feat: allow configuring required token audience

[ltucker]

• Adds a setting to specify a required token audience (JWT aud claim) for diode-to-netbox tokens
• Defaults to nothing particular required

etc

This pull request introduces support for validating token audiences in the NetBox Diode plugin. The changes ensure that authentication tokens can be checked against a configurable list of required audiences, enhancing security and compliance. Key updates include modifications to the plugin configuration, authentication logic, and unit tests.

Token Audience Validation

• netbox_diode_plugin/__init__.py: Added a new configuration option, required_token_audience, which allows specifying a list of audiences that must be present in the authentication token.
• netbox_diode_plugin/api/authentication.py: Updated the _introspect_token method to validate the token's audience against the required_token_audience configuration, rejecting tokens missing required audiences.
• netbox_diode_plugin/plugin_config.py: Added the get_required_token_audience function to retrieve the required_token_audience setting from the plugin configuration.

Unit Tests for Token Audience Validation

• netbox_diode_plugin/tests/test_authentication.py: Enhanced test setup to mock get_required_token_audience and added a new test, test_authenticate_token_with_required_audience, to verify that tokens are correctly authenticated based on their audience. [1] [2]

[github-actions]

☂️ Python Coverage

current status: ✅

Overall Coverage

Lines	Covered	Coverage	Threshold	Status
3255	2906	89%	0%	🟢

New Files

No new covered files...

Modified Files

File	Coverage	Status
netbox_diode_plugin/init.py	100%	🟢
netbox_diode_plugin/api/authentication.py	96%	🟢
netbox_diode_plugin/plugin_config.py	67%	🟢
netbox_diode_plugin/tests/test_authentication.py	99%	🟢
TOTAL	91%	🟢

updated for commit: 77b2446 by action🐍