[ocis] introduce service accounts

[exalate-issue-sync]

Description

to get a better understanding what "service accounts" means please read https://github.com/owncloud/ocis/blob/master/docs/ocis/adr/0021-service-accounts.md

TODO

• create auth provider which reads service users from a file

User Stories

• As a ocis service i need to execute operations which need to be authenticated to other services to do background tasks when no active user is present.

Value

Acceptance Criteria

• service accounts can authenticate against the service accounts auth provider
• service accounts can be fitted with permissions via Roles (first iteration)

Definition of ready

[ ] everybody needs to understand the value written in the user story
[ ] acceptance criteria has to be defined
[ ] all dependencies of the user story need to be identified
[ ] feature should be seen from an end user perspective
[ ] user story has to be estimated
[ ] story points need to be less then 20

Definition of done

• Functional requirements
  [ ] functionality described in the user story works
  [ ] acceptance criteria are fulfilled
• Quality
  [ ] code review happened
  [ ] CI is green
  [ ] critical code received unit tests by the developer
  [ ] automated tests passed (if automated tests are not available, this test needs to be created and passed
• Non-functional requirements
  [ ] no sonar cloud issues

[stale]

This issue has been automatically marked as stale because it has not had recent activity. It will be closed in 10 days if no further activity occurs. Thank you for your contributions.

[wkloucek]

@kobergj does this mean the ocis storage-users trash-bin purge-expired will use the service account in the future?

[kobergj]

Good point. Reminds me that the storage-users commands are not tested anywhere.

Yes it will also use service-accounts.

[wkloucek]

Yes it will also use service-accounts.

Nice!

[kobergj]

Landed on master