Integrate ESCAPE IAM into REANA Testing VM Setup

[tomondre]

Task:
Integrate ESCAPE IAM into the REANA testing VM setup to enable login via ESCAPE IAM and callback to REANA UI. Use client:
https://iam-escape.cloud.cnaf.infn.it/dashboard#!/clients/f671a136-8e92-45e5-83bd-05af1942e396

Set OIDC environment variables on the REANA server as in:
https://github.com/vre-hub/vre/blob/main/infrastructure/cluster/flux/reana/reana-release.yaml#L96

DoD:
REANA server in the deployment uses ESCAPE IAM for authentication.

[tomondre]

I’m still having trouble with this. I resolved the initial error by injecting the OAUTHCLIENT_KEYCLOAK_USER_INFO_FROM_ENDPOINT environment variable directly into the container, but now the sub claim isn’t being read correctly during user signup (either from idp token or /userinfo call). Seems to be connected to some public key verification by the library. I’ve spent over an hour going through the code and logs without success.

My next step would be to debug the invenio-oauth-client library or intercept the HTTP requests to examine the responses. However, since everything is running in our Kubernetes cluster and WDB only supports debugging the main repository (not its dependencies), neither approach is straightforward (maybe not even feasible?).