App Token API

[kobergj]

Adds an API to create, list and delete app tokens to the auth-app service

# POST needs expiry and creates a token for executing user
    ~/:curl --insecure -XPOST -u admin:admin https://localhost:9200/auth-app/tokens\?expiry\=24h | jq
{
  "token": "3s2K7816M4vuSpd5",
  "expiration_date": "2024-08-08T13:42:42.796888022+02:00",
  "created_date": "2024-08-07T13:42:42+02:00",
  "label": "Generated via API"
}

# POST takes 'userName' param to impersonate other users (needs AUTH_APP_ENABLE_IMPERSONATION)
    ~/:curl --insecure -XPOST -u admin:admin https://localhost:9200/auth-app/tokens\?expiry\=24h\&userName\=einstein 
{
  "token": "8T6kmxj5307S4lP9",
  "expiration_date": "2024-08-08T13:44:31.025199075+02:00",
  "created_date": "2024-08-07T13:44:31+02:00",
  "label": "Generated via Impersonation API"
}

# same works with 'userID' either
    ~/:curl --insecure -XPOST -u admin:admin https://localhost:9200/auth-app/tokens\?expiry\=24h\&userID\=4c510ada-c86b-4815-8820-42cdf82c3d51 | jq
{
  "token": "Ho14ER30t6W7l58O",
  "expiration_date": "2024-08-08T13:46:41.936052281+02:00",
  "created_date": "2024-08-07T13:46:42+02:00",
  "label": "Generated via Impersonation API"
}

# GET lists app-tokens of authenticated user
    ~/:curl --insecure -XGET -u einstein:relativity https://localhost:9200/auth-app/tokens | jq                                       
[
  {
    "token": "$2a$11$EyudDGAJ18bBf5NG6PL9Ru9gygZAu0oPyLawdieNjGozcbXyyuUhG",
    "expiration_date": "2024-08-08T13:44:31.025199075+02:00",
    "created_date": "2024-08-07T13:44:31+02:00",
    "label": "Generated via Impersonation API"
  },
  {
    "token": "$2a$11$dfRBQrxRMPg8fvyvkFwaX.IPoIUiokvhzK.YNI/pCafk0us3MyPzy",
    "expiration_date": "2024-08-08T13:46:41.936052281+02:00",
    "created_date": "2024-08-07T13:46:42+02:00",
    "label": "Generated via Impersonation API"
  }
]

# DELETE takes 'token' parameter to remove unexpired app tokens
~/:curl --insecure -XDELETE -u einstein:relativity https://localhost:9200/auth-app/tokens\?token\="\$2a\$11\$EyudDGAJ18bBf5NG6PL9Ru9gygZAu0oPyLawdieNjGozcbXyyuUhG"

[sonarqubecloud]

Quality Gate passed

Issues
4 New issues
0 Accepted issues

Measures
0 Security Hotspots
4.6% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

[DeepDiver1975]

tested with the migrate to ocis app 👍