Secure File App

Seeking to build a web application which will securely present files to users from an Azure Storage Account Container. The web app needs to present back into a browser session a folder structure which can be navigated to find and download the files from folders in the Storage Container. User request will hit the exposed frontend application with a query parameter for "access_token" in the web request. "access_token" will be used to call back to another web application to authenticate the user and get information about the user (in particular "company_identifier") which will be used to determine which folders & files the user can access in the Azure Storage Container. "company_identifier" will be used as a key to match to the top level folder name in the container where they files will reside. The container file structure will be flat: /container/company_identifier/(files & folders for that company)/year/month/[login to view URL] Files will be delivered using SAS tokens from the Azure Storage Account generated in flight with a 60minute lifespan. The application will require: - A secure backend (server-side) that can communicate with Azure Storage Account Container and the application for authenticating users. - An efficient way to map user information to their respective folder and file access permissions - A front-end (client-side) that presents files and folders to the user in a navigable interface - Handling the download requests and serving the files to the user securely Required Tech Stack Backend: Node.js ([login to view URL] Framework) Frontend: React.js (Create a simple UI to navigate files and folders) Authentication: OAuth with the external authentication application Storage: Azure Blob Storage Server-side (Node.js/Express) Endpoint /auth: This endpoint takes the access_token as a query parameter, sends it to the external authentication application, and retrieves the user information. It will use the company_id to determine the top-level folder that the user can access. Endpoint /files: After successful authentication, this endpoint is used to retrieve the folder structure and files. The company_identifier retrieved from the authentication process will be used to access the appropriate folder from Azure Storage Container. It will list all the available files and folders within the given path (default to company_identifier/ if no specific path is provided). It should return a JSON response representing the folder structure which will be used on the client-side to present the data. Endpoint /download: This endpoint will generate a SAS token for a specific file and return a download URL to the client. The SAS token will expire after 15 minutes. Client-side (React.js) On the client-side, a simple React application will be used. On loading the application, it will first attempt to authenticate the user by calling the /auth endpoint with the provided access_token. Upon successful authentication, it will call the /files endpoint to retrieve the files and folders the authenticated user has access to. The received folder structure will be displayed in a simple, navigable UI. When a user wants to download a file, the application will call the /download endpoint to get a temporary download URL for the file and then initiate the download. Additional details, such as error handling, logging, user-friendly messages, and other UX/UI improvements can be added based on your preferences. Keep in mind that while this is a simplified outline, actual implementation will require careful consideration of error handling, security, performance, and scalability, among other aspects.