Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/CspmIT/centinela-front/llms.txt

Use this file to discover all available pages before exploring further.

​
Overview

Centinela implements a multi-layered authentication system that integrates with Cooptech’s centralized authentication service. The system supports multi-client organizations, JWT-based sessions, and role-based access control.

​
Authentication Flow

The authentication process follows these steps:
1

User Login

Users enter their email and password at the login screen (/login). The system validates credentials against the Cooptech backend.
// LoginApp/view/index.jsx:58-59
const url = backend.Cooptech + '/login'
const responseData = await requestLogin(url, 'POST', data)
2

Client Selection

If the user has access to multiple organizations, they’re redirected to select one:
// LoginApp/view/index.jsx:66-68
if (responseData.cliente.length > 1) {
  navigate('/ListClients')
}
3

Token Generation

After client selection, the system generates a JWT token containing user information and permissions:
// LoginApp/utils/login.js:18
const token = await request(urlToken, 'POST', info)
4

Session Storage

The JWT token is stored in both localStorage and cookies with expiration handling:
// LoginApp/view/index.jsx:85-92
const decoded = jwtDecode(token.token)
const expirationDate = new Date(decoded.exp)
await saveData('token', token.token, {
  expires: expirationDate,
  secure: false,
  sameSite: 'Lax',
})
storage.set('usuario', decoded)

​
User Storage

Centinela uses a simple localStorage wrapper for managing user sessions: 
// storage/storage.js:1-18
export const storage = {
  get(key) {
    const val = localStorage.getItem(key)
    return val ? JSON.parse(val) : null
  },
  
  set(key, val) {
    localStorage.setItem(key, JSON.stringify(val))
  },
  
  remove(key) {
    localStorage.removeItem(key)
  },
  
  clear() {
    localStorage.clear()
  }
}

​
Stored User Data

The system stores the following user information:
  • usuario: Decoded JWT containing user profile and permissions
  • usuarioCooptech: Cooptech-specific user data including:
    • token: Cooptech authentication token
    • id_user: User ID in Cooptech system
    • cliente: Selected client/organization details
  • tokenCooptech: Raw JWT token for API requests

​
Route Protection

Routes are protected based on user authentication status and role: 
// App.jsx:45-46
const authUser = storage.get('usuario')
const isExternalUser = authUser && authUser.profile === 5

​
Route Types

Available when user is not authenticated:
  • /login - Main login screen
  • /ListClients - Organization selection
  • /LoginCooptech/:token - Token-based authentication
External users (profile 5) have restricted access and are automatically redirected to a limited dashboard. See External Users for more details.

​
Password Requirements

Passwords must meet the following criteria:
  • Minimum 8 characters
  • At least 1 uppercase letter
  • At least 1 special character
  • At least 1 number
// LoginApp/view/index.jsx:154-161
{
  required: 'El Campo es requerido',
  minLength: { value: 8, message: 'Debe tener al menos 8 caracteres' },
  pattern: {
    value: /^(?=.*[A-Z]).{8,}$/,
    message: 'El Formato correcto debe tener al menos 1 Mayuscula, 1 Simbolo especial y 1 Numero',
  },
}

​
Password Recovery

Users can recover their password through the login screen:
1

Request Recovery

Click “Recuperala” on the login screen to enter recovery mode.
2

Enter Email

Provide the email address associated with your account.
3

Receive Email

A recovery email will be sent with instructions to reset your password:
// LoginApp/view/index.jsx:48-55
const url = backend.Cooptech + '/password_recover'
await requestLogin(url, 'POST', data)
Swal.fire({
  icon: 'success',
  title: 'Perfecto!',
  text: `Se ha enviado un correo a ${data.email}, para restablecer su contraseña`,
})

​
Token-Based Authentication

Centinela supports direct token-based authentication for seamless integration: 
// LoginApp/view/LoginCooptech.jsx:10-38
const validateUserCooptech = async () => {
  const decodedToken = jwtDecode(token)
  
  if (decodedToken.cliente) {
    const cliente = decodedToken.cliente.find((item) => item.selected)
    storage.set('usuarioCooptech', {
      cliente: cliente,
      id_user: decodedToken.user_id_cooptech,
      token: decodedToken.tokenCooptech,
    })
  }
  
  const expirationDate = new Date(decodedToken.exp)
  await saveData('token', token, {
    expires: expirationDate,
    secure: import.meta.env.VITE_ENTORNO === 'desarrollo' ? false : true,
    sameSite: import.meta.env.VITE_ENTORNO === 'desarrollo' ? 'Lax' : 'None',
  })
  
  storage.set('usuario', decodedToken)
  navigate('/')
}
If token validation fails, the user is automatically logged out and redirected to the login screen. All stored credentials are removed from localStorage and cookies.

​
Multi-Client Support

Users can access multiple organizations through a single account: 
// LoginApp/view/ListClient.jsx:27-30
const url = `${backend.Cooptech}/listClientsxUserxApp?id_user=${usuarioCooptech.id_user}&name_product=${import.meta.env.VITE_APP_NAME}`
const responseData = await requestAuth(url, 'GET')
When switching organizations:
  1. The user selects a client from the dropdown
  2. System fetches the appropriate schema and product information
  3. A new JWT token is generated for the selected organization
  4. User data is updated with the selected client marked as active
If a user has no access to any organization, they’re logged out with an appropriate error message: “No tenes permisos de ingreso a ninguna organizacion”

​
Session Validation

On every page load, the system validates the active session: 
// LoginApp/view/index.jsx:104-113
const validateUser = async () => {
  const cookies = await getData('token')
  const localStorage = storage.get('usuario')
  
  if (cookies && localStorage) {
    navigate(`/`)
  } else {
    // Show login screen
  }
}

​
Security Best Practices

  • Never store sensitive credentials in localStorage without encryption
  • Always validate JWT expiration dates
  • Clear all session data on logout
  • Use HTTPS in production environments

​
Common Issues

​
User Doesn’t Exist

If a user successfully authenticates with Cooptech but has no clients assigned: 
// LoginApp/view/index.jsx:70-74
if (responseData.cliente.length === 0) {
  throw new Error('El usuario no existe...')
}

​
Token Errors

If token generation fails: 
// LoginApp/view/index.jsx:76-84
if (token.error) {
  Swal.fire('Atencion', token.error.message || token.error, 'error')
  await removeData('token')
  storage.remove('usuario')
  storage.remove('usuarioCooptech')
  storage.remove('tokenCooptech')
  return false
}

​
Next Steps

User Roles

Learn about role-based access control and permissions

External Users

Understand how external user access works

Build docs developers (and LLMs) love

Get started for freeTalk to us