Develop and deploy sample web application that implements specific authorization scenario

The goal of this small project is to develop and deploy sample web application that implements specific authorization scenario.

Components to be developed:

1 - Authorization server. Communicates via WS protocol. Checks login/password and generates JWT-token. Create from scratch or use existing open-source solution if it suits requirements. Preferred language: Python

2 - Sample Data Provider server. Communicates via WS protocol. Sends local timestamp for all authorized clients with 1 second interval. Preferred language: Python

3 - Java-script web client. Communicates via HTTPS/WSS protocols. Contains login form and a panel for displaying online data received from data provider.

Deployment:

We provide 3 Linux environments:

1 - for hosting Nginx server

2 - for hosting Auth sever

3 - for hosting Data Provide server

Base Scenario:

1 - Client opens https address (of Nginx box) in browser and gets a login page

2 - Client fills-in login/pwd and hit submit button

3 - NGINX reroutes request to Auth server

4 - Auth server checks credentials and issues JWT token that contains login, issue time, client IP address. Token should be signed using symmetric-key algorithm

5 - Client gets check results and a token if check was successful

6 - Client upgrades HTTPS to WSS and sends request to Nginx to connect to Data Provider and supplies JWT-token.

7 - Nginx proxies connection to Data Provider (WSS=>WS)

8 - Data Provider gets JWT-token, checks signature, token issue time and (if time elapsed < 30 seconds) starts sending test data to the client

9 - Client starts to get test data (timestamps) and shows them in browser

JavaScript Linux Nginx Python Seguridad web

Nº del proyecto: #16287707

Sobre el proyecto