Added OAuth and its testing (#6)

* Authenticate/Authorise on resources (#5)

* Added PyJWT

* Resource API now requires authentication/authorisation

* Greeting makes use of the new read fixture

* Skipping tests when no OIDC configuration is available

* More appropriate permissions

* Tests should be running an install the first time they execute

* Additional check whether the test configuration file exists

* Fixed pylint complaint

... by ignoring the unnecessary lambda that needs to be there

* Fixed flake8 complaints

Author: MrMatAP

.idea/dataSources.xml

@@ -228,12 +228,18 @@ Configure the following clients as needed:
 * Access Type: confidential (but if it wasn't Keycloak, should be public)
 * Flow: Device Authorization Grant
 
-Keycloaks default polling interval during the device authorization flow is set to a rather long 600s. I strongly
-suggest to reduce that to 5s in the realm settings.
+Keycloak's default polling interval during the device authorization flow is set to a rather long 600s. I strongly
+suggest reducing that to 5s in the realm settings.
 
 ### Test Client
 
 * Suggested client_id: mrmat-python-api-flask-test
 * Access Type: confidential
 * Flow: Client Credentials Grant (Keycloak: "Service Accounts Enabled")
 
+### Scopes
+
+The resource API uses two scopes that need to be defined within the IDP:
+
+* mrmat-python-api-flask-resource-write - Permit create/modify/remove of resources
+* mrmat-python-api-flask-resource-read  - Permit reading resources

.idea/runConfigurations/mrmat_python_api_flask.xml

@@ -0,0 +1,46 @@
+"""Owners and Resources
+
+Revision ID: d11062fbec93
+Revises: 4594cf7d8bfb
+Create Date: 2021-06-26 17:57:31.057034
+
+"""
+from alembic import op
+import sqlalchemy as sa
+
+
+# revision identifiers, used by Alembic.
+revision = 'd11062fbec93'
+down_revision = '4594cf7d8bfb'
+branch_labels = None
+depends_on = None
+
+
+def upgrade():
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.create_table('owners',
+    sa.Column('id', sa.BigInteger().with_variant(sa.Integer(), 'sqlite'), nullable=False),
+    sa.Column('client_id', sa.String(length=255), nullable=False),
+    sa.Column('name', sa.String(length=255), nullable=False),
+    sa.PrimaryKeyConstraint('id'),
+    sa.UniqueConstraint('client_id')
+    )
+    op.add_column('resources', sa.Column('owner_id', sa.Integer(), nullable=False))
+    op.alter_column('resources', 'name',
+               existing_type=sa.VARCHAR(length=50),
+               nullable=False)
+    op.create_foreign_key(None, 'resources', 'owners', ['owner_id'], ['id'])
+    op.drop_column('resources', 'owner')
+    # ### end Alembic commands ###
+
+
+def downgrade():
+    # ### commands auto generated by Alembic - please adjust! ###
+    op.add_column('resources', sa.Column('owner', sa.VARCHAR(length=50), autoincrement=False, nullable=True))
+    op.drop_constraint(None, 'resources', type_='foreignkey')
+    op.alter_column('resources', 'name',
+               existing_type=sa.VARCHAR(length=50),
+               nullable=True)
+    op.drop_column('resources', 'owner_id')
+    op.drop_table('owners')
+    # ### end Alembic commands ###

…ations/mrmat_python_api_flask__oidc_.xml …ons/mrmat_python_api_flask__default_.xml.idea/runConfigurations/mrmat_python_api_flask__oidc_.xml renamed to .idea/runConfigurations/mrmat_python_api_flask__default_.xml .idea/runConfigurations/mrmat_python_api_flask__oidc_.xml renamed to .idea/runConfigurations/mrmat_python_api_flask__default_.xml

@@ -101,9 +101,9 @@ def create_app(config_override=None, instance_path=None):
             app.logger.info(f'Creating new instance path at {app.instance_path}')
             os.makedirs(app.instance_path)
         else:
-            app.logger.info(f'Using instance path at {app.instance_path}')
+            app.logger.info(f'Using existing instance path at {app.instance_path}')
     except OSError:
-        app.logger.error(f'Failed to create instance path at {app.instance_path}')
+        app.logger.error(f'Failed to create new instance path at {app.instance_path}')
         sys.exit(1)
 
     # When using Flask-SQLAlchemy, there is no need to explicitly import DAO classes because they themselves

…tions/mrmat_python_api_flask__debug_.xml …at_python_api_flask__default__debug_.xml.idea/runConfigurations/mrmat_python_api_flask__debug_.xml renamed to .idea/runConfigurations/mrmat_python_api_flask__default__debug_.xml .idea/runConfigurations/mrmat_python_api_flask__debug_.xml renamed to .idea/runConfigurations/mrmat_python_api_flask__default__debug_.xml

@@ -24,4 +24,4 @@
 """
 
 from .api import bp as api_resource_v1       # noqa: F401
-from .model import Resource, ResourceSchema  # noqa: F401
+from .model import Owner, Resource, OwnerSchema, ResourceSchema  # noqa: F401