Account

Application stack

Build, checks and delivery

Spring Boot account service for the Microsserv52 platform. It owns account registration, profile data, password hashes, and roles. Auth reads credentials through the internal service endpoint; clients never receive password hashes.

Run locally

./mvnw test
./mvnw verify
./mvnw spring-boot:run

The service uses PostgreSQL in deployment and H2 for tests. Configure SPRING_DATASOURCE_URL, SPRING_DATASOURCE_USERNAME, SPRING_DATASOURCE_PASSWORD, JWT_SECRET, and INTERNAL_SERVICE_SECRET through environment variables.

Browser-facing authorization

POST /accounts registers an enabled ROLE_USER account. The request cannot assign administrator roles. GET /accounts/me uses the validated JWT subject to return only that caller's profile, without a password hash.

Listing accounts, reading another account, and deleting accounts require ROLE_ADMIN. Deleting your own account or any administrator account is rejected with 409; missing accounts return 404. The initial admin interface deliberately offers account search and read-only details only. Auth's internal credential lookup retains its service-secret protection and is blocked at the public Gateway.

There is no public role-promotion endpoint or automatic administrator seed. Administrator setup is an authorized operator action in the owning environment. Authorization tests run with ./mvnw verify. Local workstation evidence uses -Djava.version=24 because JDK 24 is installed; the normal build target stays 25.

Environment variables

Local Compose reads these from the root platform .env. In GitHub Actions, store secret values under Settings → Secrets and variables → Actions in Microsserv52/account. Kubernetes values belong in platform-secrets.

Variable	Purpose
SPRING_DATASOURCE_URL	PostgreSQL JDBC URL
SPRING_DATASOURCE_USERNAME	Database username
SPRING_DATASOURCE_PASSWORD	Database password
JWT_SECRET	Shared JWT HMAC secret
INTERNAL_SERVICE_SECRET	Auth-to-Account credential

GitHub Actions secrets

Add these under Settings → Secrets and variables → Actions in Microsserv52/account:

• SPRING_DATASOURCE_URL: JDBC URL for PostgreSQL (RDS in AWS).
• SPRING_DATASOURCE_USERNAME: database username.
• SPRING_DATASOURCE_PASSWORD: database password.
• JWT_SECRET: shared JWT HMAC secret used by Gateway and services.
• INTERNAL_SERVICE_SECRET: secret required by Auth for credential lookup.