Feature/#1059 Enable RBAC Checks for Authenticated Users After JWT Validation

[challamani-ms]

PR contains the following changes:

• Rest endpoints to create/get user-access details, these endpoints are only accessible with namespace:admin scopes.
• UserAccessvalidatorService to perform RBAC check for the incoming request.
• Introduced a calm-hub-admin-app (a ClientId in KeyCloak) to be able to create user-access records for CalmUI/CalmCLI users.
• Unit and Integration tests
• For integration tests with authorization code flow grant type, we require a headless browser container to be able to generate an access token that is encoded with the authorized username, but currently, in one of the integration tests, I have used the password grant to enrich the username in the JWT.

Pending:

• How to perform RBAC for those endpoints that are not tied to a namespace, e.g, /calm/namespaces
• UserAccess audit service to insert entries into UserAccessAudit collection on any changes to existing UserAccess records.

---

THIS SOFTWARE IS CONTRIBUTED SUBJECT TO THE TERMS OF THE FINOS Corporate Contributor License Agreement.

THIS SOFTWARE IS LICENSED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY OF NON-INFRINGEMENT, ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. THIS SOFTWARE MAY BE REDISTRIBUTED TO OTHERS ONLY BY EFFECTIVELY USING THIS OR ANOTHER EQUIVALENT DISCLAIMER IN ADDITION TO ANY OTHER REQUIRED LICENSE TERMS.

[linux-foundation-easycla]

The committers listed above are authorized under a signed CLA.

• ✅ login: challamani-ms / name: Manikanta Challa (6e19fa7, 0b213f5, cd0ee42, 078cfbd, 46f13fd, d429eb9, a8cad3e, 706a5b6, 712f876, f2c7cfb, fe219d6, ec49543)
• ✅ login: jpgough-ms (3328d05, ca06db3, 8f3a26e)