fix: refactor authProviderModule and dangerouslyAllowSignInWithoutUserInCatalog config

[JessicaJHee]

Description

• Refactor and clean up the behaviour of dangerouslyAllowSignInWithoutUserInCatalog config
  • dangerouslyAllowSignInWithoutUserInCatalog is now a resolver level config and applies to each resolver declaratively
  • This config now works with all supported resolvers
  • All auth providers now support declarative resolver definition
• Update auth provider e2e tests

Example usage:

auth:
  providers:
    github:
      development:
        clientId: ${CLIENT_ID}
        clientSecret: ${CLIENT_SECRET}
        signIn:
          resolvers:
            - resolver: usernameMatchingUserEntityName
              dangerouslyAllowSignInWithoutUserInCatalog: true

See upstream changes included in the patches here

• This PR introduces a lot of patches, but the intention is to only maintain them for the 1.5 release since fixing the bug is of high priority, then once these changes are proposed and merged upstream, we can remove them.

The new error message with this is:
"Login failed; caused by Error: Failed to sign-in, unable to resolve user identity. Please verify that your catalog contains the expected User entities that would match your configured sign-in resolver. For non-production environments, manually provision the user or disable the user provisioning requirement by setting the dangerouslyAllowSignInWithoutUserInCatalog option."

Notes/Changes on TP auth providers:

auth0 resolver in RHDH resolves by fullProfile.id

• Backstage only supports the common resolvers
• Since we haven’t tested this auth provider and upstream has, we should use their resolvers

gcp-iap resolver in RHDH resolves by iapToken.email.split('@')[0]

• use upstream resolver with email

onelogin resolver in RHDH resolves by fullProfile.id

• use upstream resolver with fullProfile.username

SAML doesn’t have it’s own auth provider module

• Only has partial support, see issue
• removed in RHDH

Which issue(s) does this PR fix

• Fixes RHDHBUGS-152, RHIDP-6025, and RHIDP-5958

PR acceptance criteria

Please make sure that the following steps are complete:

• GitHub Actions are completed and successful
• Unit Tests are updated and passing
• E2E Tests are updated and passing
• Documentation is updated if necessary (requirement for new features)
• Add a screenshot if the change is UX/UI related

How to test changes / Special notes to the reviewer

Manual testing has been done for GitHub and Microsoft resolvers

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please ask for approval from jessicajhee. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[github-actions]

The image is available at:

• quay.io/rhdh-community/rhdh:pr-2354 or
• quay.io/rhdh-community/rhdh:pr-2354-0fdf1eeb

[github-actions]

The image is available at:

• quay.io/rhdh-community/rhdh:pr-2354 or
• quay.io/rhdh-community/rhdh:pr-2354-77e816b3

[github-actions]

The image is available at:

• quay.io/rhdh-community/rhdh:pr-2354 or
• quay.io/rhdh-community/rhdh:pr-2354-82114995

[github-actions]

The image is available at:

• quay.io/rhdh-community/rhdh:pr-2354 or
• quay.io/rhdh-community/rhdh:pr-2354-034fe49c

[github-actions]

The image is available at:

• quay.io/rhdh-community/rhdh:pr-2354 or
• quay.io/rhdh-community/rhdh:pr-2354-2bcbd725

[github-actions]

The image is available at:

• quay.io/rhdh-community/rhdh:pr-2354 or
• quay.io/rhdh-community/rhdh:pr-2354-0f3c330f

[JessicaJHee]

auth e2e tests are broken due to UI changes - will be fixed in this PR

[github-actions]

The image is available at:

• quay.io/rhdh-community/rhdh:pr-2354 or
• quay.io/rhdh-community/rhdh:pr-2354-b0142f69

[github-actions]

The image is available at:

• quay.io/rhdh-community/rhdh:pr-2354 or
• quay.io/rhdh-community/rhdh:pr-2354-8d43e8dd

[JessicaJHee]

/retest

[openshift-ci]

@JessicaJHee: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-tests	8d43e8d	link	true	/test e2e-tests

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.