Issue

#521

What?/ Why?

Keycloak Client & Tenant Access Endpoint

• KeycloakPDPClient which contains functions:
  • get_rpt to request the requesting party token from keycloak
  • check_permission which checks to see is a user has a permission granted for a resource and scope
  • get_tenants_with_create_update_access which gets a list of tenants the user has create and update access to
  • base64 padding helper function (this is needed because the decode function requires proper padding or it will raise an error)
  • JWT permission extraction functions
• /auth/tenants/writeable endpoint added to Ingest API
• Ingest API config updated to include resource server client ID and secret env vars

Testing?

-updated SIT envs to have VEDA_KEYCLOAK_UMA_RESOURCE_SERVER_CLIENT_SECRET_NAME and VEDA_KEYCLOAK_SECRET_KMS_KEY_ARN

• Deployed to sit https://sit.openveda.cloud/api/ingest/docs#/Auth/get_writable_tenant_access_auth_tenants_writable_get