Configurable GV Mock + HMAC Auth

[jwalz]

Purpose

Add

1. a configurable mock for running tests against expected GravyValet output
2. Utilities to generate HMAC signed headers to enable OSF to bypass auth callbacks to itself

Changes

• osf/external/gravyvalet/auth_helpers is copied almost directly from GravyValet but adds support for sending X-Requesting-User-URI, X-Requested-Resource-URI, and X-Requested-Resource-Permissions headers (and including them in the HMAC signature).
  • The only notable changes are using the official spec for date header formats and parsing headers from requests in the requests.Request format instead of the rest_framework.Request format
  • notably, no changes were required to the validate_hmac_signed_headers function to accept the new headers
• osf/external/gravyvalet/gv_mocks implements naive versions of the top-level GravyValet entities as Dataclasses, provides utilities for configuring new entities, and provides a context manager that mocks and re-routes requests to GravyValet to retrieve these configured entities.
• Tests

QA Notes

Please make verification statements inspired by your code and what your code touches.

• Verify
• Verify

What are the areas of risk?

Any concerns/considerations/questions that development raised?

Documentation

Side Effects

Ticket

[aaxelb]

looks good! found some nits but it took some effort -- i like how you've used dataclasses for lightweight bespoke fakery

[aaxelb]

naming nitpick (feel free to disregard): could be confusing to call these things "mocks", since they have nothing to do with the standard Mock interface (with assert_called and friends) -- the word's not wrong, but the collision with a standard-lib term could be misleading...

[aaxelb]

🤿