Add JWT authentication type to MultipleAuthentication

[merlinz01]

Description

Allows JWT to be included in a multiple-authentication configuration.

Category

Enhancement

Why these changes are required?

Previously one cannot use basic auth and JWT auth together

What is the old behavior before changes and new behavior after changes?

OSD error when basic auth and JWT auth are configured

Issues Resolved

#1814

Testing

[Please provide details of testing done: unit testing, integration testing and manual testing]

Check List

• New functionality includes testing
• New functionality has been documented
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[merlinz01]

At this point what I am seeing is that the session cookie is being lost (deleted) when the browser requests /startup.js initiated by a script tag in the response. This results in all further API calls being unauthenticated and ultimately results in an endless loop of refreshing the page.

[merlinz01]

The request for /startup.js is the first request after the initial HTML is loaded, and it runs through the authentication flow that APIs use.

The logic here

security-dashboards-plugin/server/auth/types/authentication_type.ts

Line 100 in c143bce

if (this.authNotRequired(request)) {

decides that the request needs authenticated.

This line

security-dashboards-plugin/server/auth/types/authentication_type.ts

Line 145 in c143bce

this.sessionStorageFactory.asScoped(request).clear();

is then called, which deletes the auth cookie.

I assume this is not the desired behavior, and it seems like it would cause problems even without my changes.

Any input?

[merlinz01]

OK, I think I fixed the endless loop of the page refreshing with the above commit.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 73.91%. Comparing base (1f657ab) to head (bf5ddf6).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2107      +/-   ##
==========================================
+ Coverage   71.40%   73.91%   +2.50%     
==========================================
  Files          97       97              
  Lines        2651     2649       -2     
  Branches      404      403       -1     
==========================================
+ Hits         1893     1958      +65     
+ Misses        642      641       -1     
+ Partials      116       50      -66     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[cwperks]

@derek-ho @RyanL1997 @DarshitChanpura Could one of you take a look as well?