Objective AU-2: Develop and test the use cases with Vanilla Keycloak and Custos-Enhanced Keycloak

[eroma2014]

Motivation

The VEDA authentication and authorization use cases will be tested with Keycloak, alongside Custos-Enhanced Keycloak, to ensure we select the most robust and secure solution for VEDA. The goal is to provide seamless access control that meets security and user experience requirements, supporting VEDA's diverse and evolving needs.

Team & Owners

Data Services - Saadiq*, Alexandra, Anthony Lukach, Dimuthu, Lahiru
JupyterHub/Science Support - Yuvi*, Alex, Dimuthu, Lahiru
VEDA dashboard - Anthony Boyd*, Jonas, Brian, Dimuthu, Lahiru

Success Criteria

The Auth use cases are tests completed on both Vanilla Keycloak and Custos-Enhanced Keycloak

Tasks

Preview Give feedback

1. Stand up instance of vanilla KeyCloak for testing #122
   +0
   
2. Decide the evaluation criteria for use case testing.
3. Implement and test the finalized use cases using both a vanilla Keycloak setup and the Keycloak enhanced with Custos functionalities (veda-auth-central).
4. Document the use case test outcomes based on the evaluation criteria. (implementation complexity, challenges, and time taken for each approach to assess their practicality). Demos or videos, comparison matrix.

Risks & Dependencies

[j08lue]

Vanilla KeyCloak test environment: https://github.com/NASA-IMPACT/veda-keycloak

Evaluation criteria: #119

Evaluation not done for all workflows yet, only WIP for Workflow 3: #142