Service Accounts

[kobergj]

Introduces service-account auth manager

ATTENTION: BREAKS OCIS TEMPORARILY

check owncloud/ocis#6427 before merging

[update-docs]

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

[gmgigi96]

Interesting! Which is the context of this?

[kobergj]

@gmgigi96 sorry, I completely missed your comment. Shame on me 😞

We want to have so called service-accounts. We want to use these for inter service communication, instead of impersonating users like we do currently.

Reason for this is that we do not have an active user in some parts of the code, but need to get spaces/filemetadata/users/groups/....

[rhafer]

Overall this looks fine to me. Just a new nits and questions.

[rhafer]

IMO it's good now for a start.

[kobergj]

Temporarilly converted to draft so it doesn't get merged before #4133 (that one is urgent for the web team)

[rhafer]

Ugh, just noticed that this will happily validate an any userid with an empty password (apart from the ones set in the ServiceUsers slice) . So it's possible to get a token using

authRes, err := gatewayClient.Authenticate(ctx, &gateway.AuthenticateRequest{
        Type:         "serviceaccounts",
        ClientId:    "what-ever-id-you-want",
        ClientSecret: "",
})

[kobergj]

Thanks. Missed that. Fixed now 👍