[QA]tests for auth-app token generation via API and cli

[v-scharf]

related: #9755
docs task: #10605

Note

Creatiing app token:
POST https://localhost:9200/auth-app/tokens?expiry=24h

• this returns the actual token (save to use it later - cannot be accessed later on)

List app tokens:
GET https://localhost:9200/auth-app/tokens

• this returns list of tokens with id (NOT actual token value)

we need to have api tests for that and cli test

Bugs

• server returns status code 500 when creating token for non-existent user (Impersonation) #10815
• server returns status code 500 when deleting auth-app token of a different user #10921
• creating auth-app token with user-id creates token for the wrong user #11063
• can't delete auth-app token using the token received from auth-app create request #10675

Test Cases

API

• create with expiry [tests-only][full-ci]add test for creating and listing auth token for an app using api #10662
• create with user-id [tests-only][full-ci] adding test for creating auth-app token using user-id #10987
• try to create with user-id no expiration @prashant-gurung899
  • by admin user, non-admin user and non-existent user: [tests-only][full-ci] add test to create auth-app token using user-id without expiration #11169
  • by normal user: [tests-only][full-ci] adding test for creating auth-app token using user-id and without expiration time #11159
• try to create with user-id by non-existing user @prashant-gurung899 [tests-only][full-ci] add test to create auth-app token with user-id by non-existent user #11174
• try to create without expiry [full-ci][tests-only] adding test for trying to create auth app-token without expiry #10981
• list [tests-only][full-ci]add test for creating and listing auth token for an app using api #10662
• delete [tests-only][full-ci] adding test for deleting auth-app token using the token received from auth-app list request #10814
  • can't delete auth-app token using the token received from auth-app create request #10675

Impersonation

• create with expiry and username [tests-only][full-ci] add test for creating auth token for an app using impersonation api #10733
• create with expiry and user-id [tests-only][full-ci] adding test for creating auth-app token using user-id #10987
• create with expiry and user-id by normal user [tests-only][full-ci] adding test for creating auth-app token using user-id #10987
• create without expiry (user-id) [tests-only][full-ci] adding test for creating auth-app token using user-id and without expiration time #11159
• try to create without expiry [full-ci][tests-only] adding test for trying to create auth app-token without expiry #10981
• list [tests-only][full-ci] add test for creating auth token for an app using impersonation api #10733
• check impersonation works only with AUTH_APP_ENABLE_IMPERSONATION=true [tests-only][full-ci] adding test for trying to create auth app-token for other user without impersonation env #10983
• create token by user [tests-only][full-ci] adding test for trying to impersonation and create auth app-token #10985
• try to create token for non-existing user [tests-only][full-ci] adding test for create token for non-existing user and deleting token by a different user #10993
• try to delete token by a different user (admin and brian) [tests-only][full-ci] adding test for create token for non-existing user and deleting token by a different user #10993

CLI

• create [tests-only][full-ci] adding test for creating auth token for an app using cli #10660
• try to create without expiry [tests-only][full-ci] adding test for trying to create auth app-token without expiry using cli #10988
• create with expiry and user-id (we cannot use user-id to create auth-app token using cli)
• check impersonation works only with AUTH_APP_ENABLE_IMPERSONATION=true
• AUTH_APP_ENABLE_IMPERSONATION is for API only

Use of Token

Enable with PROXY_ENABLE_APP_AUTH=true (https://owncloud.dev/services/auth-app/#service-startup)

• resource access using own app token [tests-only][full-ci] adding test for using auth-app token #11166
• resource access using own app token impersonation token [tests-only][full-ci] adding test for using auth-app token generated via impersonation api #11262
• access resource of another user by admin and non-admin user @prashant-gurung899
  • using auth-app and impersonation token [tests-only][full-ci] add test to access resource of another user using impersonation token. #11185
• check if token expires [tests-only][full-ci] adding test for using expired auth-app token #11168

Refactor

• split scenarios: [tests-only][full-ci] separate and refactor auth-app token related scenarios #11179

cc @saw-jan

need to confirm how to delete the tokens.
#10675

need to confirm how to delete the tokens. #10675

skipping delete test.

[saw-jan]

@nirajacharya2 I have update the description. Please, have a look

TL;DR: token return by creation request is the actual token, and the token returned by list request is the token id. So, use actula token for resource access and token-id for token deletion.