b1tk3y / full-auth-api

Full Auth API

---

To setup the project locally, follow these steps:

• open the .env.local file
• fill out the value for DJANGO_SECRET_KEY
• go to AWS
• log into your aws account, or create one if you don't have one
• navigate to the Simple Email Service (SES)
• validate 2 emails, one which will be the sender email, and the other the receiver email
• go to the SMTP settings, and click on Create SMTP credentials
• after creating the IAM user, next navigate to IAM
• under Access management, click on users
• click on the SES user that was created
• click on Add permissions, then add the AmazonSESReadOnlyAccess permission
• then go to Security credentials, and create a new access key
• take the access key and secret, and use them as the values in the AWS_SES_ACCESS_KEY_ID and AWS_SES_SECRET_ACCESS_KEY environment variables
• fill in the region where you set up the Simple Email Service in the AWS_SES_REGION_NAME environment variable
• fill in the email that will be sending emails in the AWS_SES_FROM_EMAIL environment variable
• go to google cloud HERE
• in the settings, hover over APIs & Services, and click on OAuth consent screen
• fill in the details for the OAuth consent screen
  • create an External user type
  • add the Authorized domains
  • under scopes, click ADD OR REMOVE SCOPES, add the ../auth/userinfo.email, ../auth/userinfo.profile, and openid scopes
  • under Test users, add your receiver email
• next go to the settings again, hover over APIS & Services, and click on Credentials
• click on CREATE CREDENTIALS, then click on OAuth client ID
• take the access key and secret, and use them as the values in the GOOGLE_AUTH_KEY and GOOGLE_AUTH_SECRET_KEY environment variables
• for Application type, you can select Web application
• under Authorized JavaScript origins, add http://localhost:3000
• under Authorized redirect URIs, add http://localhost:3000/auth/google
• to have this work in your production environment, do the following:
  • under Authorized JavaScript origins, add https://your-domain.com
  • under Authorized redirect URIs, add https://your-domain.com/auth/google
• go to facebook developers HERE
• navigate to My Apps, click on Create App, then click Set up Facebook Login, then click Next
• select Website and No, I'm not building a game, then click Next
• fill in your app name, then click Create app
• click on Use cases, then under Authentication and account creation, click the Edit button
• under the email permissions, click Add
• navigate to Basic under Settings
• take the App ID and App secret, and use them as the values in the FACEBOOK_AUTH_KEY and FACEBOOK_AUTH_SECRET_KEY environment variables
• under App domains, add localhost, and this is also where you can add your production domain
• navigate to Roles under App Roles
• click on Add Testers, and put into the field the value of a Facebook ID you will use to log into the app with
  • to get the value of a Facebook ID, simply log into the Facebook account, go to the profile page, then grab the ID from the URL
• to activate the tester account, with your tester account navigate to facebook developers HERE
• navigate to My Apps, and in the dropdown you will see a prompt to accept the account as a tester on the app
• next go to Products, under Facebook Login click Configure, then Settings
• for things to work in your development environment you don't need to fill in anything on this screen
• to have this work in your production environment, under Valid OAuth Redirect URIs, add https://your-domain.com/auth/facebook

---

Deployment on Digitalocean:

• to deploy, go to the following link HERE
• next go to the timestamp at 2:47:14, this is where I show the Digitalocean deployment