PXP-1089 add test + fix acl/authz/size query

[paulineribeyre]

Bug Fixes

• Fix query by multiple ACL items or multiple authz items or multiple URLs
• Fix query by URLs with size=0

Improvements

• Improve the OpenAPI documentation with more details on how to query by multiple items of the same parameter

[github-actions]

The style in this PR agrees with black. ✔️

This formatting comment was generated automatically by a script in uc-cdis/wool.

[vpsx]

Left a question about possible alternative!
Other than that:

• do we have any particular reason for assuming that ?x=y,z means AND instead of OR?
• do we want the same behavior for urls?

[vpsx]

Would we lose anything by doing this instead?

if acl:
    for u in acl:
        sub = session.query(IndexRecordACE.did).filter(IndexRecordACE.ace == u)
        query = query.filter(IndexRecord.did.in_(sub.subquery()))

[vpsx]

as with acl

[paulineribeyre]

do we have any particular reason for assuming that ?x=y,z means AND instead of OR?

if users want OR they can query each item separately; this is the only way to query AND
(note that currently ?x=y,z doesn't return anything)

do we want the same behavior for urls?

mm, i guess 🤔

[vpsx]

🎉 if you are bored you can specify in the swagger that the multiple urls etc will be anded 🌮