[SECURITY][HARDENING] Authentication for EDC dataplane API calls

[ds-mwesener]

As a IT Security Manager ,
I want to secure EDC Dataplane requests using authorization
so that the integrity and security of our data are maintained

Links

• relates to Add authorization to all endpoints #786

Hints / Details

• APIs called via dataplane to the service

  • /qualitynotifications/receive
  • /qualityalerts/receive
  • /qualitynotifications/update
  • /qualityalerts/update
  • /callback/endpoint-data-reference
  • /internal/endpoint-data-reference

• Use the EDC HTTP Data Plane authentication attributes via oauth 2.0: https://github.com/eclipse-tractusx/tractusx-edc/blob/main/docs/usage/management-api-walkthrough/01_assets.md#http-data-plane

• This involves:

  • IRS data asset registration
  • Trace-X data ingest
  • GitHub Action Pipeline for setup of environments

Acceptance Criteria

• A concept created for testing and implementing the EDC HTTP Data Plane, including IRS data asset registration, Trace-X data ingest, and GitHub Action Pipeline setup.

Out of Scope