Fetch least privilege permissions for set of request URLs and not individual request URLs

[millicentachieng]

Overview

Fixes #1505

Example

Sample permissions file

{
  "/users/{id}/chats": {
     "GET": {
         "DelegatedWork": {
	      "leastPrivilegePermissions": [
                  "Chat.ReadBasic"
	      ],
	   "allPermissions": [
	       "Chat.Read",
	       "Chat.ReadBasic",
	       "Chat.ReadWrite"
	   ]
      }
  },
  "/chats/{id}/messages": {
     "GET": {
         "DelegatedWork": {
	      "leastPrivilegePermissions": [
                  "Chat.Read"
	      ],
	   "allPermissions": [
	       "Chat.Read",
	       "Chat.ReadWrite"
	   ]
      }
  }
}

Request

POST /permissions?scopeType=DelegatedWork
[ 
    { 
        "requestUrl": "/users/{id}/chats",
        "method": "GET"
    },
    { 
        "requestUrl": "/chats/{id}/messages",
        "method": "POST"
    }
]

Response

[
    {
        "value": "Chat.Read",
        "scopeType": "DelegatedWork",
        "consentDisplayName": "Read your chat messages",
        "consentDescription": "Allows an app to read your 1 on 1 or group chat messages in Microsoft Teams, on your behalf.",
        "isAdmin": false,
        "isLeastPrivilege": true,
        "isHidden": false
    }
]

[sonarqubecloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

82.3% Coverage
0.0% Duplication

[baywet]

Thanks for making the changes