feat: Add auth-token for batch operations

[YoshihitoAso]

Close

close #354

Changes

New Table

auth_token

• Table for managing authentication tokens for each issuer

# issuer address
issuer_address = Column(String(42), primary_key=True)
# authentication token (sha256 hashed)
auth_token = Column(String(64))
# usage start
usage_start = Column(DateTime, default=datetime.utcnow)
# valid duration (sec)
# - 0: endless
valid_duration = Column(Integer, nullable=False)

New API

POST: /accounts/{issuer_address}/auth_token

• Create temporary authorization token (auth-token)

DELETE: /accounts/{issuer_address}/auth_token

• Delete authorization token

Behavior Changed API

Authorization using auth-token is available for the following APIs, in addition to authorization using eoa-password.

POST: /bond/tokens
POST: /bond/tokens/{token_address}
POST: /bond/tokens/{token_address}/additional_issue
POST: /bond/tokens/{token_address}/redeem
POST: /bond/tokens/{token_address}/personal_info
POST: /bond/tokens/{token_address}/personal_info/batch
POST: /bond/tokens/{token_address}/holders/{account_address}/personal_info
POST: /bond/transfers
POST: /bond/bulk_transfer
POST: /bond/transfer_approvals/{token_address}/{id}

POST: /share/tokens
POST: /share/tokens/{token_address}
POST: /share/tokens/{token_address}/additional_issue
POST: /share/tokens/{token_address}/redeem
POST: /share/tokens/{token_address}/personal_info
POST: /share/tokens/{token_address}/personal_info/batch
POST: /share/tokens/{token_address}/holders/{account_address}/personal_info
POST: /share/transfers
POST: /share/bulk_transfer
POST: /share/transfer_approvals/{token_address}/{id}

[purplesmoke05]

I think it would be better to use raise Exception from None or raise Exception from e when re-raise Exception
because this may generate log like following.

The above exception was the direct cause of the following exception:

---

Alternatively, it may be better to leave error raising to each function.
(Might add more arguments for log output needed in case of authentication failure)

[purplesmoke05]

AuthToken Status	=>	Action
Not exist	=>	Create
Exist and not expired	=>	Error
Exist and expired	=>	Renew

LGTM