Shift Tethys API Views from CSRF and Session to JSON Web Token (JWT)

[ckrew]

Description

This merge request updates the way that reactapps work with Tethys and authentication, namely shifting Tethys APIs from session and csrf based authentication to JSON Web Tokens (JWT).

Changes Made to Code

ReactApp Templates:

• Removed getSession and getCSRF APIs
• Added new getJWTToken and refreshJWTToken APIs
• Updated loader to not use getSession and instead use JWTs

Tethys:

• Removed get_session and get_csrf views and urls
• updated whoami view
• new APIs for token, token/refresh, and token/verify

Related PRs, Issues, and Discussions

Additional Notes

Quality Checks

• At least one new test has been written for new code
• New code has 100% test coverage
• Code has been formatted with Black
• Code has been linted with flake8
• Docstrings for new methods have been added
• The documentation has been updated appropriately

[ckrew]

@swainn any concerns here about backwards capabilities? should i include something that still works with the old stuff and add a deprecation warning?

[swainn]

@swainn any concerns here about backwards capabilities? should i include something that still works with the old stuff and add a deprecation warning?

Yes. Let's keep it backward compatible and add a deprecation warning.

[coveralls]

coverage: 100.0%. remained the same
when pulling b315293 on api_view_updates
into 5011fa0 on main.

[ckrew]

this is ready for review again. Let me know if there is anything else that needs to change

[ckrew]

@swainn any concerns here about backwards capabilities? should i include something that still works with the old stuff and add a deprecation warning?

Yes. Let's keep it backward compatible and add a deprecation warning.

update this to it "will be deprecated and will be removed in a future tethys version"