#71: Keycloak Integration

[oliveratfoodcoopx]

I am opening this PR although the integration is not complete yet.

NOTES:

• I added import json files but commented out the line that handles these imports. The reason is that there is a known bug related to importing/exporting clients with credentials and the Client authentication switch is on.
• Within the Keycloak server (login url: http://localhost:8080/admin/, credentials admin/admin) a client news to be created and set its Credentials (within the Credentials tab) and generate its Client secret. This information needs to be set within the projects settings, under KEYCLOAK_CONFIG. For KEYCLOAK_ADMIN_CONFIG the same credentials can be used.

Further steps:

• Replace LdapUser with KeycloakUserApiMixin
• Disconnect Ldap-related models from Factories.
• I added several tests throughout the issue. The idea behind these tests, is to map as much as possible, current features the project has. So when the KeycloakUserApiMixin class replaces LdapUser these exact same tests need to pass
• I am using the master realm for this integration because I was unable to make KeycloakAdmin to work without getting `403: b'{"error":"unknown_error"}'. I might have forgotten some settings, so more research is needed here
• Replace current Ldap groups with Keycloak Roles
• Migrate all Ldap users to Keycloak. Exporting users from Ldap and importing them into Keycloak using temporary password should be enough,

Ref: #71

[mk2301]

Why are all the tests failing? It seems like keycloak is not running.. I tried to rebase to the latest master

[mk2301]

Regarding the "403: unknown error", it is necessary to add the service account role "manage-users" to the client:

I will provide imports as soon as I am done

[mk2301]

TODOs:

• Registration (create user from backend)
• Authentication
• Authorisation
• Verify Email process
• Password Change process
• Password Reset
• Logout
• Check that user creation is transactional/synchronized between Tapir and Keycloak
• Email Change process (Verify mail to new email address -> click on link executes the change)
• Cleanup (logs, leftover code from previous attempts, ...)
• Update Tests (or remove for now to get the application working in time)
• Production Configuration for Keycloak
• Check that the import of realm and clients works in the keycloak container

[mk2301]

I had to regenerate all migrations because I removed the python ldap module :(

[sonarcloud]

SonarCloud Quality Gate failed.   

12 Bugs
0 Vulnerabilities
5 Security Hotspots
26 Code Smells

0.0% Coverage
0.0% Duplication