add users

[jmarsault]

Hi,

I can't add new users, the "create" button is greyed out. I deployed the project on Heroku, do I need to configure something ?

It would be really great if we could delegate authentication and roles to a third party tool like Keycloak or Okta

[birkir]

I'll look into this. Looks like you don't have an admin role on your account.

https://github.com/birkir/prime/blob/master/packages/prime-ui/src/routes/settings/Users.tsx#L203

• I will not be integrating third party SaaS for authentication.
• Prime must work offline.
• I am using accounts-js which has support for everything but roles.
• I am using @casl/ability for roles.
• No matter what service, I would always have to build the UI to control roles, permissions and accounts.

[agustif]

Hey @casl/ability looks great, in case you want to change the permissions layer down the road, https://github.com/maticzav/graphql-shield let's use a more graphql-centric approach to it, applying a resolvers/permissions layer to a graphql schema on your yoga server or with middleware on any graphQL app.

[birkir]

Yes I tried graphql-shield, nice library, but having an isomorphic solution was a game changer for me.

I create the roles on prime core and can pass them as JSON object to the UI for rehydration of @cask/ability so I can check permissions on the front-end too, like disable buttons and so on 👍

It was very easy to add decorator to authorize the same way https://github.com/birkir/prime/blob/master/packages/prime-core/src/modules/internal/resolvers/UserResolver.ts#L44

[agustif]

Yes I tried graphql-shield, nice library, but having an isomorphic solution was a game changer for me.

I create the roles on prime core and can pass them as JSON object to the UI for rehydration of @cask/ability so I can check permissions on the front-end too, like disable buttons and so on 👍

It was very easy to add decorator to authorize the same way https://github.com/birkir/prime/blob/master/packages/prime-core/src/modules/internal/resolvers/UserResolver.ts#L44

Thanks for sharing your insights, I haven't got to use prime at our company yet, but it does has discovered me the wonders of TypeScript, and also TypeORM+TypeGraphQL, and planning to use AccountsJS...

Alas I'm gonna give @casl/ability a shot as I am already enjoying decorators and what not in my project!

Not sure what isomorphic means (googling it like now) but if it's the type safe approach I love it and really helps me understand and debug my system to be able to get linting and what not from the language itself and catching those ugly bugs before release.

Anyway, thanks again for sharing, And I'm sure I will be able to add in some way in the future either by doing nice extensions/examples/blogposts/documentation/translations whatever is welcome!

PS: I also find ant.design a great -bootstrap- current beautiful alternative for the frontend to shine. and the nextJS and Gatsby examples are great too!

[jmarsault]

Managing access with Single Sign-On is a major concern for a company. Do you plan to support it in the future?

[birkir]

No. Not from prime standpoint. It will have to be done for accounts-js.

I could create a PR to accounts-js to add support for that. Or the community.

Does that make sense?

Quick question, what sso is most used? Do you know of any npm package that does the support? for reference.

Thanks.

[jmarsault]

I don't know accounts-js but openid-client could do the job.

I was able to implement SSO quite easily on personal projects in Vue/Angular with vue-authenticate and angular-oauth2-oidc

Thanks

[HerrGries]

Hi @birkir You say to create an new user i need to have an administrator role. I have created a new prime instance. How do I add a role to my user?

thank you in advance

[agustif]

No. Not from prime standpoint. It will have to be done for accounts-js.

I could create a PR to accounts-js to add support for that. Or the community.

Does that make sense?

Quick question, what sso is most used? Do you know of any npm package that does the support? for reference.

Thanks.

Hey birkir, I just saw this on accountsJS docs https://accounts-js.netlify.com/docs/strategies/oauth

[birkir]

I fixed the issue for now. But I need to do a real overhaul on roles and permissions.

[alihasan]

Hi @birkir same question as @oxivon. Have a new instance, but my default user doesn't have access to create additional users. How do I give my default user the correct privileges?

[HerrGries]

Hey @alihasan, Did you update the repository to the newest version? All members are admin by default now.