
+)
+
+type provider struct {
+	db *gorm.DB
+}
+
+// NewProvider returns a new SQL provider
+func NewProvider() (*provider, error) {
+	var sqlDB *gorm.DB
+	var err error
+
+	ormConfig := &gorm.Config{
+		NamingStrategy: schema.NamingStrategy{
+			TablePrefix: models.Prefix,
+		},
+	}
+
+	switch envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseType) {
+	case constants.DbTypePostgres:
+		sqlDB, err = gorm.Open(postgres.Open(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseURL)), ormConfig)
+		break
+	case constants.DbTypeSqlite:
+		sqlDB, err = gorm.Open(sqlite.Open(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseURL)), ormConfig)
+		break
+	case constants.DbTypeMysql:
+		sqlDB, err = gorm.Open(mysql.Open(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseURL)), ormConfig)
+		break
+	case constants.DbTypeSqlserver:
+		sqlDB, err = gorm.Open(sqlserver.Open(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyDatabaseURL)), ormConfig)
+		break
+	}
+
+	if err != nil {
+		return nil, err
+	}
+
+	sqlDB.AutoMigrate(&models.User{}, &models.VerificationRequest{}, &models.Session{}, &models.Env{})
+	return &provider{
+		db: sqlDB,
+	}, nil
+}

server/db/providers/sql/user.go

@@ -0,0 +1,101 @@
+package sql
+
+import (
+	"log"
+	"strings"
+	"time"
+
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/authorizerdev/authorizer/server/envstore"
+	"github.com/google/uuid"
+	"gorm.io/gorm/clause"
+)
+
+// AddUser to save user information in database
+func (p *provider) AddUser(user models.User) (models.User, error) {
+	if user.ID == "" {
+		user.ID = uuid.New().String()
+	}
+
+	if user.Roles == "" {
+		user.Roles = strings.Join(envstore.EnvInMemoryStoreObj.GetSliceStoreEnvVariable(constants.EnvKeyDefaultRoles), ",")
+	}
+
+	user.Key = user.ID
+	result := p.db.Clauses(
+		clause.OnConflict{
+			UpdateAll: true,
+			Columns:   []clause.Column{{Name: "email"}},
+		}).Create(&user)
+
+	if result.Error != nil {
+		log.Println("error adding user:", result.Error)
+		return user, result.Error
+	}
+
+	return user, nil
+}
+
+// UpdateUser to update user information in database
+func (p *provider) UpdateUser(user models.User) (models.User, error) {
+	user.UpdatedAt = time.Now().Unix()
+
+	result := p.db.Save(&user)
+
+	if result.Error != nil {
+		log.Println("error updating user:", result.Error)
+		return user, result.Error
+	}
+
+	return user, nil
+}
+
+// DeleteUser to delete user information from database
+func (p *provider) DeleteUser(user models.User) error {
+	result := p.db.Delete(&user)
+
+	if result.Error != nil {
+		log.Println(`error deleting user:`, result.Error)
+		return result.Error
+	}
+
+	return nil
+}
+
+// ListUsers to get list of users from database
+func (p *provider) ListUsers() ([]models.User, error) {
+	var users []models.User
+	result := p.db.Find(&users)
+	if result.Error != nil {
+		log.Println("error getting users:", result.Error)
+		return users, result.Error
+	}
+
+	return users, nil
+}
+
+// GetUserByEmail to get user information from database using email address
+func (p *provider) GetUserByEmail(email string) (models.User, error) {
+	var user models.User
+	result := p.db.Where("email = ?", email).First(&user)
+
+	if result.Error != nil {
+		return user, result.Error
+	}
+
+	return user, nil
+}
+
+// GetUserByID to get user information from database using user ID
+func (p *provider) GetUserByID(id string) (models.User, error) {
+	var user models.User
+
+	result := p.db.Where("id = ?", id).First(&user)
+
+	if result.Error != nil {
+		return user, result.Error
+	}
+
+	return user, nil
+}

server/db/providers/sql/verification_requests.go

@@ -0,0 +1,80 @@
+package sql
+
+import (
+	"log"
+
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/google/uuid"
+	"gorm.io/gorm/clause"
+)
+
+// AddVerification to save verification request in database
+func (p *provider) AddVerificationRequest(verificationRequest models.VerificationRequest) (models.VerificationRequest, error) {
+	if verificationRequest.ID == "" {
+		verificationRequest.ID = uuid.New().String()
+	}
+
+	verificationRequest.Key = verificationRequest.ID
+	result := p.db.Clauses(clause.OnConflict{
+		Columns:   []clause.Column{{Name: "email"}, {Name: "identifier"}},
+		DoUpdates: clause.AssignmentColumns([]string{"token", "expires_at"}),
+	}).Create(&verificationRequest)
+
+	if result.Error != nil {
+		log.Println(`error saving verification request record`, result.Error)
+		return verificationRequest, result.Error
+	}
+
+	return verificationRequest, nil
+}
+
+// GetVerificationRequestByToken to get verification request from database using token
+func (p *provider) GetVerificationRequestByToken(token string) (models.VerificationRequest, error) {
+	var verificationRequest models.VerificationRequest
+	result := p.db.Where("token = ?", token).First(&verificationRequest)
+
+	if result.Error != nil {
+		log.Println(`error getting verification request:`, result.Error)
+		return verificationRequest, result.Error
+	}
+
+	return verificationRequest, nil
+}
+
+// GetVerificationRequestByEmail to get verification request by email from database
+func (p *provider) GetVerificationRequestByEmail(email string, identifier string) (models.VerificationRequest, error) {
+	var verificationRequest models.VerificationRequest
+
+	result := p.db.Where("email = ? AND identifier = ?", email, identifier).First(&verificationRequest)
+
+	if result.Error != nil {
+		log.Println(`error getting verification token:`, result.Error)
+		return verificationRequest, result.Error
+	}
+
+	return verificationRequest, nil
+}
+
+// ListVerificationRequests to get list of verification requests from database
+func (p *provider) ListVerificationRequests() ([]models.VerificationRequest, error) {
+	var verificationRequests []models.VerificationRequest
+
+	result := p.db.Find(&verificationRequests)
+	if result.Error != nil {
+		log.Println("error getting verification requests:", result.Error)
+		return verificationRequests, result.Error
+	}
+	return verificationRequests, nil
+}
+
+// DeleteVerificationRequest to delete verification request from database
+func (p *provider) DeleteVerificationRequest(verificationRequest models.VerificationRequest) error {
+	result := p.db.Delete(&verificationRequest)
+
+	if result.Error != nil {
+		log.Println(`error deleting verification request:`, result.Error)
+		return result.Error
+	}
+
+	return nil
+}

server/db/session.go

@@ -1,68 +0,0 @@
-package db
-
-import (
-	"log"
-	"time"
-
-	"github.com/google/uuid"
-	"go.mongodb.org/mongo-driver/mongo/options"
-	"gorm.io/gorm/clause"
-)
-
-type Session struct {
-	Key       string `json:"_key,omitempty" bson:"_key,omitempty"` // for arangodb
-	ObjectID  string `json:"_id,omitempty" bson:"_id"`             // for arangodb & mongodb
-	ID        string `gorm:"primaryKey;type:char(36)" json:"id" bson:"id"`
-	UserID    string `gorm:"type:char(36)" json:"user_id" bson:"user_id"`
-	User      User   `json:"-" bson:"-"`
-	UserAgent string `json:"user_agent" bson:"user_agent"`
-	IP        string `json:"ip" bson:"ip"`
-	CreatedAt int64  `gorm:"autoCreateTime" json:"created_at" bson:"created_at"`
-	UpdatedAt int64  `gorm:"autoUpdateTime" json:"updated_at" bson:"updated_at"`
-}
-
-// AddSession function to save user sessiosn
-func (mgr *manager) AddSession(session Session) error {
-	if session.ID == "" {
-		session.ID = uuid.New().String()
-	}
-
-	if IsORMSupported {
-		session.Key = session.ID
-		session.ObjectID = session.ID
-		res := mgr.sqlDB.Clauses(
-			clause.OnConflict{
-				DoNothing: true,
-			}).Create(&session)
-		if res.Error != nil {
-			log.Println(`error saving session`, res.Error)
-			return res.Error
-		}
-	}
-
-	if IsArangoDB {
-		session.CreatedAt = time.Now().Unix()
-		session.UpdatedAt = time.Now().Unix()
-		sessionCollection, _ := mgr.arangodb.Collection(nil, Collections.Session)
-		_, err := sessionCollection.CreateDocument(nil, session)
-		if err != nil {
-			log.Println(`error saving session`, err)
-			return err
-		}
-	}
-
-	if IsMongoDB {
-		session.Key = session.ID
-		session.ObjectID = session.ID
-		session.CreatedAt = time.Now().Unix()
-		session.UpdatedAt = time.Now().Unix()
-		sessionCollection := mgr.mongodb.Collection(Collections.Session, options.Collection())
-		_, err := sessionCollection.InsertOne(nil, session)
-		if err != nil {
-			log.Println(`error saving session`, err)
-			return err
-		}
-	}
-
-	return nil
-}

server/db/user.go

@@ -1,304 +0,0 @@
-package db
-
-import (
-	"fmt"
-	"log"
-	"time"
-
-	"github.com/arangodb/go-driver"
-	arangoDriver "github.com/arangodb/go-driver"
-	"github.com/google/uuid"
-	"go.mongodb.org/mongo-driver/bson"
-	"go.mongodb.org/mongo-driver/mongo/options"
-	"gorm.io/gorm/clause"
-)
-
-type User struct {
-	Key             string `json:"_key,omitempty" bson:"_key"` // for arangodb
-	ObjectID        string `json:"_id,omitempty" bson:"_id"`   // for arangodb & mongodb
-	ID              string `gorm:"primaryKey;type:char(36)" json:"id" bson:"id"`
-	FirstName       string `json:"first_name" bson:"first_name"`
-	LastName        string `json:"last_name" bson:"last_name"`
-	Email           string `gorm:"unique" json:"email" bson:"email"`
-	Password        string `gorm:"type:text" json:"password" bson:"password"`
-	SignupMethod    string `json:"signup_method" bson:"signup_method"`
-	EmailVerifiedAt int64  `json:"email_verified_at" bson:"email_verified_at"`
-	CreatedAt       int64  `gorm:"autoCreateTime" json:"created_at" bson:"created_at"`
-	UpdatedAt       int64  `gorm:"autoUpdateTime" json:"updated_at" bson:"updated_at"`
-	Image           string `gorm:"type:text" json:"image" bson:"image"`
-	Roles           string `json:"roles" bson:"roles"`
-}
-
-// AddUser function to add user even with email conflict
-func (mgr *manager) AddUser(user User) (User, error) {
-	if user.ID == "" {
-		user.ID = uuid.New().String()
-	}
-
-	if IsORMSupported {
-		// copy id as value for fields required for mongodb & arangodb
-		user.Key = user.ID
-		user.ObjectID = user.ID
-		result := mgr.sqlDB.Clauses(
-			clause.OnConflict{
-				UpdateAll: true,
-				Columns:   []clause.Column{{Name: "email"}},
-			}).Create(&user)
-
-		if result.Error != nil {
-			log.Println("error adding user:", result.Error)
-			return user, result.Error
-		}
-	}
-
-	if IsArangoDB {
-		user.CreatedAt = time.Now().Unix()
-		user.UpdatedAt = time.Now().Unix()
-		userCollection, _ := mgr.arangodb.Collection(nil, Collections.User)
-		meta, err := userCollection.CreateDocument(arangoDriver.WithOverwrite(nil), user)
-		if err != nil {
-			log.Println("error adding user:", err)
-			return user, err
-		}
-		user.Key = meta.Key
-		user.ObjectID = meta.ID.String()
-	}
-
-	if IsMongoDB {
-		user.CreatedAt = time.Now().Unix()
-		user.UpdatedAt = time.Now().Unix()
-		user.Key = user.ID
-		user.ObjectID = user.ID
-		userCollection := mgr.mongodb.Collection(Collections.User, options.Collection())
-		_, err := userCollection.InsertOne(nil, user)
-		if err != nil {
-			log.Println("error adding user:", err)
-			return user, err
-		}
-	}
-
-	return user, nil
-}
-
-// UpdateUser function to update user with ID conflict
-func (mgr *manager) UpdateUser(user User) (User, error) {
-	user.UpdatedAt = time.Now().Unix()
-
-	if IsORMSupported {
-		result := mgr.sqlDB.Save(&user)
-
-		if result.Error != nil {
-			log.Println("error updating user:", result.Error)
-			return user, result.Error
-		}
-	}
-
-	if IsArangoDB {
-		collection, _ := mgr.arangodb.Collection(nil, Collections.User)
-		meta, err := collection.UpdateDocument(nil, user.Key, user)
-		if err != nil {
-			log.Println("error updating user:", err)
-			return user, err
-		}
-
-		user.Key = meta.Key
-		user.ObjectID = meta.ID.String()
-	}
-
-	if IsMongoDB {
-		userCollection := mgr.mongodb.Collection(Collections.User, options.Collection())
-		_, err := userCollection.UpdateOne(nil, bson.M{"id": bson.M{"$eq": user.ID}}, bson.M{"$set": user}, options.MergeUpdateOptions())
-		if err != nil {
-			log.Println("error updating user:", err)
-			return user, err
-		}
-	}
-
-	return user, nil
-}
-
-// GetUsers function to get all users
-func (mgr *manager) GetUsers() ([]User, error) {
-	var users []User
-
-	if IsORMSupported {
-		result := mgr.sqlDB.Find(&users)
-		if result.Error != nil {
-			log.Println("error getting users:", result.Error)
-			return users, result.Error
-		}
-	}
-
-	if IsArangoDB {
-		query := fmt.Sprintf("FOR d in %s RETURN d", Collections.User)
-
-		cursor, err := mgr.arangodb.Query(nil, query, nil)
-		if err != nil {
-			return users, err
-		}
-		defer cursor.Close()
-
-		for {
-			var user User
-			meta, err := cursor.ReadDocument(nil, &user)
-
-			if driver.IsNoMoreDocuments(err) {
-				break
-			} else if err != nil {
-				return users, err
-			}
-
-			if meta.Key != "" {
-				users = append(users, user)
-			}
-		}
-	}
-
-	if IsMongoDB {
-		userCollection := mgr.mongodb.Collection(Collections.User, options.Collection())
-		cursor, err := userCollection.Find(nil, bson.M{}, options.Find())
-		if err != nil {
-			log.Println("error getting users:", err)
-			return users, err
-		}
-		defer cursor.Close(nil)
-
-		for cursor.Next(nil) {
-			var user User
-			err := cursor.Decode(&user)
-			if err != nil {
-				return users, err
-			}
-			users = append(users, user)
-		}
-	}
-
-	return users, nil
-}
-
-func (mgr *manager) GetUserByEmail(email string) (User, error) {
-	var user User
-
-	if IsORMSupported {
-		result := mgr.sqlDB.Where("email = ?", email).First(&user)
-
-		if result.Error != nil {
-			return user, result.Error
-		}
-	}
-
-	if IsArangoDB {
-		query := fmt.Sprintf("FOR d in %s FILTER d.email == @email RETURN d", Collections.User)
-		bindVars := map[string]interface{}{
-			"email": email,
-		}
-
-		cursor, err := mgr.arangodb.Query(nil, query, bindVars)
-		if err != nil {
-			return user, err
-		}
-		defer cursor.Close()
-
-		for {
-			if !cursor.HasMore() {
-				if user.Key == "" {
-					return user, fmt.Errorf("user not found")
-				}
-				break
-			}
-			_, err := cursor.ReadDocument(nil, &user)
-			if err != nil {
-				return user, err
-			}
-		}
-	}
-
-	if IsMongoDB {
-		userCollection := mgr.mongodb.Collection(Collections.User, options.Collection())
-		err := userCollection.FindOne(nil, bson.M{"email": email}).Decode(&user)
-		if err != nil {
-			return user, err
-		}
-	}
-
-	return user, nil
-}
-
-func (mgr *manager) GetUserByID(id string) (User, error) {
-	var user User
-
-	if IsORMSupported {
-		result := mgr.sqlDB.Where("id = ?", id).First(&user)
-
-		if result.Error != nil {
-			return user, result.Error
-		}
-	}
-
-	if IsArangoDB {
-		query := fmt.Sprintf("FOR d in %s FILTER d.id == @id LIMIT 1 RETURN d", Collections.User)
-		bindVars := map[string]interface{}{
-			"id": id,
-		}
-
-		cursor, err := mgr.arangodb.Query(nil, query, bindVars)
-		if err != nil {
-			return user, err
-		}
-		defer cursor.Close()
-
-		for {
-			if !cursor.HasMore() {
-				if user.Key == "" {
-					return user, fmt.Errorf("user not found")
-				}
-				break
-			}
-			_, err := cursor.ReadDocument(nil, &user)
-			if err != nil {
-				return user, err
-			}
-		}
-	}
-
-	if IsMongoDB {
-		userCollection := mgr.mongodb.Collection(Collections.User, options.Collection())
-		err := userCollection.FindOne(nil, bson.M{"id": id}).Decode(&user)
-		if err != nil {
-			return user, err
-		}
-	}
-
-	return user, nil
-}
-
-func (mgr *manager) DeleteUser(user User) error {
-	if IsORMSupported {
-		result := mgr.sqlDB.Delete(&user)
-
-		if result.Error != nil {
-			log.Println(`error deleting user:`, result.Error)
-			return result.Error
-		}
-	}
-
-	if IsArangoDB {
-		collection, _ := mgr.arangodb.Collection(nil, Collections.User)
-		_, err := collection.RemoveDocument(nil, user.Key)
-		if err != nil {
-			log.Println(`error deleting user:`, err)
-			return err
-		}
-	}
-
-	if IsMongoDB {
-		userCollection := mgr.mongodb.Collection(Collections.User, options.Collection())
-		_, err := userCollection.DeleteOne(nil, bson.M{"id": user.ID}, options.Delete())
-		if err != nil {
-			log.Println("error deleting user:", err)
-			return err
-		}
-	}
-
-	return nil
-}

server/db/verificationRequests.go

@@ -1,262 +0,0 @@
-package db
-
-import (
-	"fmt"
-	"log"
-	"time"
-
-	"github.com/arangodb/go-driver"
-	"github.com/google/uuid"
-	"go.mongodb.org/mongo-driver/bson"
-	"go.mongodb.org/mongo-driver/mongo/options"
-	"gorm.io/gorm/clause"
-)
-
-type VerificationRequest struct {
-	Key        string `json:"_key,omitempty" bson:"_key"` // for arangodb
-	ObjectID   string `json:"_id,omitempty" bson:"_id"`   // for arangodb & mongodb
-	ID         string `gorm:"primaryKey;type:char(36)" json:"id" bson:"id"`
-	Token      string `gorm:"type:text" json:"token" bson:"token"`
-	Identifier string `gorm:"uniqueIndex:idx_email_identifier" json:"identifier" bson:"identifier"`
-	ExpiresAt  int64  `json:"expires_at" bson:"expires_at"`
-	CreatedAt  int64  `gorm:"autoCreateTime" json:"created_at" bson:"created_at"`
-	UpdatedAt  int64  `gorm:"autoUpdateTime" json:"updated_at" bson:"updated_at"`
-	Email      string `gorm:"uniqueIndex:idx_email_identifier" json:"email" bson:"email"`
-}
-
-// AddVerification function to add verification record
-func (mgr *manager) AddVerification(verification VerificationRequest) (VerificationRequest, error) {
-	if verification.ID == "" {
-		verification.ID = uuid.New().String()
-	}
-	if IsORMSupported {
-		// copy id as value for fields required for mongodb & arangodb
-		verification.Key = verification.ID
-		verification.ObjectID = verification.ID
-		result := mgr.sqlDB.Clauses(clause.OnConflict{
-			Columns:   []clause.Column{{Name: "email"}, {Name: "identifier"}},
-			DoUpdates: clause.AssignmentColumns([]string{"token", "expires_at"}),
-		}).Create(&verification)
-
-		if result.Error != nil {
-			log.Println(`error saving verification record`, result.Error)
-			return verification, result.Error
-		}
-	}
-
-	if IsArangoDB {
-		verification.CreatedAt = time.Now().Unix()
-		verification.UpdatedAt = time.Now().Unix()
-		verificationRequestCollection, _ := mgr.arangodb.Collection(nil, Collections.VerificationRequest)
-		meta, err := verificationRequestCollection.CreateDocument(nil, verification)
-		if err != nil {
-			log.Println("error saving verification record:", err)
-			return verification, err
-		}
-		verification.Key = meta.Key
-		verification.ObjectID = meta.ID.String()
-	}
-
-	if IsMongoDB {
-		verification.CreatedAt = time.Now().Unix()
-		verification.UpdatedAt = time.Now().Unix()
-		verification.Key = verification.ID
-		verification.ObjectID = verification.ID
-		verificationRequestCollection := mgr.mongodb.Collection(Collections.VerificationRequest, options.Collection())
-		_, err := verificationRequestCollection.InsertOne(nil, verification)
-		if err != nil {
-			log.Println("error saving verification record:", err)
-			return verification, err
-		}
-	}
-
-	return verification, nil
-}
-
-// GetVerificationRequests function to get all verification requests
-func (mgr *manager) GetVerificationRequests() ([]VerificationRequest, error) {
-	var verificationRequests []VerificationRequest
-
-	if IsORMSupported {
-		result := mgr.sqlDB.Find(&verificationRequests)
-		if result.Error != nil {
-			log.Println("error getting verification requests:", result.Error)
-			return verificationRequests, result.Error
-		}
-	}
-
-	if IsArangoDB {
-		query := fmt.Sprintf("FOR d in %s RETURN d", Collections.VerificationRequest)
-
-		cursor, err := mgr.arangodb.Query(nil, query, nil)
-		if err != nil {
-			return verificationRequests, err
-		}
-		defer cursor.Close()
-
-		for {
-			var verificationRequest VerificationRequest
-			meta, err := cursor.ReadDocument(nil, &verificationRequest)
-
-			if driver.IsNoMoreDocuments(err) {
-				break
-			} else if err != nil {
-				return verificationRequests, err
-			}
-
-			if meta.Key != "" {
-				verificationRequests = append(verificationRequests, verificationRequest)
-			}
-
-		}
-	}
-
-	if IsMongoDB {
-		verificationRequestCollection := mgr.mongodb.Collection(Collections.VerificationRequest, options.Collection())
-		cursor, err := verificationRequestCollection.Find(nil, bson.M{}, options.Find())
-		if err != nil {
-			log.Println("error getting verification requests:", err)
-			return verificationRequests, err
-		}
-		defer cursor.Close(nil)
-
-		for cursor.Next(nil) {
-			var verificationRequest VerificationRequest
-			err := cursor.Decode(&verificationRequest)
-			if err != nil {
-				return verificationRequests, err
-			}
-			verificationRequests = append(verificationRequests, verificationRequest)
-		}
-	}
-
-	return verificationRequests, nil
-}
-
-func (mgr *manager) GetVerificationByToken(token string) (VerificationRequest, error) {
-	var verification VerificationRequest
-
-	if IsORMSupported {
-		result := mgr.sqlDB.Where("token = ?", token).First(&verification)
-
-		if result.Error != nil {
-			log.Println(`error getting verification request:`, result.Error)
-			return verification, result.Error
-		}
-	}
-
-	if IsArangoDB {
-		query := fmt.Sprintf("FOR d in %s FILTER d.token == @token LIMIT 1 RETURN d", Collections.VerificationRequest)
-		bindVars := map[string]interface{}{
-			"token": token,
-		}
-
-		cursor, err := mgr.arangodb.Query(nil, query, bindVars)
-		if err != nil {
-			return verification, err
-		}
-		defer cursor.Close()
-
-		for {
-			if !cursor.HasMore() {
-				if verification.Key == "" {
-					return verification, fmt.Errorf("verification request not found")
-				}
-				break
-			}
-			_, err := cursor.ReadDocument(nil, &verification)
-			if err != nil {
-				return verification, err
-			}
-		}
-	}
-
-	if IsMongoDB {
-		verificationRequestCollection := mgr.mongodb.Collection(Collections.VerificationRequest, options.Collection())
-		err := verificationRequestCollection.FindOne(nil, bson.M{"token": token}).Decode(&verification)
-		if err != nil {
-			return verification, err
-		}
-	}
-
-	return verification, nil
-}
-
-func (mgr *manager) GetVerificationByEmail(email string) (VerificationRequest, error) {
-	var verification VerificationRequest
-	if IsORMSupported {
-		result := mgr.sqlDB.Where("email = ?", email).First(&verification)
-
-		if result.Error != nil {
-			log.Println(`error getting verification token:`, result.Error)
-			return verification, result.Error
-		}
-	}
-
-	if IsArangoDB {
-		query := fmt.Sprintf("FOR d in %s FILTER d.email == @email LIMIT 1 RETURN d", Collections.VerificationRequest)
-		bindVars := map[string]interface{}{
-			"email": email,
-		}
-
-		cursor, err := mgr.arangodb.Query(nil, query, bindVars)
-		if err != nil {
-			return verification, err
-		}
-		defer cursor.Close()
-
-		for {
-			if !cursor.HasMore() {
-				if verification.Key == "" {
-					return verification, fmt.Errorf("verification request not found")
-				}
-				break
-			}
-			_, err := cursor.ReadDocument(nil, &verification)
-			if err != nil {
-				return verification, err
-			}
-		}
-	}
-
-	if IsMongoDB {
-		verificationRequestCollection := mgr.mongodb.Collection(Collections.VerificationRequest, options.Collection())
-		err := verificationRequestCollection.FindOne(nil, bson.M{"email": email}).Decode(&verification)
-		if err != nil {
-			return verification, err
-		}
-	}
-
-	return verification, nil
-}
-
-func (mgr *manager) DeleteVerificationRequest(verificationRequest VerificationRequest) error {
-	if IsORMSupported {
-		result := mgr.sqlDB.Delete(&verificationRequest)
-
-		if result.Error != nil {
-			log.Println(`error deleting verification request:`, result.Error)
-			return result.Error
-		}
-	}
-
-	if IsArangoDB {
-		collection, _ := mgr.arangodb.Collection(nil, Collections.VerificationRequest)
-		_, err := collection.RemoveDocument(nil, verificationRequest.Key)
-		if err != nil {
-			log.Println(`error deleting verification request:`, err)
-			return err
-		}
-	}
-
-	if IsMongoDB {
-		verificationRequestCollection := mgr.mongodb.Collection(Collections.VerificationRequest, options.Collection())
-		_, err := verificationRequestCollection.DeleteOne(nil, bson.M{"id": verificationRequest.ID}, options.Delete())
-		if err != nil {
-			log.Println("error deleting verification request::", err)
-			return err
-		}
-	}
-
-	return nil
-}

server/email/email.go

@@ -2,89 +2,48 @@ package email
 
 import (
 	"bytes"
-	"fmt"
+	"crypto/tls"
+	"encoding/json"
 	"log"
-	"mime/quotedprintable"
-	"net/smtp"
-	"strings"
+	"strconv"
+	"text/template"
 
 	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/envstore"
+	gomail "gopkg.in/mail.v2"
 )
 
-/**
-	Using: https://github.com/tangingw/go_smtp/blob/master/send_mail.go
-	For gmail add instruction to enable less security
-	// https://myaccount.google.com/u/0/lesssecureapps
-	// https://www.google.com/settings/security/lesssecureapps
-	// https://stackoverflow.com/questions/19877246/nodemailer-with-gmail-and-nodejs
-**/
-
-// TODO -> try using gomail.v2
-
-type Sender struct {
-	User     string
-	Password string
-}
-
-func NewSender() Sender {
-	return Sender{User: constants.SENDER_EMAIL, Password: constants.SENDER_PASSWORD}
-}
-
-func (sender Sender) SendMail(Dest []string, Subject, bodyMessage string) error {
-	msg := "From: " + sender.User + "\n" +
-		"To: " + strings.Join(Dest, ",") + "\n" +
-		"Subject: " + Subject + "\n" + bodyMessage
-
-	err := smtp.SendMail(constants.SMTP_HOST+":"+constants.SMTP_PORT,
-		smtp.PlainAuth("", sender.User, sender.Password, constants.SMTP_HOST),
-		sender.User, Dest, []byte(msg))
+// addEmailTemplate is used to add html template in email body
+func addEmailTemplate(a string, b map[string]interface{}, templateName string) string {
+	tmpl, err := template.New(templateName).Parse(a)
 	if err != nil {
+		output, _ := json.Marshal(b)
+		return string(output)
+	}
+	buf := &bytes.Buffer{}
+	err = tmpl.Execute(buf, b)
+	if err != nil {
+		panic(err)
+	}
+	s := buf.String()
+	return s
+}
 
+// SendMail function to send mail
+func SendMail(to []string, Subject, bodyMessage string) error {
+	m := gomail.NewMessage()
+	m.SetHeader("From", envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeySenderEmail))
+	m.SetHeader("To", to...)
+	m.SetHeader("Subject", Subject)
+	m.SetBody("text/html", bodyMessage)
+	port, _ := strconv.Atoi(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeySmtpPort))
+	d := gomail.NewDialer(envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeySmtpHost), port, envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeySmtpUsername), envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeySmtpPassword))
+	if envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyEnv) == "development" {
+		d.TLSConfig = &tls.Config{InsecureSkipVerify: true}
+	}
+	if err := d.DialAndSend(m); err != nil {
 		log.Printf("smtp error: %s", err)
 		return err
 	}
-
 	return nil
 }
-
-func (sender Sender) WriteEmail(dest []string, contentType, subject, bodyMessage string) string {
-	header := make(map[string]string)
-	header["From"] = sender.User
-
-	receipient := ""
-
-	for _, user := range dest {
-		receipient = receipient + user
-	}
-
-	header["To"] = receipient
-	header["Subject"] = subject
-	header["MIME-Version"] = "1.0"
-	header["Content-Type"] = fmt.Sprintf("%s; charset=\"utf-8\"", contentType)
-	header["Content-Transfer-Encoding"] = "quoted-printable"
-	header["Content-Disposition"] = "inline"
-
-	message := ""
-
-	for key, value := range header {
-		message += fmt.Sprintf("%s: %s\r\n", key, value)
-	}
-
-	var encodedMessage bytes.Buffer
-
-	finalMessage := quotedprintable.NewWriter(&encodedMessage)
-	finalMessage.Write([]byte(bodyMessage))
-	finalMessage.Close()
-
-	message += "\r\n" + encodedMessage.String()
-
-	return message
-}
-
-func (sender *Sender) WriteHTMLEmail(dest []string, subject, bodyMessage string) string {
-	return sender.WriteEmail(dest, "text/html", subject, bodyMessage)
-}
-
-func (sender *Sender) WritePlainEmail(dest []string, subject, bodyMessage string) string {
-	return sender.WriteEmail(dest, "text/plain", subject, bodyMessage)
-}

server/email/forgot_password_email.go

@@ -0,0 +1,112 @@
+package email
+
+import (
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/envstore"
+)
+
+// SendForgotPasswordMail to send forgot password email
+func SendForgotPasswordMail(toEmail, token, host string) error {
+	resetPasswordUrl := envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyResetPasswordURL)
+	if resetPasswordUrl == "" {
+		envstore.EnvInMemoryStoreObj.UpdateEnvVariable(constants.StringStoreIdentifier, constants.EnvKeyResetPasswordURL, envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyAuthorizerURL)+"/app/reset-password")
+	}
+
+	// The receiver needs to be in slice as the receive supports multiple receiver
+	Receiver := []string{toEmail}
+
+	Subject := "Reset Password"
+
+	message := `
+	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+    <html xmlns="http://www.w3.org/1999/xhtml" xmlns:o="urn:schemas-microsoft-com:office:office">
+        <head>
+            <meta charset="UTF-8">
+            <meta content="width=device-width, initial-scale=1" name="viewport">
+            <meta name="x-apple-disable-message-reformatting">
+            <meta http-equiv="X-UA-Compatible" content="IE=edge">
+            <meta content="telephone=no" name="format-detection">
+            <title></title>
+            <!--[if (mso 16)]>
+            <style type="text/css">
+            a {}
+            </style>
+            <![endif]-->
+            <!--[if gte mso 9]><style>sup { font-size: 100%% !important; }</style><![endif]-->
+            <!--[if gte mso 9]>
+        <xml>
+            <o:OfficeDocumentSettings>
+            <o:AllowPNG></o:AllowPNG>
+            <o:PixelsPerInch>96</o:PixelsPerInch>
+            </o:OfficeDocumentSettings>
+        </xml>
+        <![endif]-->
+        </head>
+        <body style="font-family: sans-serif;">
+            <div class="es-wrapper-color">
+                <!--[if gte mso 9]>
+                    <v:background xmlns:v="urn:schemas-microsoft-com:vml" fill="t">
+                        <v:fill type="tile" color="#ffffff"></v:fill>
+                    </v:background>
+                <![endif]-->
+                <table class="es-wrapper" width="100%%" cellspacing="0" cellpadding="0">
+                    <tbody>
+                        <tr>
+                            <td class="esd-email-paddings" valign="top">
+                                <table class="es-content esd-footer-popover" cellspacing="0" cellpadding="0" align="center">
+                                    <tbody>
+                                        <tr>
+                                            <td class="esd-stripe" align="center">
+                                                <table class="es-content-body" style="border-left:1px solid transparent;border-right:1px solid transparent;border-top:1px solid transparent;border-bottom:1px solid transparent;padding:20px 0px;" width="600" cellspacing="0" cellpadding="0" bgcolor="#ffffff" align="center">
+                                                    <tbody>
+                                                        <tr>
+                                                            <td class="esd-structure es-p20t es-p40b es-p40r es-p40l" esd-custom-block-id="8537" align="left">
+                                                                <table width="100%%" cellspacing="0" cellpadding="0">
+                                                                    <tbody>
+                                                                        <tr>
+                                                                            <td class="esd-container-frame" width="518" align="left">
+                                                                                <table width="100%%" cellspacing="0" cellpadding="0">
+                                                                                    <tbody>
+                                                                                        <tr>
+                                                                                            <td class="esd-block-image es-m-txt-c es-p5b" style="font-size:0;padding:10px" align="center"><a target="_blank" clicktracking="off"><img src="{{.org_logo}}" alt="icon" style="display: block;" title="icon" width="30"></a></td>
+                                                                                        </tr>
+                                                                                        
+                                                                                        <tr style="background: rgb(249,250,251);padding: 10px;margin-bottom:10px;border-radius:5px;">
+                                                                                            <td class="esd-block-text es-m-txt-c es-p15t" align="center" style="padding:10px;padding-bottom:30px;">
+                                                                                                <p>Hey there 👋</p>
+                                                                                                <p>We have received a request to reset password for email: <b>{{.org_name}}</b>. If this is correct, please reset the password clicking the button below.</p> <br/>
+                                                                                                <a clicktracking="off" href="{{.verification_url}}" class="es-button" target="_blank" style="text-decoration: none;padding:10px 15px;background-color: rgba(59,130,246,1);color: #fff;font-size: 1em;border-radius:5px;">Reset Password</a>
+                                                                                            </td>
+                                                                                        </tr>
+                                                                                    </tbody>
+                                                                                </table>
+                                                                            </td>
+                                                                        </tr>
+                                                                    </tbody>
+                                                                </table>
+                                                            </td>
+                                                        </tr>
+                                                    </tbody>
+                                                </table>
+                                            </td>
+                                        </tr>
+                                    </tbody>
+                                </table>
+                            </td>
+                        </tr>
+                    </tbody>
+                </table>
+            </div>
+            <div style="position: absolute; left: -9999px; top: -9999px; margin: 0px;"></div>
+        </body>
+    </html>
+	`
+
+	data := make(map[string]interface{}, 3)
+	data["org_logo"] = envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyOrganizationLogo)
+	data["org_name"] = envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyOrganizationName)
+	data["verification_url"] = resetPasswordUrl + "?token=" + token
+	message = addEmailTemplate(message, data, "reset_password_email.tmpl")
+
+	return SendMail(Receiver, Subject, message)
+}

server/email/verification_email.go

@@ -0,0 +1,107 @@
+package email
+
+import (
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/envstore"
+)
+
+// SendVerificationMail to send verification email
+func SendVerificationMail(toEmail, token string) error {
+	// The receiver needs to be in slice as the receive supports multiple receiver
+	Receiver := []string{toEmail}
+
+	Subject := "Please verify your email"
+	message := `
+	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
+    <html xmlns="http://www.w3.org/1999/xhtml" xmlns:o="urn:schemas-microsoft-com:office:office">
+        <head>
+            <meta charset="UTF-8">
+            <meta content="width=device-width, initial-scale=1" name="viewport">
+            <meta name="x-apple-disable-message-reformatting">
+            <meta http-equiv="X-UA-Compatible" content="IE=edge">
+            <meta content="telephone=no" name="format-detection">
+            <title></title>
+            <!--[if (mso 16)]>
+            <style type="text/css">
+            a {}
+            </style>
+            <![endif]-->
+            <!--[if gte mso 9]><style>sup { font-size: 100%% !important; }</style><![endif]-->
+            <!--[if gte mso 9]>
+        <xml>
+            <o:OfficeDocumentSettings>
+            <o:AllowPNG></o:AllowPNG>
+            <o:PixelsPerInch>96</o:PixelsPerInch>
+            </o:OfficeDocumentSettings>
+        </xml>
+        <![endif]-->
+        </head>
+        <body style="font-family: sans-serif;">
+            <div class="es-wrapper-color">
+                <!--[if gte mso 9]>
+                    <v:background xmlns:v="urn:schemas-microsoft-com:vml" fill="t">
+                        <v:fill type="tile" color="#ffffff"></v:fill>
+                    </v:background>
+                <![endif]-->
+                <table class="es-wrapper" width="100%%" cellspacing="0" cellpadding="0">
+                    <tbody>
+                        <tr>
+                            <td class="esd-email-paddings" valign="top">
+                                <table class="es-content esd-footer-popover" cellspacing="0" cellpadding="0" align="center">
+                                    <tbody>
+                                        <tr>
+                                            <td class="esd-stripe" align="center">
+                                                <table class="es-content-body" style="border-left:1px solid transparent;border-right:1px solid transparent;border-top:1px solid transparent;border-bottom:1px solid transparent;padding:20px 0px;" width="600" cellspacing="0" cellpadding="0" bgcolor="#ffffff" align="center">
+                                                    <tbody>
+                                                        <tr>
+                                                            <td class="esd-structure es-p20t es-p40b es-p40r es-p40l" esd-custom-block-id="8537" align="left">
+                                                                <table width="100%%" cellspacing="0" cellpadding="0">
+                                                                    <tbody>
+                                                                        <tr>
+                                                                            <td class="esd-container-frame" width="518" align="left">
+                                                                                <table width="100%%" cellspacing="0" cellpadding="0">
+                                                                                    <tbody>
+                                                                                        <tr>
+                                                                                            <td class="esd-block-image es-m-txt-c es-p5b" style="font-size:0;padding:10px" align="center"><a target="_blank" clicktracking="off"><img src="{{.org_logo}}" alt="icon" style="display: block;" title="icon" width="30"></a></td>
+                                                                                        </tr>
+                                                                                        
+                                                                                        <tr style="background: rgb(249,250,251);padding: 10px;margin-bottom:10px;border-radius:5px;">
+                                                                                            <td class="esd-block-text es-m-txt-c es-p15t" align="center" style="padding:10px;padding-bottom:30px;">
+                                                                                                <p>Hey there 👋</p>
+                                                                                                <p>We have received request to verify email for <b>{{.org_name}}</b>. If this is correct, please confirm your email address by clicking the button below.</p> <br/>
+                                                                                                <a 
+                                                                                                clicktracking="off" href="{{.verification_url}}" class="es-button" target="_blank" style="text-decoration: none;padding:10px 15px;background-color: rgba(59,130,246,1);color: #fff;font-size: 1em;border-radius:5px;">Confirm Email</a>
+                                                                                            </td>
+                                                                                        </tr>
+                                                                                    </tbody>
+                                                                                </table>
+                                                                            </td>
+                                                                        </tr>
+                                                                    </tbody>
+                                                                </table>
+                                                            </td>
+                                                        </tr>
+                                                    </tbody>
+                                                </table>
+                                            </td>
+                                        </tr>
+                                    </tbody>
+                                </table>
+                            </td>
+                        </tr>
+                    </tbody>
+                </table>
+            </div>
+            <div style="position: absolute; left: -9999px; top: -9999px; margin: 0px;"></div>
+        </body>
+    </html>
+	`
+	data := make(map[string]interface{}, 3)
+	data["org_logo"] = envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyOrganizationLogo)
+	data["org_name"] = envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyOrganizationName)
+	data["verification_url"] = envstore.EnvInMemoryStoreObj.GetStringStoreEnvVariable(constants.EnvKeyAuthorizerURL) + "/verify_email?token=" + token
+	message = addEmailTemplate(message, data, "verify_email.tmpl")
+	// bodyMessage := sender.WriteHTMLEmail(Receiver, Subject, message)
+
+	return SendMail(Receiver, Subject, message)
+}

server/enum/dbType.go

@@ -1,23 +0,0 @@
-package enum
-
-type DbType int
-
-const (
-	Postgres DbType = iota
-	Sqlite
-	Mysql
-	SQLServer
-	Arangodb
-	Mongodb
-)
-
-func (d DbType) String() string {
-	return [...]string{
-		"postgres",
-		"sqlite",
-		"mysql",
-		"sqlserver",
-		"arangodb",
-		"mongodb",
-	}[d]
-}

server/enum/oauthProvider.go

@@ -1,15 +0,0 @@
-package enum
-
-type OAuthProvider int
-
-const (
-	GoogleProvider OAuthProvider = iota
-	GithubProvider
-)
-
-func (d OAuthProvider) String() string {
-	return [...]string{
-		"google_provider",
-		"github_provider",
-	}[d]
-}

server/enum/signUpMethod.go

@@ -1,21 +0,0 @@
-package enum
-
-type SignupMethod int
-
-const (
-	BasicAuth SignupMethod = iota
-	MagicLink
-	Google
-	Github
-	Facebook
-)
-
-func (d SignupMethod) String() string {
-	return [...]string{
-		"basic_auth",
-		"magic_link",
-		"google",
-		"github",
-		"facebook",
-	}[d]
-}

server/enum/tokenType.go

@@ -1,15 +0,0 @@
-package enum
-
-type TokenType int
-
-const (
-	RefreshToken TokenType = iota
-	AccessToken
-)
-
-func (d TokenType) String() string {
-	return [...]string{
-		"refresh_token",
-		"access_token",
-	}[d]
-}

server/enum/verification.go

@@ -1,17 +0,0 @@
-package enum
-
-type VerificationType int
-
-const (
-	BasicAuthSignup VerificationType = iota
-	UpdateEmail
-	ForgotPassword
-)
-
-func (d VerificationType) String() string {
-	return [...]string{
-		"basic_auth_signup",
-		"update_email",
-		"forgot_password",
-	}[d]
-}

server/env/env.go

@@ -1,88 +1,191 @@
 package env
 
 import (
-	"flag"
 	"log"
 	"os"
 	"strings"
 
 	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/envstore"
 	"github.com/authorizerdev/authorizer/server/utils"
+	"github.com/google/uuid"
 	"github.com/joho/godotenv"
 )
 
-// build variables
-var (
-	VERSION            string
-	ARG_DB_URL         *string
-	ARG_DB_TYPE        *string
-	ARG_AUTHORIZER_URL *string
-	ARG_ENV_FILE       *string
-)
-
-// InitEnv -> to initialize env and through error if required env are not present
+// InitEnv to initialize EnvData and through error if required env are not present
 func InitEnv() {
-	if constants.ENV_PATH == "" {
-		constants.ENV_PATH = `.env`
-	}
-	ARG_DB_URL = flag.String("database_url", "", "Database connection string")
-	ARG_DB_TYPE = flag.String("database_type", "", "Database type, possible values are postgres,mysql,sqlite")
-	ARG_AUTHORIZER_URL = flag.String("authorizer_url", "", "URL for authorizer instance, eg: https://xyz.herokuapp.com")
-	ARG_ENV_FILE = flag.String("env_file", "", "Env file path")
+	// get clone of current store
+	envData := envstore.EnvInMemoryStoreObj.GetEnvStoreClone()
 
-	flag.Parse()
-	if *ARG_ENV_FILE != "" {
-		constants.ENV_PATH = *ARG_ENV_FILE
+	if envData.StringEnv[constants.EnvKeyEnv] == "" {
+		envData.StringEnv[constants.EnvKeyEnv] = os.Getenv("ENV")
+		if envData.StringEnv[constants.EnvKeyEnv] == "" {
+			envData.StringEnv[constants.EnvKeyEnv] = "production"
 		}
 
-	err := godotenv.Load(constants.ENV_PATH)
-	if err != nil {
-		log.Printf("error loading %s file", constants.ENV_PATH)
-	}
-
-	constants.VERSION = VERSION
-	constants.ADMIN_SECRET = os.Getenv("ADMIN_SECRET")
-	constants.ENV = os.Getenv("ENV")
-	constants.DATABASE_TYPE = os.Getenv("DATABASE_TYPE")
-	constants.DATABASE_URL = os.Getenv("DATABASE_URL")
-	constants.DATABASE_NAME = os.Getenv("DATABASE_NAME")
-	constants.SMTP_HOST = os.Getenv("SMTP_HOST")
-	constants.SMTP_PORT = os.Getenv("SMTP_PORT")
-	constants.SENDER_EMAIL = os.Getenv("SENDER_EMAIL")
-	constants.SENDER_PASSWORD = os.Getenv("SENDER_PASSWORD")
-	constants.JWT_SECRET = os.Getenv("JWT_SECRET")
-	constants.JWT_TYPE = os.Getenv("JWT_TYPE")
-	constants.AUTHORIZER_URL = strings.TrimSuffix(os.Getenv("AUTHORIZER_URL"), "/")
-	constants.PORT = os.Getenv("PORT")
-	constants.REDIS_URL = os.Getenv("REDIS_URL")
-	constants.COOKIE_NAME = os.Getenv("COOKIE_NAME")
-	constants.GOOGLE_CLIENT_ID = os.Getenv("GOOGLE_CLIENT_ID")
-	constants.GOOGLE_CLIENT_SECRET = os.Getenv("GOOGLE_CLIENT_SECRET")
-	constants.GITHUB_CLIENT_ID = os.Getenv("GITHUB_CLIENT_ID")
-	constants.GITHUB_CLIENT_SECRET = os.Getenv("GITHUB_CLIENT_SECRET")
-	constants.FACEBOOK_CLIENT_ID = os.Getenv("FACEBOOK_CLIENT_ID")
-	constants.FACEBOOK_CLIENT_SECRET = os.Getenv("FACEBOOK_CLIENT_SECRET")
-	constants.TWITTER_CLIENT_ID = os.Getenv("TWITTER_CLIENT_ID")
-	constants.TWITTER_CLIENT_SECRET = os.Getenv("TWITTER_CLIENT_SECRET")
-	constants.RESET_PASSWORD_URL = strings.TrimPrefix(os.Getenv("RESET_PASSWORD_URL"), "/")
-	constants.DISABLE_BASIC_AUTHENTICATION = os.Getenv("DISABLE_BASIC_AUTHENTICATION") == "true"
-	constants.DISABLE_EMAIL_VERIFICATION = os.Getenv("DISABLE_EMAIL_VERIFICATION") == "true"
-	constants.DISABLE_MAGIC_LOGIN = os.Getenv("DISABLE_MAGIC_LOGIN") == "true"
-	constants.JWT_ROLE_CLAIM = os.Getenv("JWT_ROLE_CLAIM")
-
-	if constants.ADMIN_SECRET == "" {
-		panic("root admin secret is required")
-	}
-
-	if constants.ENV == "" {
-		constants.ENV = "production"
-	}
-
-	if constants.ENV == "production" {
-		constants.IS_PROD = true
+		if envData.StringEnv[constants.EnvKeyEnv] == "production" {
+			envData.BoolEnv[constants.EnvKeyIsProd] = true
 			os.Setenv("GIN_MODE", "release")
 		} else {
-		constants.IS_PROD = false
+			envData.BoolEnv[constants.EnvKeyIsProd] = false
+		}
+	}
+
+	// set authorizer url to empty string so that fresh url is obtained with every server start
+	envData.StringEnv[constants.EnvKeyAuthorizerURL] = ""
+	if envData.StringEnv[constants.EnvKeyAppURL] == "" {
+		envData.StringEnv[constants.EnvKeyAppURL] = os.Getenv(constants.EnvKeyAppURL)
+	}
+
+	if envData.StringEnv[constants.EnvKeyEnvPath] == "" {
+		envData.StringEnv[constants.EnvKeyEnvPath] = `.env`
+	}
+
+	if envstore.ARG_ENV_FILE != nil && *envstore.ARG_ENV_FILE != "" {
+		envData.StringEnv[constants.EnvKeyEnvPath] = *envstore.ARG_ENV_FILE
+	}
+
+	err := godotenv.Load(envData.StringEnv[constants.EnvKeyEnvPath])
+	if err != nil {
+		log.Printf("error loading %s file", envData.StringEnv[constants.EnvKeyEnvPath])
+	}
+
+	if envData.StringEnv[constants.EnvKeyPort] == "" {
+		envData.StringEnv[constants.EnvKeyPort] = os.Getenv("PORT")
+		if envData.StringEnv[constants.EnvKeyPort] == "" {
+			envData.StringEnv[constants.EnvKeyPort] = "8080"
+		}
+	}
+
+	if envData.StringEnv[constants.EnvKeyAdminSecret] == "" {
+		envData.StringEnv[constants.EnvKeyAdminSecret] = os.Getenv("ADMIN_SECRET")
+	}
+
+	if envData.StringEnv[constants.EnvKeyDatabaseType] == "" {
+		envData.StringEnv[constants.EnvKeyDatabaseType] = os.Getenv("DATABASE_TYPE")
+
+		if envstore.ARG_DB_TYPE != nil && *envstore.ARG_DB_TYPE != "" {
+			envData.StringEnv[constants.EnvKeyDatabaseType] = *envstore.ARG_DB_TYPE
+		}
+
+		if envData.StringEnv[constants.EnvKeyDatabaseType] == "" {
+			panic("DATABASE_TYPE is required")
+		}
+	}
+
+	if envData.StringEnv[constants.EnvKeyDatabaseURL] == "" {
+		envData.StringEnv[constants.EnvKeyDatabaseURL] = os.Getenv("DATABASE_URL")
+
+		if envstore.ARG_DB_URL != nil && *envstore.ARG_DB_URL != "" {
+			envData.StringEnv[constants.EnvKeyDatabaseURL] = *envstore.ARG_DB_URL
+		}
+
+		if envData.StringEnv[constants.EnvKeyDatabaseURL] == "" {
+			panic("DATABASE_URL is required")
+		}
+	}
+
+	if envData.StringEnv[constants.EnvKeyDatabaseName] == "" {
+		envData.StringEnv[constants.EnvKeyDatabaseName] = os.Getenv("DATABASE_NAME")
+		if envData.StringEnv[constants.EnvKeyDatabaseName] == "" {
+			envData.StringEnv[constants.EnvKeyDatabaseName] = "authorizer"
+		}
+	}
+
+	if envData.StringEnv[constants.EnvKeySmtpHost] == "" {
+		envData.StringEnv[constants.EnvKeySmtpHost] = os.Getenv("SMTP_HOST")
+	}
+
+	if envData.StringEnv[constants.EnvKeySmtpPort] == "" {
+		envData.StringEnv[constants.EnvKeySmtpPort] = os.Getenv("SMTP_PORT")
+	}
+
+	if envData.StringEnv[constants.EnvKeySmtpUsername] == "" {
+		envData.StringEnv[constants.EnvKeySmtpUsername] = os.Getenv("SMTP_USERNAME")
+	}
+
+	if envData.StringEnv[constants.EnvKeySmtpPassword] == "" {
+		envData.StringEnv[constants.EnvKeySmtpPassword] = os.Getenv("SMTP_PASSWORD")
+	}
+
+	if envData.StringEnv[constants.EnvKeySenderEmail] == "" {
+		envData.StringEnv[constants.EnvKeySenderEmail] = os.Getenv("SENDER_EMAIL")
+	}
+
+	if envData.StringEnv[constants.EnvKeyJwtSecret] == "" {
+		envData.StringEnv[constants.EnvKeyJwtSecret] = os.Getenv("JWT_SECRET")
+		if envData.StringEnv[constants.EnvKeyJwtSecret] == "" {
+			envData.StringEnv[constants.EnvKeyJwtSecret] = uuid.New().String()
+		}
+	}
+
+	if envData.StringEnv[constants.EnvKeyJwtType] == "" {
+		envData.StringEnv[constants.EnvKeyJwtType] = os.Getenv("JWT_TYPE")
+		if envData.StringEnv[constants.EnvKeyJwtType] == "" {
+			envData.StringEnv[constants.EnvKeyJwtType] = "HS256"
+		}
+	}
+
+	if envData.StringEnv[constants.EnvKeyJwtRoleClaim] == "" {
+		envData.StringEnv[constants.EnvKeyJwtRoleClaim] = os.Getenv("JWT_ROLE_CLAIM")
+
+		if envData.StringEnv[constants.EnvKeyJwtRoleClaim] == "" {
+			envData.StringEnv[constants.EnvKeyJwtRoleClaim] = "role"
+		}
+	}
+
+	if envData.StringEnv[constants.EnvKeyRedisURL] == "" {
+		envData.StringEnv[constants.EnvKeyRedisURL] = os.Getenv("REDIS_URL")
+	}
+
+	if envData.StringEnv[constants.EnvKeyCookieName] == "" {
+		envData.StringEnv[constants.EnvKeyCookieName] = os.Getenv("COOKIE_NAME")
+		if envData.StringEnv[constants.EnvKeyCookieName] == "" {
+			envData.StringEnv[constants.EnvKeyCookieName] = "authorizer"
+		}
+	}
+
+	if envData.StringEnv[constants.EnvKeyGoogleClientID] == "" {
+		envData.StringEnv[constants.EnvKeyGoogleClientID] = os.Getenv("GOOGLE_CLIENT_ID")
+	}
+
+	if envData.StringEnv[constants.EnvKeyGoogleClientSecret] == "" {
+		envData.StringEnv[constants.EnvKeyGoogleClientSecret] = os.Getenv("GOOGLE_CLIENT_SECRET")
+	}
+
+	if envData.StringEnv[constants.EnvKeyGithubClientID] == "" {
+		envData.StringEnv[constants.EnvKeyGithubClientID] = os.Getenv("GITHUB_CLIENT_ID")
+	}
+
+	if envData.StringEnv[constants.EnvKeyGithubClientSecret] == "" {
+		envData.StringEnv[constants.EnvKeyGithubClientSecret] = os.Getenv("GITHUB_CLIENT_SECRET")
+	}
+
+	if envData.StringEnv[constants.EnvKeyFacebookClientID] == "" {
+		envData.StringEnv[constants.EnvKeyFacebookClientID] = os.Getenv("FACEBOOK_CLIENT_ID")
+	}
+
+	if envData.StringEnv[constants.EnvKeyFacebookClientSecret] == "" {
+		envData.StringEnv[constants.EnvKeyFacebookClientSecret] = os.Getenv("FACEBOOK_CLIENT_SECRET")
+	}
+
+	if envData.StringEnv[constants.EnvKeyResetPasswordURL] == "" {
+		envData.StringEnv[constants.EnvKeyResetPasswordURL] = strings.TrimPrefix(os.Getenv("RESET_PASSWORD_URL"), "/")
+	}
+
+	envData.BoolEnv[constants.EnvKeyDisableBasicAuthentication] = os.Getenv("DISABLE_BASIC_AUTHENTICATION") == "true"
+	envData.BoolEnv[constants.EnvKeyDisableEmailVerification] = os.Getenv("DISABLE_EMAIL_VERIFICATION") == "true"
+	envData.BoolEnv[constants.EnvKeyDisableMagicLinkLogin] = os.Getenv("DISABLE_MAGIC_LINK_LOGIN") == "true"
+	envData.BoolEnv[constants.EnvKeyDisableLoginPage] = os.Getenv("DISABLE_LOGIN_PAGE") == "true"
+
+	// no need to add nil check as its already done above
+	if envData.StringEnv[constants.EnvKeySmtpHost] == "" || envData.StringEnv[constants.EnvKeySmtpUsername] == "" || envData.StringEnv[constants.EnvKeySmtpPassword] == "" || envData.StringEnv[constants.EnvKeySenderEmail] == "" && envData.StringEnv[constants.EnvKeySmtpPort] == "" {
+		envData.BoolEnv[constants.EnvKeyDisableEmailVerification] = true
+		envData.BoolEnv[constants.EnvKeyDisableMagicLinkLogin] = true
+	}
+
+	if envData.BoolEnv[constants.EnvKeyDisableEmailVerification] {
+		envData.BoolEnv[constants.EnvKeyDisableMagicLinkLogin] = true
 	}
 
 	allowedOriginsSplit := strings.Split(os.Getenv("ALLOWED_ORIGINS"), ",")
@@ -111,66 +214,28 @@ func InitEnv() {
 		allowedOrigins = []string{"*"}
 	}
 
-	constants.ALLOWED_ORIGINS = allowedOrigins
+	envData.SliceEnv[constants.EnvKeyAllowedOrigins] = allowedOrigins
 
-	if *ARG_AUTHORIZER_URL != "" {
-		constants.AUTHORIZER_URL = *ARG_AUTHORIZER_URL
-	}
-
-	if *ARG_DB_URL != "" {
-		constants.DATABASE_URL = *ARG_DB_URL
-	}
-
-	if *ARG_DB_TYPE != "" {
-		constants.DATABASE_TYPE = *ARG_DB_TYPE
-	}
-
-	if constants.DATABASE_URL == "" {
-		panic("Database url is required")
-	}
-
-	if constants.DATABASE_TYPE == "" {
-		panic("Database type is required")
-	}
-
-	if constants.DATABASE_NAME == "" {
-		constants.DATABASE_NAME = "authorizer"
-	}
-
-	if constants.JWT_TYPE == "" {
-		constants.JWT_TYPE = "HS256"
-	}
-
-	if constants.COOKIE_NAME == "" {
-		constants.COOKIE_NAME = "authorizer"
-	}
-
-	if constants.SMTP_HOST == "" || constants.SENDER_EMAIL == "" || constants.SENDER_PASSWORD == "" {
-		constants.DISABLE_EMAIL_VERIFICATION = true
-		constants.DISABLE_MAGIC_LOGIN = true
-	}
-
-	if constants.DISABLE_EMAIL_VERIFICATION {
-		constants.DISABLE_MAGIC_LOGIN = true
-	}
-
-	rolesSplit := strings.Split(os.Getenv("ROLES"), ",")
+	rolesEnv := strings.TrimSpace(os.Getenv("ROLES"))
+	rolesSplit := strings.Split(rolesEnv, ",")
 	roles := []string{}
-	if len(rolesSplit) == 0 {
+	if len(rolesEnv) == 0 {
 		roles = []string{"user"}
 	}
 
-	defaultRoleSplit := strings.Split(os.Getenv("DEFAULT_ROLES"), ",")
+	defaultRolesEnv := strings.TrimSpace(os.Getenv("DEFAULT_ROLES"))
+	defaultRoleSplit := strings.Split(defaultRolesEnv, ",")
 	defaultRoles := []string{}
 
-	if len(defaultRoleSplit) == 0 {
+	if len(defaultRolesEnv) == 0 {
 		defaultRoles = []string{"user"}
 	}
 
-	protectedRolesSplit := strings.Split(os.Getenv("PROTECTED_ROLES"), ",")
+	protectedRolesEnv := strings.TrimSpace(os.Getenv("PROTECTED_ROLES"))
+	protectedRolesSplit := strings.Split(protectedRolesEnv, ",")
 	protectedRoles := []string{}
 
-	if len(protectedRolesSplit) > 0 {
+	if len(protectedRolesEnv) > 0 {
 		for _, val := range protectedRolesSplit {
 			trimVal := strings.TrimSpace(val)
 			protectedRoles = append(protectedRoles, trimVal)
@@ -188,23 +253,21 @@ func InitEnv() {
 		}
 	}
 
-	if len(roles) > 0 && len(defaultRoles) == 0 && len(defaultRoleSplit) > 0 {
+	if len(roles) > 0 && len(defaultRoles) == 0 && len(defaultRolesEnv) > 0 {
 		panic(`Invalid DEFAULT_ROLE environment variable. It can be one from give ROLES environment variable value`)
 	}
 
-	constants.ROLES = roles
-	constants.DEFAULT_ROLES = defaultRoles
-	constants.PROTECTED_ROLES = protectedRoles
-
-	if constants.JWT_ROLE_CLAIM == "" {
-		constants.JWT_ROLE_CLAIM = "role"
-	}
+	envData.SliceEnv[constants.EnvKeyRoles] = roles
+	envData.SliceEnv[constants.EnvKeyDefaultRoles] = defaultRoles
+	envData.SliceEnv[constants.EnvKeyProtectedRoles] = protectedRoles
 
 	if os.Getenv("ORGANIZATION_NAME") != "" {
-		constants.ORGANIZATION_NAME = os.Getenv("ORGANIZATION_NAME")
+		envData.StringEnv[constants.EnvKeyOrganizationName] = os.Getenv("ORGANIZATION_NAME")
 	}
 
 	if os.Getenv("ORGANIZATION_LOGO") != "" {
-		constants.ORGANIZATION_LOGO = os.Getenv("ORGANIZATION_LOGO")
+		envData.StringEnv[constants.EnvKeyOrganizationLogo] = os.Getenv("ORGANIZATION_LOGO")
 	}
+
+	envstore.EnvInMemoryStoreObj.UpdateEnvStore(envData)
 }

server/env/env_test.go

@@ -1,29 +0,0 @@
-package env
-
-import (
-	"testing"
-
-	"github.com/authorizerdev/authorizer/server/constants"
-	"github.com/authorizerdev/authorizer/server/enum"
-	"github.com/stretchr/testify/assert"
-)
-
-func TestEnvs(t *testing.T) {
-	constants.ENV_PATH = "../../.env.sample"
-	InitEnv()
-
-	assert.Equal(t, constants.ADMIN_SECRET, "admin")
-	assert.Equal(t, constants.ENV, "production")
-	assert.Equal(t, constants.DATABASE_URL, "data.db")
-	assert.Equal(t, constants.DATABASE_TYPE, enum.Sqlite.String())
-	assert.True(t, constants.DISABLE_EMAIL_VERIFICATION)
-	assert.True(t, constants.DISABLE_MAGIC_LOGIN)
-	assert.False(t, constants.DISABLE_BASIC_AUTHENTICATION)
-	assert.Equal(t, constants.JWT_TYPE, "HS256")
-	assert.Equal(t, constants.JWT_SECRET, "random_string")
-	assert.Equal(t, constants.JWT_ROLE_CLAIM, "role")
-	assert.EqualValues(t, constants.ROLES, []string{"user"})
-	assert.EqualValues(t, constants.DEFAULT_ROLES, []string{"user"})
-	assert.EqualValues(t, constants.PROTECTED_ROLES, []string{"admin"})
-	assert.EqualValues(t, constants.ALLOWED_ORIGINS, []string{"*"})
-}

server/env/persist_env.go

@@ -0,0 +1,145 @@
+package env
+
+import (
+	"encoding/json"
+	"log"
+	"os"
+	"strconv"
+	"strings"
+
+	"github.com/authorizerdev/authorizer/server/constants"
+	"github.com/authorizerdev/authorizer/server/db"
+	"github.com/authorizerdev/authorizer/server/db/models"
+	"github.com/authorizerdev/authorizer/server/envstore"
+	"github.com/authorizerdev/authorizer/server/utils"
+	"github.com/google/uuid"
+)
+
+// PersistEnv persists the environment variables to the database
+func PersistEnv() error {
+	env, err := db.Provider.GetEnv()
+	// config not found in db
+	if err != nil {
+		// AES encryption needs 32 bit key only, so we chop off last 4 characters from 36 bit uuid
+		hash := uuid.New().String()[:36-4]
+		envstore.EnvInMemoryStoreObj.UpdateEnvVariable(constants.StringStoreIdentifier, constants.EnvKeyEncryptionKey, hash)
+		encodedHash := utils.EncryptB64(hash)
+
+		configData, err := json.Marshal(envstore.EnvInMemoryStoreObj.GetEnvStoreClone())
+		if err != nil {
+			return err
+		}
+
+		encryptedConfig, err := utils.EncryptAES(configData)
+		if err != nil {
+			return err
+		}
+
+		env = models.Env{
+			Hash:    encodedHash,
+			EnvData: encryptedConfig,
+		}
+
+		db.Provider.AddEnv(env)
+	} else {
+		// decrypt the config data from db
+		// decryption can be done using the hash stored in db
+		encryptionKey := env.Hash
+		decryptedEncryptionKey, err := utils.DecryptB64(encryptionKey)
+		if err != nil {
+			return err
+		}
+
+		envstore.EnvInMemoryStoreObj.UpdateEnvVariable(constants.StringStoreIdentifier, constants.EnvKeyEncryptionKey, decryptedEncryptionKey)
+		decryptedConfigs, err := utils.DecryptAES(env.EnvData)
+		if err != nil {
+			return err
+		}
+
+		// temp store variable
+		var storeData envstore.Store
+
+		err = json.Unmarshal(decryptedConfigs, &storeData)
+		if err != nil {
+			return err
+		}
+
+		// if env is changed via env file or OS env
+		// give that higher preference and update db, but we don't recommend it
+
+		hasChanged := false
+
+		for key, value := range storeData.StringEnv {
+			if key != constants.EnvKeyEncryptionKey {
+				// check only for derivative keys
+				// No need to check for ENCRYPTION_KEY which special key we use for encrypting config data
+				// as we have removed it from json
+				envValue := strings.TrimSpace(os.Getenv(key))
+
+				// env is not empty
+				if envValue != "" {
+					if value != envValue {
+						storeData.StringEnv[key] = envValue
+						hasChanged = true
+					}
+				}
+			}
+		}
+
+		for key, value := range storeData.BoolEnv {
+			envValue := strings.TrimSpace(os.Getenv(key))
+			// env is not empty
+			if envValue != "" {
+				envValueBool, _ := strconv.ParseBool(envValue)
+				if value != envValueBool {
+					storeData.BoolEnv[key] = envValueBool
+					hasChanged = true
+				}
+			}
+		}
+
+		for key, value := range storeData.SliceEnv {
+			envValue := strings.TrimSpace(os.Getenv(key))
+			// env is not empty
+			if envValue != "" {
+				envStringArr := strings.Split(envValue, ",")
+				if !utils.IsStringArrayEqual(value, envStringArr) {
+					storeData.SliceEnv[key] = envStringArr
+					hasChanged = true
+				}
+			}
+		}
+
+		// handle derivative cases like disabling email verification & magic login
+		// in case SMTP is off but env is set to true
+		if storeData.StringEnv[constants.EnvKeySmtpHost] == "" || storeData.StringEnv[constants.EnvKeySmtpUsername] == "" || storeData.StringEnv[constants.EnvKeySmtpPassword] == "" || storeData.StringEnv[constants.EnvKeySenderEmail] == "" && storeData.StringEnv[constants.EnvKeySmtpPort] == "" {
+			if !storeData.BoolEnv[constants.EnvKeyDisableEmailVerification] {
+				storeData.BoolEnv[constants.EnvKeyDisableEmailVerification] = true
+				hasChanged = true
+			}
+
+			if !storeData.BoolEnv[constants.EnvKeyDisableMagicLinkLogin] {
+				storeData.BoolEnv[constants.EnvKeyDisableMagicLinkLogin] = true
+				hasChanged = true
+			}
+		}
+
+		envstore.EnvInMemoryStoreObj.UpdateEnvStore(storeData)
+		if hasChanged {
+			encryptedConfig, err := utils.EncryptEnvData(storeData)
+			if err != nil {
+				return err
+			}
+
+			env.EnvData = encryptedConfig
+			_, err = db.Provider.UpdateEnv(env)
+			if err != nil {
+				log.Println("error updating config:", err)
+				return err
+			}
+		}
+
+	}
+
+	return nil
+}

server/envstore/store.go

@@ -0,0 +1,111 @@
+package envstore
+
+import (
+	"sync"
+
+	"github.com/authorizerdev/authorizer/server/constants"
+)
+
+var (
+	// ARG_DB_URL is the cli arg variable for the database url
+	ARG_DB_URL *string
+	// ARG_DB_TYPE is the cli arg variable for the database type
+	ARG_DB_TYPE *string
+	// ARG_ENV_FILE is the cli arg variable for the env file
+	ARG_ENV_FILE *string
+)
+
+// Store data structure
+type Store struct {
+	StringEnv map[string]string   `json:"string_env"`
+	BoolEnv   map[string]bool     `json:"bool_env"`
+	SliceEnv  map[string][]string `json:"slice_env"`
+}
+
+// EnvInMemoryStore struct
+type EnvInMemoryStore struct {
+	mutex sync.Mutex
+	store *Store
+}
+
+// EnvInMemoryStoreObj global variable for EnvInMemoryStore
+var EnvInMemoryStoreObj = &EnvInMemoryStore{
+	store: &Store{
+		StringEnv: map[string]string{
+			constants.EnvKeyAdminCookieName:  "authorizer-admin",
+			constants.EnvKeyJwtRoleClaim:     "role",
+			constants.EnvKeyOrganizationName: "Authorizer",
+			constants.EnvKeyOrganizationLogo: "https://www.authorizer.io/images/logo.png",
+		},
+		BoolEnv: map[string]bool{
+			constants.EnvKeyDisableBasicAuthentication: false,
+			constants.EnvKeyDisableMagicLinkLogin:      false,
+			constants.EnvKeyDisableEmailVerification:   false,
+			constants.EnvKeyDisableLoginPage:           false,
+		},
+		SliceEnv: map[string][]string{},
+	},
+}
+
+// UpdateEnvStore to update the whole env store object
+func (e *EnvInMemoryStore) UpdateEnvStore(store Store) {
+	e.mutex.Lock()
+	defer e.mutex.Unlock()
+	// just override the keys + new keys
+
+	for key, value := range store.StringEnv {
+		e.store.StringEnv[key] = value
+	}
+
+	for key, value := range store.BoolEnv {
+		e.store.BoolEnv[key] = value
+	}
+
+	for key, value := range store.SliceEnv {
+		e.store.SliceEnv[key] = value
+	}
+}
+
+// UpdateEnvVariable to update the particular env variable
+func (e *EnvInMemoryStore) UpdateEnvVariable(storeIdentifier, key string, value interface{}) {
+	e.mutex.Lock()
+	defer e.mutex.Unlock()
+	switch storeIdentifier {
+	case constants.StringStoreIdentifier:
+		e.store.StringEnv[key] = value.(string)
+	case constants.BoolStoreIdentifier:
+		e.store.BoolEnv[key] = value.(bool)
+	case constants.SliceStoreIdentifier:
+		e.store.SliceEnv[key] = value.([]string)
+	}
+}
+
+// GetStringStoreEnvVariable to get the env variable from string store object
+func (e *EnvInMemoryStore) GetStringStoreEnvVariable(key string) string {
+	// e.mutex.Lock()
+	// defer e.mutex.Unlock()
+	return e.store.StringEnv[key]
+}
+
+// GetBoolStoreEnvVariable to get the env variable from bool store object
+func (e *EnvInMemoryStore) GetBoolStoreEnvVariable(key string) bool {
+	// e.mutex.Lock()
+	// defer e.mutex.Unlock()
+	return e.store.BoolEnv[key]
+}
+
+// GetSliceStoreEnvVariable to get the env variable from slice store object
+func (e *EnvInMemoryStore) GetSliceStoreEnvVariable(key string) []string {
+	// e.mutex.Lock()
+	// defer e.mutex.Unlock()
+	return e.store.SliceEnv[key]
+}
+
+// GetEnvStoreClone to get clone of current env store object
+func (e *EnvInMemoryStore) GetEnvStoreClone() Store {
+	e.mutex.Lock()
+	defer e.mutex.Unlock()
+
+	result := *e.store
+	return result
+}

server/go.mod

@@ -3,9 +3,10 @@ module github.com/authorizerdev/authorizer/server
 go 1.16
 
 require (
-	github.com/99designs/gqlgen v0.13.0
+	github.com/99designs/gqlgen v0.14.0
 	github.com/arangodb/go-driver v1.2.1
 	github.com/coreos/go-oidc/v3 v3.1.0
+	github.com/fauna/faunadb-go/v5 v5.0.0-beta // indirect
 	github.com/gin-contrib/location v0.0.2
 	github.com/gin-gonic/gin v1.7.2
 	github.com/go-playground/validator/v10 v10.8.0 // indirect
@@ -20,15 +21,17 @@ require (
 	github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
 	github.com/modern-go/reflect2 v1.0.1 // indirect
 	github.com/robertkrimen/otto v0.0.0-20211024170158-b87d35c0b86f
-	github.com/stretchr/testify v1.7.0 // indirect
+	github.com/stretchr/testify v1.7.0
 	github.com/ugorji/go v1.2.6 // indirect
-	github.com/vektah/gqlparser/v2 v2.1.0
-	go.mongodb.org/mongo-driver v1.8.1 // indirect
+	github.com/vektah/gqlparser/v2 v2.2.0
+	go.mongodb.org/mongo-driver v1.8.1
 	golang.org/x/crypto v0.0.0-20210921155107-089bfa567519
 	golang.org/x/net v0.0.0-20210614182718-04defd469f4e // indirect
 	golang.org/x/oauth2 v0.0.0-20210628180205-a41e5a781914
 	google.golang.org/appengine v1.6.7 // indirect
 	google.golang.org/protobuf v1.27.1 // indirect
+	gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
+	gopkg.in/mail.v2 v2.3.1
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 	gorm.io/driver/mysql v1.2.1
 	gorm.io/driver/postgres v1.2.3

server/go.sum

@@ -31,15 +31,15 @@ cloud.google.com/go/storage v1.6.0/go.mod h1:N7U0C8pVQ/+NIKOBQyamJIeKQKkZ+mxpohl
 cloud.google.com/go/storage v1.8.0/go.mod h1:Wv1Oy7z6Yz3DshWRJFhqM/UCfaWIRTdp0RXyy7KQOVs=
 cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9ullr3+Kg0=
 dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
-github.com/99designs/gqlgen v0.13.0 h1:haLTcUp3Vwp80xMVEg5KRNwzfUrgFdRmtBY8fuB8scA=
-github.com/99designs/gqlgen v0.13.0/go.mod h1:NV130r6f4tpRWuAI+zsrSdooO/eWUv+Gyyoi3rEfXIk=
+github.com/99designs/gqlgen v0.14.0 h1:Wg8aNYQUjMR/4v+W3xD+7SizOy6lSvVeQ06AobNQAXI=
+github.com/99designs/gqlgen v0.14.0/go.mod h1:S7z4boV+Nx4VvzMUpVrY/YuHjFX4n7rDyuTqvAkuoRE=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
 github.com/Masterminds/semver/v3 v3.1.1 h1:hLg3sBzpNErnxhQtUy/mmLR2I9foDujNK030IGemrRc=
 github.com/Masterminds/semver/v3 v3.1.1/go.mod h1:VPu/7SZ7ePZ3QOrcuXROw5FAcLl4a0cBrbBpGY/8hQs=
 github.com/agnivade/levenshtein v1.0.1/go.mod h1:CURSv5d9Uaml+FovSIICkLbAUZ9S4RqaHDIsdSBg7lM=
-github.com/agnivade/levenshtein v1.0.3 h1:M5ZnqLOoZR8ygVq0FfkXsNOKzMCk0xRiow0R5+5VkQ0=
-github.com/agnivade/levenshtein v1.0.3/go.mod h1:4SFRZbbXWLF4MU1T9Qg0pGgH3Pjs+t6ie5efyrwRJXs=
+github.com/agnivade/levenshtein v1.1.0 h1:n6qGwyHG61v3ABce1rPVZklEYRT8NFpCMrpZdBUbYGM=
+github.com/agnivade/levenshtein v1.1.0/go.mod h1:veldBMzWxcCG2ZvUTKD2kJNRdCk5hVbJomOvKkmgYbo=
 github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883 h1:bvNMNQO63//z+xNgfBlViaCIJKLlCJ6/fmUseuG0wVQ=
 github.com/andreyvit/diff v0.0.0-20170406064948-c7f18ee00883/go.mod h1:rCTlJbsFo29Kk6CurOXKm700vrz8f0KW0JNfpkRJY/8=
 github.com/arangodb/go-driver v1.2.1 h1:HREDHhDmzdIWxHmfkfTESbYUnRjESjPh4WUuXq7FZa8=
@@ -73,12 +73,14 @@ github.com/denisenkom/go-mssqldb v0.11.0 h1:9rHa233rhdOyrz2GcP9NM+gi2psgJZ4GWDpL
 github.com/denisenkom/go-mssqldb v0.11.0/go.mod h1:xbL0rPBG9cCiLr28tMa8zpbdarY27NDyej4t/EjAShU=
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f h1:lO4WD4F/rVNCu3HqELle0jiPLLBs70cWOduZpkS1E78=
 github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f/go.mod h1:cuUVRXasLTGF7a8hSLbxyZXjz+1KgoB3wDUb6vlszIc=
-github.com/dgryski/trifles v0.0.0-20190318185328-a8d75aae118c h1:TUuUh0Xgj97tLMNtWtNvI9mIV6isjEb9lBMNv+77IGM=
-github.com/dgryski/trifles v0.0.0-20190318185328-a8d75aae118c/go.mod h1:if7Fbed8SFyPtHLHbg49SI7NAdJiC5WIA09pe59rfAA=
+github.com/dgryski/trifles v0.0.0-20200323201526-dd97f9abfb48 h1:fRzb/w+pyskVMQ+UbP35JkH8yB7MYb4q/qhBarqZE6g=
+github.com/dgryski/trifles v0.0.0-20200323201526-dd97f9abfb48/go.mod h1:if7Fbed8SFyPtHLHbg49SI7NAdJiC5WIA09pe59rfAA=
 github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
 github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4=
 github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98=
 github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c=
+github.com/fauna/faunadb-go/v5 v5.0.0-beta h1:qjig7OPEsDPH/DJuHWIrOboreYd5aLQnSCzLgHDpnck=
+github.com/fauna/faunadb-go/v5 v5.0.0-beta/go.mod h1:eoEA8JUERBnzK5/8Rxnetzx326ImTZ8c++wi2GQwrEU=
 github.com/fsnotify/fsnotify v1.4.7/go.mod h1:jwhsz4b93w/PPRr/qN1Yymfu8t87LnFCMoQvtojpjFo=
 github.com/fsnotify/fsnotify v1.4.9 h1:hsms1Qyu0jgnwNXIxa+/V/PDsU6CfLf6CNO8H7IWoS4=
 github.com/fsnotify/fsnotify v1.4.9/go.mod h1:znqG4EE+3YCdAaPaxE2ZRY/06pZUdp0tY4IgpuI1SZQ=
@@ -89,7 +91,6 @@ github.com/gin-contrib/sse v0.1.0/go.mod h1:RHrZQHXnP2xjPF+u1gW/2HnVO7nvIa9PG3Gm
 github.com/gin-gonic/gin v1.6.3/go.mod h1:75u5sXoLsGZoRN5Sgbi1eraJ4GU3++wFwWzhwvtwp4M=
 github.com/gin-gonic/gin v1.7.2 h1:Tg03T9yM2xa8j6I3Z3oqLaQRSmKvxPd6g/2HJ6zICFA=
 github.com/gin-gonic/gin v1.7.2/go.mod h1:jD2toBW3GZUr5UMcdrwQA10I7RuaFOl/SGeDjXkfUtY=
-github.com/go-chi/chi v3.3.2+incompatible/go.mod h1:eB3wogJHnLi3x/kFX2A+IbTBlXxmMeXJVKy9tTv1XzQ=
 github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
 github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8=
@@ -113,7 +114,7 @@ github.com/go-stack/stack v1.8.0 h1:5SgMzNM5HxrEjV0ww2lTmX6E2Izsfxas4+YHWRs3Lsk=
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
 github.com/gofrs/uuid v4.0.0+incompatible h1:1SD/1F5pU8p29ybwgQSwpQk+mwdRrXCYuPhW6m+TnJw=
 github.com/gofrs/uuid v4.0.0+incompatible/go.mod h1:b2aQJv3Z4Fp6yNu3cdSllBxTCLRxnplIgP/c0N/04lM=
-github.com/gogo/protobuf v1.0.0/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
+github.com/gogo/protobuf v1.3.2/go.mod h1:P1XiOD3dCwIKUDQYPy72D8LYyHL2YPYrpS2s69NZV8Q=
 github.com/golang-jwt/jwt v3.2.2+incompatible h1:IfV12K8xAKAnZqdXVzCZ+TOjboZ2keLg81eXfW3O+oY=
 github.com/golang-jwt/jwt v3.2.2+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
 github.com/golang-sql/civil v0.0.0-20190719163853-cb61b32ac6fe h1:lXe2qZdvpiX5WZkZR4hgp4KJVfY3nMkvmwbVkpv1rVY=
@@ -246,6 +247,7 @@ github.com/json-iterator/go v1.1.11 h1:uVUAXhF2To8cbw/3xN3pxj6kk7TYKs98NIrTqPlMW
 github.com/json-iterator/go v1.1.11/go.mod h1:KdQUCv79m/52Kvf8AW2vK1V8akMuk1QjK/uOdHXbAo4=
 github.com/jstemmer/go-junit-report v0.0.0-20190106144839-af01ea7f8024/go.mod h1:6v2b51hI/fHJwM22ozAgKL4VKDeJcHhJFhtBdhmNjmU=
 github.com/jstemmer/go-junit-report v0.9.1/go.mod h1:Brl9GWCQeLvo8nXZwPNNblvFj/XSXhF0NWZEnDohbsk=
+github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
 github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck=
 github.com/klauspost/compress v1.13.6 h1:P76CopJELS0TiO2mebmnzgWaajssP/EszplttgQxcgc=
 github.com/klauspost/compress v1.13.6/go.mod h1:/3/Vjq9QcHkK5uEr5lBEmyoZ1iFhe47etQ6QUkpK6sk=
@@ -328,7 +330,6 @@ github.com/sirupsen/logrus v1.4.1/go.mod h1:ni0Sbl8bgC9z8RoU9G6nDWqqs/fq4eDPysMB
 github.com/sirupsen/logrus v1.4.2/go.mod h1:tLMulIdttU9McNUspp0xgXVQah82FyeX6MwdIuYE2rE=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/objx v0.1.1/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
-github.com/stretchr/objx v0.2.0 h1:Hbg2NidpLE8veEBkEZTL3CvlkUIVzuU9jDplZO54c48=
 github.com/stretchr/objx v0.2.0/go.mod h1:qt09Ya8vawLte6SNmTgCsAVtYtaKzEcn8ATUoHMkEqE=
 github.com/stretchr/testify v1.2.1/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
@@ -338,6 +339,7 @@ github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5
 github.com/stretchr/testify v1.6.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
 github.com/stretchr/testify v1.7.0 h1:nwc3DEeHmmLAfoZucVR881uASk0Mfjw8xYJ99tb5CcY=
 github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
+github.com/tidwall/pretty v1.0.0 h1:HsD+QiTn7sK6flMKIvNmpqz1qrpP3Ps6jOKIKMooyg4=
 github.com/tidwall/pretty v1.0.0/go.mod h1:XNkn88O1ChpSDQmQeStsy+sBenx6DDtFZJxhVysOjyk=
 github.com/ugorji/go v1.1.7/go.mod h1:kZn38zHttfInRq0xu/PH0az30d+z6vm202qpg1oXVMw=
 github.com/ugorji/go v1.2.6 h1:tGiWC9HENWE2tqYycIqFTNorMmFRVhNwCpDOpWqnk8E=
@@ -347,8 +349,8 @@ github.com/ugorji/go/codec v1.2.6 h1:7kbGefxLoDBuYXOms4yD7223OpNMMPNPZxXk5TvFcyQ
 github.com/ugorji/go/codec v1.2.6/go.mod h1:V6TCNZ4PHqoHGFZuSG1W8nrCzzdgA2DozYxWFFpvxTw=
 github.com/urfave/cli/v2 v2.1.1/go.mod h1:SE9GqnLQmjVa0iPEY0f1w3ygNIYcIJ0OKPMoW2caLfQ=
 github.com/vektah/dataloaden v0.2.1-0.20190515034641-a19b9a6e7c9e/go.mod h1:/HUdMve7rvxZma+2ZELQeNh88+003LL7Pf/CZ089j8U=
-github.com/vektah/gqlparser/v2 v2.1.0 h1:uiKJ+T5HMGGQM2kRKQ8Pxw8+Zq9qhhZhz/lieYvCMns=
-github.com/vektah/gqlparser/v2 v2.1.0/go.mod h1:SyUiHgLATUR8BiYURfTirrTcGpcE+4XkV2se04Px1Ms=
+github.com/vektah/gqlparser/v2 v2.2.0 h1:bAc3slekAAJW6sZTi07aGq0OrfaCjj4jxARAaC7g2EM=
+github.com/vektah/gqlparser/v2 v2.2.0/go.mod h1:i3mQIGIrbK2PD1RrCeMTlVbkF2FJ6WkU1KJlJlC+3F4=
 github.com/xdg-go/pbkdf2 v1.0.0 h1:Su7DPu48wXMwC3bs7MCNG+z4FhcyEuz5dlvchbq0B0c=
 github.com/xdg-go/pbkdf2 v1.0.0/go.mod h1:jrpuAogTd400dnrH08LKmI/xc1MbPOebTwRqcT5RDeI=
 github.com/xdg-go/scram v1.0.2 h1:akYIkZ28e6A96dkWNJQu3nmCzH3YfwMPQExUYDaRv7w=
@@ -456,6 +458,7 @@ golang.org/x/net v0.0.0-20200707034311-ab3426394381/go.mod h1:/O7V0waA8r7cgGh81R
 golang.org/x/net v0.0.0-20200822124328-c89045814202/go.mod h1:/O7V0waA8r7cgGh81Ro3o1hOxt32SMVPicZroKQ2sZA=
 golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
 golang.org/x/net v0.0.0-20201202161906-c7110b5ffcbb/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU=
+golang.org/x/net v0.0.0-20201224014010-6772e930b67b/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20210614182718-04defd469f4e h1:XpT3nA5TvE525Ne3hInMh6+GETgn27Zfm9dxsThnX2Q=
 golang.org/x/net v0.0.0-20210614182718-04defd469f4e/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y=
@@ -565,7 +568,6 @@ golang.org/x/tools v0.0.0-20191130070609-6e064ea0cf2d/go.mod h1:b+2E5dAYhXwXZwtn
 golang.org/x/tools v0.0.0-20191216173652-a0e659d51361/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/tools v0.0.0-20191227053925-7b8e75db28f4/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/tools v0.0.0-20200103221440-774c71fcf114/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
-golang.org/x/tools v0.0.0-20200114235610-7ae403b6b589/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/tools v0.0.0-20200117161641-43d50277825c/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/tools v0.0.0-20200122220014-bf1340f18c4a/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
 golang.org/x/tools v0.0.0-20200130002326-2f3ba24bd6e7/go.mod h1:TB2adYChydJhpapKDTa4BR/hXlZSLoq2Wpct/0txZ28=
@@ -581,10 +583,12 @@ golang.org/x/tools v0.0.0-20200501065659-ab2804fb9c9d/go.mod h1:EkVYQZoAsY45+roY
 golang.org/x/tools v0.0.0-20200512131952-2bc93b1c0c88/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
 golang.org/x/tools v0.0.0-20200515010526-7d3b6ebf133d/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
 golang.org/x/tools v0.0.0-20200618134242-20370b0cb4b2/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
+golang.org/x/tools v0.0.0-20200619180055-7c47624df98f/go.mod h1:EkVYQZoAsY45+roYkvgYkIh4xh/qjgUK9TdY2XT94GE=
 golang.org/x/tools v0.0.0-20200729194436-6467de6f59a7/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
 golang.org/x/tools v0.0.0-20200804011535-6c149bb5ef0d/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
 golang.org/x/tools v0.0.0-20200825202427-b303f430e36d/go.mod h1:njjCfa9FT2d7l9Bc6FUM5FLjQPp3cFF28FI3qnDFljA=
 golang.org/x/tools v0.0.0-20201224043029-2b0845dc783e/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
+golang.org/x/tools v0.0.0-20210106214847-113979e3529a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA=
 golang.org/x/xerrors v0.0.0-20190410155217-1f06c39b4373/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20190513163551-3ee3066db522/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
@@ -671,6 +675,8 @@ google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp0
 google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
 google.golang.org/protobuf v1.27.1 h1:SnqbnDw1V7RiZcXPx5MEeqPv2s79L9i7BJUlG/+RurQ=
 google.golang.org/protobuf v1.27.1/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc=
+gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc h1:2gGKlE2+asNV9m7xrywl36YYNnBG5ZQ0r/BOOxqPpmk=
+gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc/go.mod h1:m7x9LTH6d71AHyAX77c9yqWCCa3UKHcVEj9y7hAtKDk=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15 h1:YR8cESwS4TdDjEe65xsg0ogRM/Nc3DYOhEAlW+xobZo=
@@ -678,6 +684,8 @@ gopkg.in/check.v1 v1.0.0-20190902080502-41f04d3bba15/go.mod h1:Co6ibVJAznAaIkqp8
 gopkg.in/errgo.v2 v2.1.0/go.mod h1:hNsd1EY+bozCKY1Ytp96fpM3vjJbqLJn88ws8XvfDNI=
 gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
 gopkg.in/inconshreveable/log15.v2 v2.0.0-20180818164646-67afb5ed74ec/go.mod h1:aPpfJ7XW+gOuirDoZ8gHhLh3kZ1B08FtV2bbmy7Jv3s=
+gopkg.in/mail.v2 v2.3.1 h1:WYFn/oANrAGP2C0dcV6/pbkPzv8yGzqTjPmTeO7qoXk=
+gopkg.in/mail.v2 v2.3.1/go.mod h1:htwXN1Qh09vZJ1NVKxQqHPBaCBbzKhp5GzuJEA4VJWw=
 gopkg.in/readline.v1 v1.0.0-20160726135117-62c6fe619375/go.mod h1:lNEQeAhU009zbRxng+XOj5ITVgY24WcbNnQopyfKoYQ=
 gopkg.in/sourcemap.v1 v1.0.5 h1:inv58fC9f9J3TK2Y2R1NPntXEn3/wjWHkonhIUODNTI=
 gopkg.in/sourcemap.v1 v1.0.5/go.mod h1:2RlvNNSMglmRrcvhfuzp4hQHwOtjxlbjX7UPY/GXb78=
@@ -715,5 +723,5 @@ honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9
 rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8=
 rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
 rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=
-sourcegraph.com/sourcegraph/appdash v0.0.0-20180110180208-2cc67fd64755/go.mod h1:hI742Nqp5OhwiqlzhgfbWU4mW4yO10fP+LoT9WOswdU=
+sourcegraph.com/sourcegraph/appdash v0.0.0-20190731080439-ebfcffb1b5c0/go.mod h1:hI742Nqp5OhwiqlzhgfbWU4mW4yO10fP+LoT9WOswdU=
 sourcegraph.com/sourcegraph/appdash-data v0.0.0-20151005221446-73f23eafcf67/go.mod h1:L5q+DGLGOQFpo1snNEkLOJT2d1YTW66rWNzatr3He1k=

server/graph/model/models_gen.go

@@ -2,19 +2,18 @@
 
 package model
 
-type AdminUpdateUserInput struct {
-	ID        string    `json:"id"`
-	Email     *string   `json:"email"`
-	FirstName *string   `json:"firstName"`
-	LastName  *string   `json:"lastName"`
-	Image     *string   `json:"image"`
-	Roles     []*string `json:"roles"`
+type AdminLoginInput struct {
+	AdminSecret string `json:"admin_secret"`
+}
+
+type AdminSignupInput struct {
+	AdminSecret string `json:"admin_secret"`
 }
 
 type AuthResponse struct {
 	Message     string  `json:"message"`
-	AccessToken          *string `json:"accessToken"`
-	AccessTokenExpiresAt *int64  `json:"accessTokenExpiresAt"`
+	AccessToken *string `json:"access_token"`
+	ExpiresAt   *int64  `json:"expires_at"`
 	User        *User   `json:"user"`
 }
 
@@ -22,6 +21,43 @@ type DeleteUserInput struct {
 	Email string `json:"email"`
 }
 
+type Env struct {
+	AdminSecret                *string  `json:"ADMIN_SECRET"`
+	DatabaseName               *string  `json:"DATABASE_NAME"`
+	DatabaseURL                *string  `json:"DATABASE_URL"`
+	DatabaseType               *string  `json:"DATABASE_TYPE"`
+	CustomAccessTokenScript    *string  `json:"CUSTOM_ACCESS_TOKEN_SCRIPT"`
+	SMTPHost                   *string  `json:"SMTP_HOST"`
+	SMTPPort                   *string  `json:"SMTP_PORT"`
+	SMTPUsername               *string  `json:"SMTP_USERNAME"`
+	SMTPPassword               *string  `json:"SMTP_PASSWORD"`
+	SenderEmail                *string  `json:"SENDER_EMAIL"`
+	JwtType                    *string  `json:"JWT_TYPE"`
+	JwtSecret                  *string  `json:"JWT_SECRET"`
+	AllowedOrigins             []string `json:"ALLOWED_ORIGINS"`
+	AuthorizerURL              *string  `json:"AUTHORIZER_URL"`
+	AppURL                     *string  `json:"APP_URL"`
+	RedisURL                   *string  `json:"REDIS_URL"`
+	CookieName                 *string  `json:"COOKIE_NAME"`
+	ResetPasswordURL           *string  `json:"RESET_PASSWORD_URL"`
+	DisableEmailVerification   *bool    `json:"DISABLE_EMAIL_VERIFICATION"`
+	DisableBasicAuthentication *bool    `json:"DISABLE_BASIC_AUTHENTICATION"`
+	DisableMagicLinkLogin      *bool    `json:"DISABLE_MAGIC_LINK_LOGIN"`
+	DisableLoginPage           *bool    `json:"DISABLE_LOGIN_PAGE"`
+	Roles                      []string `json:"ROLES"`
+	ProtectedRoles             []string `json:"PROTECTED_ROLES"`
+	DefaultRoles               []string `json:"DEFAULT_ROLES"`
+	JwtRoleClaim               *string  `json:"JWT_ROLE_CLAIM"`
+	GoogleClientID             *string  `json:"GOOGLE_CLIENT_ID"`
+	GoogleClientSecret         *string  `json:"GOOGLE_CLIENT_SECRET"`
+	GithubClientID             *string  `json:"GITHUB_CLIENT_ID"`
+	GithubClientSecret         *string  `json:"GITHUB_CLIENT_SECRET"`
+	FacebookClientID           *string  `json:"FACEBOOK_CLIENT_ID"`
+	FacebookClientSecret       *string  `json:"FACEBOOK_CLIENT_SECRET"`
+	OrganizationName           *string  `json:"ORGANIZATION_NAME"`
+	OrganizationLogo           *string  `json:"ORGANIZATION_LOGO"`
+}
+
 type Error struct {
 	Message string `json:"message"`
 	Reason  string `json:"reason"`
@@ -31,73 +67,153 @@ type ForgotPasswordInput struct {
 	Email string `json:"email"`
 }
 
+type IsValidJWTQueryInput struct {
+	Jwt   *string  `json:"jwt"`
+	Roles []string `json:"roles"`
+}
+
 type LoginInput struct {
 	Email    string   `json:"email"`
 	Password string   `json:"password"`
 	Roles    []string `json:"roles"`
 }
 
-type MagicLoginInput struct {
+type MagicLinkLoginInput struct {
 	Email string   `json:"email"`
 	Roles []string `json:"roles"`
 }
 
 type Meta struct {
 	Version                      string `json:"version"`
-	IsGoogleLoginEnabled         bool   `json:"isGoogleLoginEnabled"`
-	IsFacebookLoginEnabled       bool   `json:"isFacebookLoginEnabled"`
-	IsTwitterLoginEnabled        bool   `json:"isTwitterLoginEnabled"`
-	IsGithubLoginEnabled         bool   `json:"isGithubLoginEnabled"`
-	IsEmailVerificationEnabled   bool   `json:"isEmailVerificationEnabled"`
-	IsBasicAuthenticationEnabled bool   `json:"isBasicAuthenticationEnabled"`
-	IsMagicLoginEnabled          bool   `json:"isMagicLoginEnabled"`
+	IsGoogleLoginEnabled         bool   `json:"is_google_login_enabled"`
+	IsFacebookLoginEnabled       bool   `json:"is_facebook_login_enabled"`
+	IsGithubLoginEnabled         bool   `json:"is_github_login_enabled"`
+	IsEmailVerificationEnabled   bool   `json:"is_email_verification_enabled"`
+	IsBasicAuthenticationEnabled bool   `json:"is_basic_authentication_enabled"`
+	IsMagicLinkLoginEnabled      bool   `json:"is_magic_link_login_enabled"`
 }
 
 type ResendVerifyEmailInput struct {
 	Email      string `json:"email"`
+	Identifier string `json:"identifier"`
 }
 
 type ResetPasswordInput struct {
 	Token           string `json:"token"`
 	Password        string `json:"password"`
-	ConfirmPassword string `json:"confirmPassword"`
+	ConfirmPassword string `json:"confirm_password"`
 }
 
 type Response struct {
 	Message string `json:"message"`
 }
 
-type SignUpInput struct {
-	FirstName       *string  `json:"firstName"`
-	LastName        *string  `json:"lastName"`
-	Email           string   `json:"email"`
-	Password        string   `json:"password"`
-	ConfirmPassword string   `json:"confirmPassword"`
-	Image           *string  `json:"image"`
+type SessionQueryInput struct {
 	Roles []string `json:"roles"`
 }
 
+type SignUpInput struct {
+	Email           string   `json:"email"`
+	GivenName       *string  `json:"given_name"`
+	FamilyName      *string  `json:"family_name"`
+	MiddleName      *string  `json:"middle_name"`
+	Nickname        *string  `json:"nickname"`
+	Gender          *string  `json:"gender"`
+	Birthdate       *string  `json:"birthdate"`
+	PhoneNumber     *string  `json:"phone_number"`
+	Picture         *string  `json:"picture"`
+	Password        string   `json:"password"`
+	ConfirmPassword string   `json:"confirm_password"`
+	Roles           []string `json:"roles"`
+}
+
+type UpdateEnvInput struct {
+	AdminSecret                *string  `json:"ADMIN_SECRET"`
+	CustomAccessTokenScript    *string  `json:"CUSTOM_ACCESS_TOKEN_SCRIPT"`
+	OldAdminSecret             *string  `json:"OLD_ADMIN_SECRET"`
+	SMTPHost                   *string  `json:"SMTP_HOST"`
+	SMTPPort                   *string  `json:"SMTP_PORT"`
+	SenderEmail                *string  `json:"SENDER_EMAIL"`
+	SenderPassword             *string  `json:"SENDER_PASSWORD"`
+	JwtType                    *string  `json:"JWT_TYPE"`
+	JwtSecret                  *string  `json:"JWT_SECRET"`
+	AllowedOrigins             []string `json:"ALLOWED_ORIGINS"`
+	AuthorizerURL              *string  `json:"AUTHORIZER_URL"`
+	AppURL                     *string  `json:"APP_URL"`
+	RedisURL                   *string  `json:"REDIS_URL"`
+	CookieName                 *string  `json:"COOKIE_NAME"`
+	ResetPasswordURL           *string  `json:"RESET_PASSWORD_URL"`
+	DisableEmailVerification   *bool    `json:"DISABLE_EMAIL_VERIFICATION"`
+	DisableBasicAuthentication *bool    `json:"DISABLE_BASIC_AUTHENTICATION"`
+	DisableMagicLinkLogin      *bool    `json:"DISABLE_MAGIC_LINK_LOGIN"`
+	DisableLoginPage           *bool    `json:"DISABLE_LOGIN_PAGE"`
+	Roles                      []string `json:"ROLES"`
+	ProtectedRoles             []string `json:"PROTECTED_ROLES"`
+	DefaultRoles               []string `json:"DEFAULT_ROLES"`
+	JwtRoleClaim               *string  `json:"JWT_ROLE_CLAIM"`
+	GoogleClientID             *string  `json:"GOOGLE_CLIENT_ID"`
+	GoogleClientSecret         *string  `json:"GOOGLE_CLIENT_SECRET"`
+	GithubClientID             *string  `json:"GITHUB_CLIENT_ID"`
+	GithubClientSecret         *string  `json:"GITHUB_CLIENT_SECRET"`
+	FacebookClientID           *string  `json:"FACEBOOK_CLIENT_ID"`
+	FacebookClientSecret       *string  `json:"FACEBOOK_CLIENT_SECRET"`
+	OrganizationName           *string  `json:"ORGANIZATION_NAME"`
+	OrganizationLogo           *string  `json:"ORGANIZATION_LOGO"`
+}
+
 type UpdateProfileInput struct {
-	OldPassword        *string `json:"oldPassword"`
-	NewPassword        *string `json:"newPassword"`
-	ConfirmNewPassword *string `json:"confirmNewPassword"`
-	FirstName          *string `json:"firstName"`
-	LastName           *string `json:"lastName"`
-	Image              *string `json:"image"`
+	OldPassword        *string `json:"old_password"`
+	NewPassword        *string `json:"new_password"`
+	ConfirmNewPassword *string `json:"confirm_new_password"`
 	Email              *string `json:"email"`
+	GivenName          *string `json:"given_name"`
+	FamilyName         *string `json:"family_name"`
+	MiddleName         *string `json:"middle_name"`
+	Nickname           *string `json:"nickname"`
+	Gender             *string `json:"gender"`
+	Birthdate          *string `json:"birthdate"`
+	PhoneNumber        *string `json:"phone_number"`
+	Picture            *string `json:"picture"`
+}
+
+type UpdateUserInput struct {
+	ID            string    `json:"id"`
+	Email         *string   `json:"email"`
+	EmailVerified *bool     `json:"email_verified"`
+	GivenName     *string   `json:"given_name"`
+	FamilyName    *string   `json:"family_name"`
+	MiddleName    *string   `json:"middle_name"`
+	Nickname      *string   `json:"nickname"`
+	Gender        *string   `json:"gender"`
+	Birthdate     *string   `json:"birthdate"`
+	PhoneNumber   *string   `json:"phone_number"`
+	Picture       *string   `json:"picture"`
+	Roles         []*string `json:"roles"`
 }
 
 type User struct {
 	ID                  string   `json:"id"`
 	Email               string   `json:"email"`
-	SignupMethod    string   `json:"signupMethod"`
-	FirstName       *string  `json:"firstName"`
-	LastName        *string  `json:"lastName"`
-	EmailVerifiedAt *int64   `json:"emailVerifiedAt"`
-	Image           *string  `json:"image"`
-	CreatedAt       *int64   `json:"createdAt"`
-	UpdatedAt       *int64   `json:"updatedAt"`
+	EmailVerified       bool     `json:"email_verified"`
+	SignupMethods       string   `json:"signup_methods"`
+	GivenName           *string  `json:"given_name"`
+	FamilyName          *string  `json:"family_name"`
+	MiddleName          *string  `json:"middle_name"`
+	Nickname            *string  `json:"nickname"`
+	PreferredUsername   *string  `json:"preferred_username"`
+	Gender              *string  `json:"gender"`
+	Birthdate           *string  `json:"birthdate"`
+	PhoneNumber         *string  `json:"phone_number"`
+	PhoneNumberVerified *bool    `json:"phone_number_verified"`
+	Picture             *string  `json:"picture"`
 	Roles               []string `json:"roles"`
+	CreatedAt           *int64   `json:"created_at"`
+	UpdatedAt           *int64   `json:"updated_at"`
+}
+
+type ValidJWTResponse struct {
+	Valid   bool   `json:"valid"`
+	Message string `json:"message"`
 }
 
 type VerificationRequest struct {
@@ -106,8 +222,8 @@ type VerificationRequest struct {
 	Token      *string `json:"token"`
 	Email      *string `json:"email"`
 	Expires    *int64  `json:"expires"`
-	CreatedAt  *int64  `json:"createdAt"`
-	UpdatedAt  *int64  `json:"updatedAt"`
+	CreatedAt  *int64  `json:"created_at"`
+	UpdatedAt  *int64  `json:"updated_at"`
 }
 
 type VerifyEmailInput struct {

server/graph/schema.graphqls

@@ -7,26 +7,33 @@ scalar Any
 
 type Meta {
 	version: String!
-	isGoogleLoginEnabled: Boolean!
-	isFacebookLoginEnabled: Boolean!
-	isTwitterLoginEnabled: Boolean!
-	isGithubLoginEnabled: Boolean!
-	isEmailVerificationEnabled: Boolean!
-	isBasicAuthenticationEnabled: Boolean!
-	isMagicLoginEnabled: Boolean!
+	is_google_login_enabled: Boolean!
+	is_facebook_login_enabled: Boolean!
+	is_github_login_enabled: Boolean!
+	is_email_verification_enabled: Boolean!
+	is_basic_authentication_enabled: Boolean!
+	is_magic_link_login_enabled: Boolean!
 }
 
 type User {
 	id: ID!
 	email: String!
-	signupMethod: String!
-	firstName: String
-	lastName: String
-	emailVerifiedAt: Int64
-	image: String
-	createdAt: Int64
-	updatedAt: Int64
+	email_verified: Boolean!
+	signup_methods: String!
+	given_name: String
+	family_name: String
+	middle_name: String
+	nickname: String
+	# defaults to email
+	preferred_username: String
+	gender: String
+	birthdate: String
+	phone_number: String
+	phone_number_verified: Boolean
+	picture: String
 	roles: [String!]!
+	created_at: Int64
+	updated_at: Int64
 }
 
 type VerificationRequest {
@@ -35,8 +42,8 @@ type VerificationRequest {
 	token: String
 	email: String
 	expires: Int64
-	createdAt: Int64
-	updatedAt: Int64
+	created_at: Int64
+	updated_at: Int64
 }
 
 type Error {
@@ -46,8 +53,8 @@ type Error {
 
 type AuthResponse {
 	message: String!
-	accessToken: String
-	accessTokenExpiresAt: Int64
+	access_token: String
+	expires_at: Int64
 	user: User
 }
 
@@ -55,13 +62,102 @@ type Response {
 	message: String!
 }
 
+type ValidJWTResponse {
+	valid: Boolean!
+	message: String!
+}
+
+type Env {
+	ADMIN_SECRET: String
+	DATABASE_NAME: String
+	DATABASE_URL: String
+	DATABASE_TYPE: String
+	CUSTOM_ACCESS_TOKEN_SCRIPT: String
+	SMTP_HOST: String
+	SMTP_PORT: String
+	SMTP_USERNAME: String
+	SMTP_PASSWORD: String
+	SENDER_EMAIL: String
+	JWT_TYPE: String
+	JWT_SECRET: String
+	ALLOWED_ORIGINS: [String!]
+	AUTHORIZER_URL: String
+	APP_URL: String
+	REDIS_URL: String
+	COOKIE_NAME: String
+	RESET_PASSWORD_URL: String
+	DISABLE_EMAIL_VERIFICATION: Boolean
+	DISABLE_BASIC_AUTHENTICATION: Boolean
+	DISABLE_MAGIC_LINK_LOGIN: Boolean
+	DISABLE_LOGIN_PAGE: Boolean
+	ROLES: [String!]
+	PROTECTED_ROLES: [String!]
+	DEFAULT_ROLES: [String!]
+	JWT_ROLE_CLAIM: String
+	GOOGLE_CLIENT_ID: String
+	GOOGLE_CLIENT_SECRET: String
+	GITHUB_CLIENT_ID: String
+	GITHUB_CLIENT_SECRET: String
+	FACEBOOK_CLIENT_ID: String
+	FACEBOOK_CLIENT_SECRET: String
+	ORGANIZATION_NAME: String
+	ORGANIZATION_LOGO: String
+}
+
+input UpdateEnvInput {
+	ADMIN_SECRET: String
+	CUSTOM_ACCESS_TOKEN_SCRIPT: String
+	OLD_ADMIN_SECRET: String
+	SMTP_HOST: String
+	SMTP_PORT: String
+	SENDER_EMAIL: String
+	SENDER_PASSWORD: String
+	JWT_TYPE: String
+	JWT_SECRET: String
+	ALLOWED_ORIGINS: [String!]
+	AUTHORIZER_URL: String
+	APP_URL: String
+	REDIS_URL: String
+	COOKIE_NAME: String
+	RESET_PASSWORD_URL: String
+	DISABLE_EMAIL_VERIFICATION: Boolean
+	DISABLE_BASIC_AUTHENTICATION: Boolean
+	DISABLE_MAGIC_LINK_LOGIN: Boolean
+	DISABLE_LOGIN_PAGE: Boolean
+	ROLES: [String!]
+	PROTECTED_ROLES: [String!]
+	DEFAULT_ROLES: [String!]
+	JWT_ROLE_CLAIM: String
+	GOOGLE_CLIENT_ID: String
+	GOOGLE_CLIENT_SECRET: String
+	GITHUB_CLIENT_ID: String
+	GITHUB_CLIENT_SECRET: String
+	FACEBOOK_CLIENT_ID: String
+	FACEBOOK_CLIENT_SECRET: String
+	ORGANIZATION_NAME: String
+	ORGANIZATION_LOGO: String
+}
+
+input AdminLoginInput {
+	admin_secret: String!
+}
+
+input AdminSignupInput {
+	admin_secret: String!
+}
+
 input SignUpInput {
-	firstName: String
-	lastName: String
 	email: String!
+	given_name: String
+	family_name: String
+	middle_name: String
+	nickname: String
+	gender: String
+	birthdate: String
+	phone_number: String
+	picture: String
 	password: String!
-	confirmPassword: String!
-	image: String
+	confirm_password: String!
 	roles: [String!]
 }
 
@@ -77,25 +173,36 @@ input VerifyEmailInput {
 
 input ResendVerifyEmailInput {
 	email: String!
+	identifier: String!
 }
 
 input UpdateProfileInput {
-	oldPassword: String
-	newPassword: String
-	confirmNewPassword: String
-	firstName: String
-	lastName: String
-	image: String
+	old_password: String
+	new_password: String
+	confirm_new_password: String
 	email: String
-	# roles: [String]
+	given_name: String
+	family_name: String
+	middle_name: String
+	nickname: String
+	gender: String
+	birthdate: String
+	phone_number: String
+	picture: String
 }
 
-input AdminUpdateUserInput {
+input UpdateUserInput {
 	id: ID!
 	email: String
-	firstName: String
-	lastName: String
-	image: String
+	email_verified: Boolean
+	given_name: String
+	family_name: String
+	middle_name: String
+	nickname: String
+	gender: String
+	birthdate: String
+	phone_number: String
+	picture: String
 	roles: [String]
 }
 
@@ -106,36 +213,54 @@ input ForgotPasswordInput {
 input ResetPasswordInput {
 	token: String!
 	password: String!
-	confirmPassword: String!
+	confirm_password: String!
 }
 
 input DeleteUserInput {
 	email: String!
 }
 
-input MagicLoginInput {
+input MagicLinkLoginInput {
 	email: String!
 	roles: [String!]
 }
 
+input SessionQueryInput {
+	roles: [String!]
+}
+
+input IsValidJWTQueryInput {
+	jwt: String
+	roles: [String!]
+}
+
 type Mutation {
 	signup(params: SignUpInput!): AuthResponse!
 	login(params: LoginInput!): AuthResponse!
-	magicLogin(params: MagicLoginInput!): Response!
+	magic_link_login(params: MagicLinkLoginInput!): Response!
 	logout: Response!
-	updateProfile(params: UpdateProfileInput!): Response!
-	adminUpdateUser(params: AdminUpdateUserInput!): User!
-	verifyEmail(params: VerifyEmailInput!): AuthResponse!
-	resendVerifyEmail(params: ResendVerifyEmailInput!): Response!
-	forgotPassword(params: ForgotPasswordInput!): Response!
-	resetPassword(params: ResetPasswordInput!): Response!
-	deleteUser(params: DeleteUserInput!): Response!
+	update_profile(params: UpdateProfileInput!): Response!
+	verify_email(params: VerifyEmailInput!): AuthResponse!
+	resend_verify_email(params: ResendVerifyEmailInput!): Response!
+	forgot_password(params: ForgotPasswordInput!): Response!
+	reset_password(params: ResetPasswordInput!): Response!
+	# admin only apis
+	_delete_user(params: DeleteUserInput!): Response!
+	_update_user(params: UpdateUserInput!): User!
+	_admin_signup(params: AdminSignupInput!): Response!
+	_admin_login(params: AdminLoginInput!): Response!
+	_admin_logout: Response!
+	_update_env(params: UpdateEnvInput!): Response!
 }
 
 type Query {
 	meta: Meta!
-	users: [User!]!
-	token(roles: [String!]): AuthResponse
+	session(params: SessionQueryInput): AuthResponse!
+	is_valid_jwt(params: IsValidJWTQueryInput): ValidJWTResponse!
 	profile: User!
-	verificationRequests: [VerificationRequest!]!
+	# admin only apis
+	_users: [User!]!
+	_verification_requests: [VerificationRequest!]!
+	_admin_session: Response!
+	_env: Env!
 }

server/graph/schema.resolvers.go

@@ -12,67 +12,95 @@ import (
 )
 
 func (r *mutationResolver) Signup(ctx context.Context, params model.SignUpInput) (*model.AuthResponse, error) {
-	return resolvers.Signup(ctx, params)
+	return resolvers.SignupResolver(ctx, params)
 }
 
 func (r *mutationResolver) Login(ctx context.Context, params model.LoginInput) (*model.AuthResponse, error) {
-	return resolvers.Login(ctx, params)
+	return resolvers.LoginResolver(ctx, params)
 }
 
-func (r *mutationResolver) MagicLogin(ctx context.Context, params model.MagicLoginInput) (*model.Response, error) {
-	return resolvers.MagicLogin(ctx, params)
+func (r *mutationResolver) MagicLinkLogin(ctx context.Context, params model.MagicLinkLoginInput) (*model.Response, error) {
+	return resolvers.MagicLinkLoginResolver(ctx, params)
 }
 
 func (r *mutationResolver) Logout(ctx context.Context) (*model.Response, error) {
-	return resolvers.Logout(ctx)
+	return resolvers.LogoutResolver(ctx)
 }
 
 func (r *mutationResolver) UpdateProfile(ctx context.Context, params model.UpdateProfileInput) (*model.Response, error) {
-	return resolvers.UpdateProfile(ctx, params)
-}
-
-func (r *mutationResolver) AdminUpdateUser(ctx context.Context, params model.AdminUpdateUserInput) (*model.User, error) {
-	return resolvers.AdminUpdateUser(ctx, params)
+	return resolvers.UpdateProfileResolver(ctx, params)
 }
 
 func (r *mutationResolver) VerifyEmail(ctx context.Context, params model.VerifyEmailInput) (*model.AuthResponse, error) {
-	return resolvers.VerifyEmail(ctx, params)
+	return resolvers.VerifyEmailResolver(ctx, params)
 }
 
 func (r *mutationResolver) ResendVerifyEmail(ctx context.Context, params model.ResendVerifyEmailInput) (*model.Response, error) {
-	return resolvers.ResendVerifyEmail(ctx, params)
+	return resolvers.ResendVerifyEmailResolver(ctx, params)
 }
 
 func (r *mutationResolver) ForgotPassword(ctx context.Context, params model.ForgotPasswordInput) (*model.Response, error) {
-	return resolvers.ForgotPassword(ctx, params)
+	return resolvers.ForgotPasswordResolver(ctx, params)
 }
 
 func (r *mutationResolver) ResetPassword(ctx context.Context, params model.ResetPasswordInput) (*model.Response, error) {
-	return resolvers.ResetPassword(ctx, params)
+	return resolvers.ResetPasswordResolver(ctx, params)
 }
 
 func (r *mutationResolver) DeleteUser(ctx context.Context, params model.DeleteUserInput) (*model.Response, error) {
-	return resolvers.DeleteUser(ctx, params)
+	return resolvers.DeleteUserResolver(ctx, params)
+}
+
+func (r *mutationResolver) UpdateUser(ctx context.Context, params model.UpdateUserInput) (*model.User, error) {
+	return resolvers.UpdateUserResolver(ctx, params)
+}
+
+func (r *mutationResolver) AdminSignup(ctx context.Context, params model.AdminSignupInput) (*model.Response, error) {
+	return resolvers.AdminSignupResolver(ctx, params)
+}
+
+func (r *mutationResolver) AdminLogin(ctx context.Context, params model.AdminLoginInput) (*model.Response, error) {
+	return resolvers.AdminLoginResolver(ctx, params)
+}
+
+func (r *mutationResolver) AdminLogout(ctx context.Context) (*model.Response, error) {
+	return resolvers.AdminLogoutResolver(ctx)
+}
+
+func (r *mutationResolver) UpdateEnv(ctx context.Context, params model.UpdateEnvInput) (*model.Response, error) {
+	return resolvers.UpdateEnvResolver(ctx, params)
 }
 
 func (r *queryResolver) Meta(ctx context.Context) (*model.Meta, error) {
-	return resolvers.Meta(ctx)
+	return resolvers.MetaResolver(ctx)
 }
 
-func (r *queryResolver) Users(ctx context.Context) ([]*model.User, error) {
-	return resolvers.Users(ctx)
+func (r *queryResolver) Session(ctx context.Context, params *model.SessionQueryInput) (*model.AuthResponse, error) {
+	return resolvers.SessionResolver(ctx, params)
 }
 
-func (r *queryResolver) Token(ctx context.Context, roles []string) (*model.AuthResponse, error) {
-	return resolvers.Token(ctx, roles)
+func (r *queryResolver) IsValidJwt(ctx context.Context, params *model.IsValidJWTQueryInput) (*model.ValidJWTResponse, error) {
+	return resolvers.IsValidJwtResolver(ctx, params)
 }
 
 func (r *queryResolver) Profile(ctx context.Context) (*model.User, error) {
-	return resolvers.Profile(ctx)
+	return resolvers.ProfileResolver(ctx)
+}
+
+func (r *queryResolver) Users(ctx context.Context) ([]*model.User, error) {
+	return resolvers.UsersResolver(ctx)
 }
 
 func (r *queryResolver) VerificationRequests(ctx context.Context) ([]*model.VerificationRequest, error) {
-	return resolvers.VerificationRequests(ctx)
+	return resolvers.VerificationRequestsResolver(ctx)
+}
+
+func (r *queryResolver) AdminSession(ctx context.Context) (*model.Response, error) {
+	return resolvers.AdminSessionResolver(ctx)
+}
+
+func (r *queryResolver) Env(ctx context.Context) (*model.Env, error) {
+	return resolvers.EnvResolver(ctx)
 }
 
 // Mutation returns generated.MutationResolver implementation.