Andriy Oblivantsev
a5a97a0ad9
CI / test (push) Successful in 5s
- Register by signing service key: GET /v1/service-key, POST /v1/auth/register-by-signature - Login auto-attempts register first for new users - Web: default API URL momswap.produktor.duckdns.org, /libs/ static handler - Docker: webbuild stage for geo-api-client, copy web+libs to runtime - Bin scripts: test.sh, run.sh, up.sh, down.sh - docs/ed25519-security-use-cases.md: use cases, message formats, examples - SERVICE_PUBLIC_KEY env (defaults to ADMIN_PUBLIC_KEY) Made-with: Cursor
114 lines
2.8 KiB
Markdown
114 lines
2.8 KiB
Markdown
# Momswap Geo Backend
|
|
|
|
Go backend service for user-owned GeoJSON feature collections with Ed25519 authentication and invitation-based onboarding.
|
|
|
|
## What is implemented
|
|
|
|
- Ed25519 challenge-response auth (`/v1/auth/challenge`, `/v1/auth/login`)
|
|
- Hybrid invitation onboarding (signed invite payload + inviter lineage)
|
|
- User registration with ownership proof (`/v1/auth/register`)
|
|
- Per-user collections and Point feature CRUD endpoints
|
|
- Static no-build frontend (`web/`) using Vue + Vuetify from CDN
|
|
- Reusable TypeScript API client (`libs/geo-api-client`) using `@noble/ed25519`
|
|
- Bun tests for the TS client and Go tests for API flows
|
|
- Gitea CI workflow running Go and Bun test suites
|
|
|
|
## Quick start
|
|
|
|
```bash
|
|
go test ./...
|
|
go run ./cmd/api
|
|
```
|
|
|
|
Run tests via Docker (avoids local permission issues, e.g. `var/`):
|
|
|
|
```bash
|
|
docker compose --profile test run --rm test
|
|
```
|
|
|
|
Primary deployed base URL: `https://momswap.produktor.duckdns.org/`.
|
|
|
|
Local default (for development): `http://localhost:8122`.
|
|
|
|
Optional environment variables:
|
|
|
|
- `ADDR` (default `:8122`)
|
|
- `ADMIN_PUBLIC_KEY` (bootstrap initial inviter/admin user)
|
|
- `SERVICE_PUBLIC_KEY` (public key users sign to register; defaults to `ADMIN_PUBLIC_KEY`)
|
|
|
|
## Docker Compose
|
|
|
|
Build and run the backend service:
|
|
|
|
```bash
|
|
COMPOSE_BAKE=true docker compose up --build -d
|
|
```
|
|
|
|
This starts:
|
|
|
|
- `db` (`postgis/postgis`) on `5432`
|
|
- `api` on `8122`, wired with `DATABASE_URL` to the `db` service
|
|
|
|
Stop the service:
|
|
|
|
```bash
|
|
docker compose down
|
|
```
|
|
|
|
For local development with auto-rebuild on file changes:
|
|
|
|
```bash
|
|
COMPOSE_BAKE=true docker compose --profile dev up --watch
|
|
```
|
|
|
|
Notes:
|
|
|
|
- `api` service listens on `8122` inside the container, mapped to host `8122` (reverse proxy at `https://momswap.produktor.duckdns.org`).
|
|
- `api` service uses the production `runtime` image target.
|
|
- `api-dev` profile uses the `dev` image target and Docker Compose watch.
|
|
- DB defaults can be overridden via `POSTGRES_DB`, `POSTGRES_USER`, `POSTGRES_PASSWORD`.
|
|
|
|
## Frontend
|
|
|
|
Frontend is served by the Go backend at runtime.
|
|
|
|
Example:
|
|
|
|
```bash
|
|
go run ./cmd/api
|
|
```
|
|
|
|
Then visit:
|
|
|
|
- Production: `https://momswap.produktor.duckdns.org/web/`
|
|
- Local: `http://localhost:8122/web/`
|
|
|
|
## API client library
|
|
|
|
Path: `libs/geo-api-client`
|
|
|
|
```bash
|
|
cd libs/geo-api-client
|
|
bun install
|
|
bun test
|
|
bun run build
|
|
```
|
|
|
|
Frontend TypeScript integration guide:
|
|
|
|
- `docs/typescript-frontend-integration.md`
|
|
- `docs/ed25519-security-use-cases.md`
|
|
|
|
## CI
|
|
|
|
Workflow: `.gitea/workflows/ci.yml`
|
|
|
|
- `go test ./...`
|
|
- `bun test` in `libs/geo-api-client`
|
|
|
|
## Testing policy
|
|
|
|
- Keep fast unit tests as the default (`go test ./...`).
|
|
- If a test requires a real Postgres instance, use embedded/ephemeral Postgres in the test process or test fixture lifecycle.
|
|
- Do not require manually running an external Postgres container for routine test runs.
|