feat(admin-ui): frontend changes to support multi-issuer authz and new policy-store format in Admin UI

[duttarnab]

Multi-Issuer authz will be the only available authz in future release of cedarling. Similarly, cedarling would only use the new policy-store format (in .cjar) future. The Cedarling related endpoint in Admin UI Plugin should be modified to support Admin UI access control based on above mentioned changes.

Backend Changes GH issue: JanssenProject/jans#13432

Changes required:

1. Configuration Screen should allow to upload policy-store in .cjar format.

2. Cedarling embedded in UI should call multi_issuer_authz method. The bootstrap config should be adjusted accordingly.

[duttarnab]

Steps:
The Configuration Screen

1. User can select .cjar file from the Cedarling configuration screen.
2. On click of Upload button Admin UI will call PUT /admin-ui/security/policyStore to upload the .cjar file.
3. If the upload is successful Admin UI will call POST /admin-ui/security/syncRoleScopesMapping to generate and store role-to-scope mapping in persistence.
4. To download the uploaded policy-store Admin UI will call GET /admin-ui/security/policyStore which will have following response:

{
    "success": true,
    "responseMessage": "Policy store fetched successfully.",
    "responseCode": 200
    "responseBytes": "BAweretrytuyijdfsdasdewfregtettryrthtrhyju..."
}

5. Convert the responseBytes to zip file to download.

Cedarling Authorization

1. Upgrade "@janssenproject/cedarling_wasm" dependency to version 0.0.338
2. Use following bootstrap configuration. Do not inject CEDARLING_POLICY_STORE_URI or CEDARLING_POLICY_STORE_LOCAL_FN in bootstrap configuration (as we are doing now ).

{
  "CEDARLING_APPLICATION_NAME": "Gluu Flex Admin UI",
  "CEDARLING_AUTHORIZATION_USE_USER_PRINCIPAL": "false",
  "CEDARLING_AUTHORIZATION_USE_WORKLOAD_PRINCIPAL": "false",
  "CEDARLING_ID_TOKEN_TRUST_MODE": "never",
  "CEDARLING_JWT_SIG_VALIDATION": "disabled",
  "CEDARLING_JWT_STATUS_VALIDATION": "disabled",
  "CEDARLING_LOG_LEVEL": "DEBUG",
  "CEDARLING_LOG_TYPE": "off",
  "CEDARLING_USER_AUTHZ": "enabled",
  "CEDARLING_WORKLOAD_AUTHZ": "disabled",
}

4. Use the tokens in following format:

const tokens = [
  {
    "mapping": "GluuFlexAdminUI::Access_token",
    "payload": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.bL4Nf729_RZh4R9ucvBFGo1ST1iNIaeLAFfQhpcJxjM"
  },
  {
    "mapping": "GluuFlexAdminUI::id_token",
    "payload": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.lM6H1lY9LnH7FttoFpH9xTPCwyf7uy2XOSVUYVSBcWo"
  },
  {
    "mapping": "GluuFlexAdminUI::Userinfo_token",
    "payload": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.mg69p-EHBoBaA3FzvQDKDY1IGfAAX06u70mH96u3v14"
  }
]

5. The authorization Inputs will be in following format:

const authzInputs = {tokens: tokens,
                    action: 'GluuFlexAdminUI::Action::"read"',
                    context: {},
                    resource: resource
}

5. Call GET /admin-ui/security/policyStore to get responseBytes of the policy-store.

    "responseCode": 200
    "responseBytes": "BAweretrytuyijdfsdasdewfregtettryrthtrhyju..."
}

6. Initialize cedarling with let cedarling = await init_from_archive_bytes(config, bytes);

7. Call cedarling.authorize_multi_issuer(authzInputs) for authorization.