Clinical and Translational Data Commons AuthN/AuthZ service

Environmental Variables

Following environmental variables are needed

• VERSION : version number
• DATE : build date
• IDP : default identification provider, enabled if IDP is not provided from the client side e.g., "google"
• COOKIE_SECRET : secret used to sign cookies
• SESSION_TIMEOUT : session timeout in seconds, default is 30 minutes
• TOKEN_SECRET : secret used to sign tokens

Neo4j configuration

• NEO4J_URI: Bolt URI of the Neo4j database
• NEO4J_USER: Neo4j username
• NEO4J_PASSWORD: Neo4j password

Testing

• TEST_EMAIL : The email to be logged in if "test-idp" is specified as the IDP

MYSQL configuration

• MYSQL_HOST : The host URL of the MYSQL database
• MYSQL_PORT : The port of the MYSQL database
• MYSQL_USER : The service user of the MYSQL database
• MYSQL_PASSWORD : The password for the service user of the MYSQL database
• MYSQL_DATABASE : The MYSQL database name

Google login configuration

• GOOGLE_CLIENT_ID: Google cloud client id
• GOOGLE_CLIENT_SECRET: Google cloud client secret
• GOOGLE_REDIRECT_URL: redirecting url after successful authentication

NIH login configuration

• NIH_CLIENT_ID: NIH login server client id
• NIH_CLIENT_SECRET: NIH login client secret
• NIH_BASE_URL: NIH login server url
• NIH_REDIRECT_URL: redirecting url after successful authentication
• NIH_USERINFO_URL: NIH API address to search user information
• NIH_AUTHORIZE_URL: NIH API address to authenticate for login
• NIH_TOKEN_URL: NIH API address to create token for login
• NIH_LOGOUT_URL: NIH API address to invalidate token for logout
• NIH_SCOPE: space-separated lists of identifiers to specify access privileges
• NIH_PROMPT: to force re-authorization event when a current session is still active

Local development configuration

• NODE_ENV: If set to "development", a test html page will be activated in the route "/"
• NO_AUTO_LOGIN: If set to "true", local test page will only display authorization codes, instead of calling /login automatically