Auth Service

Links

• Swagger: https://authc.samstack.site/swagger
• Auth README: ../Auth/README.md

Core Capabilities

• Signup with OTP challenge/verification
• Signin with JWT + refresh token
• Allowed-domain config from database
• Admin session revocation
• Admin DB explorer endpoints for auth tables

Admin Endpoints (Auth)

• GET /api/admin/endpoints
• GET /api/admin/config/domains
• POST /api/admin/config/domains
• GET /api/admin/users/{userId}/sessions
• POST /api/admin/users/{userId}/sessions/{sessionId}/revoke
• GET /api/admin/db/tables
• GET /api/admin/db/tables/{table}/rows?limit=50&offset=0
• POST /api/admin/db/tables/{table}/rows
• PUT /api/admin/db/tables/{table}/rows
• DELETE /api/admin/db/tables/{table}/rows

Auth DB Explorer Scope

• AspNetUsers
• AspNetRoles
• AspNetUserRoles
• AspNetUserClaims
• AspNetUserLogins
• AspNetUserTokens
• AspNetRoleClaims
• Sessions
• OtpChallenges
• AppConfigs

Version + Logs

• Startup log prints service version and CORS origins
• Set version with env: AUTH_APP_VERSION (mapped to App__Version)
• Version endpoint: GET /api/meta/version
• Login/refresh/signup failures are logged with error details
• Authorization uses role claim role; admin policy expects admin

Troubleshooting

• 403 Forbidden: token is not admin; log out and sign in again with the admin account.
• 404 Not Found: running auth deployment is older than admin panel; redeploy auth service.
• Ensure server env source includes auth values (for your setup: /opt/clgStack/secrets/.env.auth).

README Quick View

Loading...