feat(keycloak authentication)

[ChrOertlin]

Description

Implements keycloak as authirsation and verification provider for CG

Added

• AuthenticationService
  Handles logic pertaining to authentication and token verification of users

• UserService
  handles fetching of users from the database - introduced to reduce coupling of database to endpoints

• New endpoints:
  auth/login
  auth/callback
  auth/logout

• New config settings in the Flask AppConfig to initiate the authentication service

Changed

• Moved app.route("/") to its own blueprint to cleanup the _register_blueprint() function. Increased code clarity

• Removed google oauth flow from front end

Fixed

closes: #4159

How to prepare for test

• Ssh to relevant server (depending on type of change)
• Use stage: us
• Paxa the environment: paxa
• Install on stage (example for Hasta):

  bash /home/proj/production/servers/resources/hasta.scilifelab.se/update-tool-stage.sh -e S_cg -t cg -b [THIS-BRANCH-NAME] -a

How to test

• Do ...

Expected test outcome

• Check that ...
• Take a screenshot and attach or copy/paste the output.

Review

• Tests executed by
• "Merge and deploy" approved by
  Thanks for filling in who performed the code review and the test!

This version is a

• MAJOR - when you make incompatible API changes
• MINOR - when you add functionality in a backwards compatible manner
• PATCH - when you make backwards compatible bug fixes or documentation/instructions

Implementation Plan

• Document in ...
• Deploy this branch on ...
• Inform to ...

[ChrOertlin]

These endpoints will handle the talk with keycloak

[sonarqubecloud]

Quality Gate passed

Issues
7 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[ChrOertlin]

this part needs to be tested on hasta-stage with the cli commands.