tech-challenge-log-in

This repository contains Terraform modules for AWS resources.

Structure of the Repository

The repository is structured as follows:

./
|   .gitignore
|   Dockerfile
|   README.md
|
+---.github
|   \---workflows
|           deploy-project.yaml
|
+---iac
|   |   backend.tf
|   |   locals.tf
|   |   main.tf
|   |   output.tf
|   |   provider.tf
|   |   variables.tf
|   |   versions.tf
|   |
|   \---modules
|       \---generic
|               locals.tf
|               main.tf
|               output.tf
|               variables_aws_api_gateway.tf
|               variables_aws_cognito.tf
|               variables_aws_ecr_repository.tf
|               variables_aws_lambda_event_source_mapping.tf
|               variables_lambda_function.tf
|               variables_lambda_permission.tf
|               versions.tf
|
\---src
        lambda_function.py

Modules Generic

• This generic module executes the download of remote modules from the repository terraform-modules-remotes.
  • The generic module is located in the directory ./iac/modules/generic.

• This project utilization modules:
  • aws_ecr_repositorys
  • aws_ecr_repository_policy
  • aws_lambda_function
  • aws_lambda_permission
  • aws_api_gateway_rest_api
  • aws_api_gateway_resource
  • aws_api_gateway_method
  • aws_api_gateway_integration
  • aws_api_gateway_deployment
  • aws_api_gateway_stage

Lambda Function

The lambda_function.py is a key component of this repository, which contains Terraform modules for AWS resources. This function enables the login in an Amazon Cognito User Pool by collecting username, password and email, after this it return a token to use the other endpoint of the service.

---

Key Features:

Receives User Credentials: The function accepts an event containing the username and password. Authenticates User: It uses the provided credentials to authenticate the user in Cognito and return token. Handles Errors: Provides appropriate error messages if the authentication fails.

---

How It Works:

Necessary Imports: Utilizes libraries such as boto3 for interacting with Cognito and hmac for generating an authentication hash.

Calculates Secret Hash: Generates a secret hash using HMAC and SHA-256, which is required for the authentication request.

Event Handling: Processes the incoming event to extract user credentials.

User Authentication in Cognito: Attempts to authenticate the user and returns the authentication result or an error response. if it's okay on the request, so the response will return a token to use the other endpoints.

Example Usage: The event should follow this structure:

curl --location 'https://techchallenge.com.br/auth/token' \
--header 'Content-Type: application/json' \
--data-raw '{
    "username": "111.111.111.11",
    "password": "Chm@20!!,"
}'

---

Common Errors:

Invalid Username or Password: Returns an error if the username or password is incorrect.

User Not Found: If the user does not exist in the Cognito User Pool, an appropriate error message is returned.