Allow authentication scheme to be specified explicitly when connecting with credentials

[Andy-Grigg]

Closes #636

Add a new builder method which doesn't check the 401-response header and attempts to use basic auth. I also did some cleanup of the return type of the __test_connection() method, since it returns Literal[True] instead of bool.

I thought about the best way to implement this. We could have used an undocumented environment variable, but given that this is an open-source project it seemed wiser to implement this function, but to be very clear in the documentation that it should not be used in almost all cases.

I did think about marking the method as deprecated, but I think we can only really get away with this once Basic is included in the 401-response alongside Bearer from MI.

[codecov]

Codecov Report

Attention: Patch coverage is 97.36842% with 1 line in your changes missing coverage. Please review.

Project coverage is 94.45%. Comparing base (d1851a8) to head (195fc95).
Report is 1 commits behind head on main.

Files	Patch %	Lines
src/ansys/openapi/common/_session.py	97.29%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #638      +/-   ##
==========================================
+ Coverage   94.24%   94.45%   +0.20%     
==========================================
  Files           7        7              
  Lines         782      793      +11     
==========================================
+ Hits          737      749      +12     
+ Misses         45       44       -1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[wiz-inc-572fc38784]

Wiz Scan Summary

IaC Misconfigurations
Vulnerabilities
Sensitive Data
Total
Secrets

[Andy-Grigg]

Re-implemented this for with_autologon and with_credentials, with an enum that allows the authentication method to be chosen with each method. This rapidly gets complicated with different modes supported on different platforms.

Still TODO:

• Fix a failing kerberos test - This was an invalid test case
• Add unadvertised basic test
• Add unadvertised kerberos test
• Document the Enum
• Perform some manual testing in Windows
• Perform some manual testing in Linux

We don't have any credentialed windows auth tests (NTLM, kerberos, or negotiate) as far as I can see. We'll have to test this manually and check the server logs to see that there's no 401 response generated.

[da1910]

Not sure what to do at this point, the requests-negotiate-sspi library won't allow us to force it to send the initial handshake if the server doesn't advertise it supports Negotiate.

[da1910]

Looks as discussed