PropSpaceX User Service
Authentication and user management microservice — hybrid email/password and blockchain wallet login, device trust verification, and audit logging over REST and gRPC.
System Architecture
Logins arrive from the gateway over REST; internal services verify tokens over gRPC. The auth engine rotates refresh tokens, binds sessions to device fingerprints, and validates location via GeoIP before touching PostgreSQL. Wallet login verifies an Ethereum signature instead of a password.
Database Design
Sessions are bound to both a user and a trusted device; every auth event lands in an append-only trail for impossible-travel and audit checks.
Engineering Challenges
Hybrid authentication
One identity model backing two login paths — traditional email/password and Ethereum wallet signature verification.
Token security
JWT with refresh-token rotation and device binding prevents token theft and replay attacks.
Device trust
Fingerprinting flags logins from unknown devices; GeoIP adds impossible-travel detection on top.
Audit trail
Every auth event lands in an append-only log with IP and geo context for compliance and incident review.