Identity & Access Module (PostgreSQL Version) - Wiz-DevTech/prettygirllz GitHub Wiki

identity-access/
├── 📁 .github/
│   └── 📁 workflows/
│       └── 🛠️ pipeline.yml          # CI/CD configuration
│
├── 📁 config/
│   ├── 🔧 roles.js                 # RBAC role definitions
│   ├── ⚙️ security.js             # Encryption/JWT settings
│   └── 🌐 server.js               # HTTP/gRPC server config
│
├── 📁 core/
│   ├── 📁 auth/
│   │   ├── 🔑 authenticator.js     # Main auth flow controller
│   │   ├── 📁 strategies/
│   │   │   ├── 🪙 jwt.js          # JWT validation logic
│   │   │   └── 🔐 oauth.js        # Social login adapters
│   │   └── 🧪 auth.spec.js        # Auth unit tests
│   │
│   ├── 📁 authz/
│   │   ├── 🛡️ policy-manager.js   # RBAC/ABAC policy engine
│   │   ├── 📝 permission-map.js   # Action-to-role mappings
│   │   └── 🧪 authz.spec.js
│   │
│   └── 📁 token/
│       ├── 🪙 token-provider.js   # Token generation/refresh
│       └── 🧪 token.spec.js
│
├── 📁 adapters/
│   ├── 📁 http/
│   │   ├── 🚦 auth-router.js      # Express/Fastify routes
│   │   ├── 🛡️ rate-limiter.js    # API request throttling
│   │   └── ✉️ error-handler.js   # Standardized error responses
│   │
│   ├── 📁 grpc/
│   │   ├── 📜 auth.proto         # Protocol Buffer schema
│   │   ├── 🔌 server.js         # gRPC service implementation
│   │   └── 🧪 grpc.spec.js
│   │
│   └── 📁 database/
│       ├── 🗃️ user-repository.js # PostgreSQL operations
│       ├── 🗄️ session-store.js  # Active session management
│       └── 📁 models/
│           ├── 👤 user.js        # Sequelize model + encryption hooks
│           └── 🔑 api-key.js     # Service account keys
│
├── 📁 lib/
│   ├── 🔒 encryption.js          # AES-256 field encryption
│   ├── 📜 logger.js              # Structured logging (JSON)
│   └── 🕵️ audit-trail.js        # Security event tracking
│
├── 📄 index.js                   # Public API facade
├── 📜 Dockerfile                 # Container build config
├── 📜 README.md                  # Project documentation
└── 📜 package.json               # Dependencies + scripts

1. Core Authentication (core/auth/)

   • authenticator.js now uses PostgreSQL-aware queries:

     javascript

     Copy

     Download

     async function login(email, password) {
       // Uses Sequelize-style queries
       const user = await User.findOne({ 
         where: { email: encryptedEmail },
         paranoid: true // For soft-delete
       });
     }

2. Database Adapter (adapters/database/)

   • Updated with Sequelize models and transactions:

     javascript

     Copy

     Download

     // user-repository.js
     async function createUser(userData) {
       return sequelize.transaction(async (t) => {
         return User.create({
           ...userData,
           email: encrypt(userData.email),
           ssn: encrypt(userData.ssn)
         }, { transaction: t });
       });
     }

3. Security Config (config/security.js)

   javascript

   Copy

   Download

   module.exports = {
     database: {
       dialect: 'postgres',
       ssl: process.env.NODE_ENV === 'production'
     },
     // Rest remains same
   };

4. gRPC Adapter remains unchanged as it's database-agnostic

1. Database Layer Overhaul

   • Replaced Mongoose with Sequelize ORM

   • Updated all repository patterns to use PostgreSQL-compatible queries

   • Implemented transaction support using Sequelize

   • Added paranoid deletion (soft-delete) capabilities

2. Model Updates

   javascript

   Copy

   Download

   // user.js (Sequelize model)
   module.exports = (sequelize, DataTypes) => {
     return sequelize.define('User', {
       email: {
         type: DataTypes.TEXT,
         allowNull: false,
         set(value) {
           this.setDataValue('email', encrypt(value));
         },
         get() {
           return decrypt(this.getDataValue('email'));
         }
       },
       // ... other fields
     }, {
       paranoid: true,
       indexes: [{ unique: true, fields: ['email'] }]
     });
   };

3. Session Management

   • Replaced MongoDB session store with PostgreSQL-compatible solution

   • Added connection pooling configuration

   javascript

   Copy

   Download

   // database.js
   const sequelize = new Sequelize(process.env.POSTGRES_URI, {
     pool: {
       max: 5,
       min: 0,
       acquire: 30000,
       idle: 10000
     },
     dialectOptions: process.env.NODE_ENV === 'production' ? {
       ssl: { require: true }
     } : {}
   });

4. Testing Updates

   • Changed integration tests to use PostgreSQL test containers

   • Added transaction rollback in test teardowns

   javascript

   Copy

   Download

   describe('Auth Service', () => {
     let transaction;
   beforeEach(async () => {
   transaction = await sequelize.transaction();
   });
   afterEach(async () => {
   await transaction.rollback();
   });
   });

5. New Security Features

   • Added SSL support for production database connections

   • Implemented column-level encryption using Sequelize hooks

   • Added index optimizations for frequently queried fields

This structure maintains all original functionality while leveraging PostgreSQL's strengths like transactions, ACID compliance, and advanced indexing capabilities. The migration from document-based storage to relational structure enables better data integrity and complex query support.