Add authentication to /query route

[alyssadai]

• Closes Verify ID token passed in through header #103

Changes proposed in this pull request:

• /query route now expects an authorization token by default
• added logic to verify token using google-auth
• added new optional env vars:
  • NB_QUERY_CLIENT_ID: Client ID of query tool
  • NB_ENABLE_AUTH: Whether or not to enable authentication (will determine if client ID is also checked)

Checklist

This section is for the PR reviewer

• PR has an interpretable title with a prefix ([ENH], [FIX], [REF], [TST], [CI], [MNT], [INF], [MODEL], [DOC]) (see our Contributing Guidelines for more info)
• PR has a label for the release changelog or skip-release (to be applied by maintainers only)
• PR links to GitHub issue with mention Closes #XXXX
• Tests pass
• Checks pass

For new features:

• Tests have been added

For bug fixes:

• There is at least one test that would fail under the original bug conditions.

[coveralls]

Pull Request Test Coverage Report for Build 9929726741

Details

• 80 of 82 (97.56%) changed or added relevant lines in 7 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage increased (+0.03%) to 97.043%

---

Changes Missing Coverage	Covered Lines	Changed/Added Lines	%
app/api/security.py	17	18	94.44%
tests/test_security.py	25	26	96.15%

Totals
Change from base Build 9682666455:	0.03%
Covered Lines:	558
Relevant Lines:	575

---

💛 - Coveralls

[surchs]

Awesome, great stuff @alyssadai 🎉. All looks reasonable to me, and good job using trustworthy external libraries for all of this! I left a couple comments - mainly for understanding or clarity.

But good to go as is, just take a quick look and then 🧑‍🍳

[neurobagel-bot]

🚀 PR was released in v0.3.0 🚀