feat(embedded): aud claim and type for guest token

[lilykuang]

SUMMARY

• add audience claim and type to guest token
• limit guest token to one workspace

BEFORE/AFTER SCREENSHOTS OR ANIMATED GIF

TESTING INSTRUCTIONS

ADDITIONAL INFORMATION

• Has associated issue:
• Required feature flags:
• Changes UI
• Includes DB Migration (follow approval process in SIP-59)
  • Migration is atomic, supports rollback & is backwards-compatible
  • Confirm DB migration upgrade and downgrade tested
  • Runtime estimates and downtime expectations provided
• Introduces new feature or API
• Removes existing feature or API

[codecov]

Codecov Report

Merging #18651 (4face91) into master (f03b4db) will increase coverage by 0.36%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##           master   #18651      +/-   ##
==========================================
+ Coverage   66.29%   66.65%   +0.36%     
==========================================
  Files        1603     1603              
  Lines       62744    63512     +768     
  Branches     6320     6320              
==========================================
+ Hits        41593    42331     +738     
- Misses      19499    19529      +30     
  Partials     1652     1652              

Flag	Coverage Δ
hive	52.13% <28.57%> (-0.01%)	⬇️
javascript	51.28% <ø> (ø)
mysql	81.66% <100.00%> (+0.34%)	⬆️
postgres	81.70% <100.00%> (+0.34%)	⬆️
presto	52.65% <28.57%> (+0.66%)	⬆️
python	82.14% <100.00%> (+0.34%)	⬆️
sqlite	81.05% <100.00%> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
superset/config.py	91.92% <100.00%> (+0.02%)	⬆️
superset/security/manager.py	94.32% <100.00%> (+0.06%)	⬆️
superset/db_engine_specs/mssql.py	96.66% <0.00%> (+0.83%)	⬆️
superset/db_engine_specs/base.py	89.93% <0.00%> (+1.49%)	⬆️
superset/connectors/sqla/models.py	91.99% <0.00%> (+3.25%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f03b4db...4face91. Read the comment docs.

[craig-rueda]

Pls add some tests where the supplied token isn't a "guest" token, and where the aud doesn't match