Auth-related tasks

[jpkrohling]

This is a tracker for the auth-related tasks that should be done for GA, or soon after.

• Establish the auth context for authenticators to add data to #3552, which specifies what should be included in the context. This is required for GA, because server authenticators need to know what to publish as part of the context.
• Auth data as part of the resource #2733, which specifies how data is placed in the pdata from the context. This is not required for GA, but it's a nice to have, as it would potentially uncover API changes needed by the general auth feature.
• Propagate auth data to downstream services #2734, which covers a "passthrough" authenticator, sending the same auth data it received to a backing service. This can be done post-GA.

[tigrannajaryan]

Should #3552 be replaced by #3745?

[jpkrohling]

Yes, no, sorry. #3745 is the PR for #2733, which is part of the task list already.

[tigrannajaryan]

@bogdandrutu @jpkrohling shouldn't this be labeled required-for-ga? I am worried that it may require breaking changes and won't be possible to do after GA.

[jpkrohling]

I have to agree: right now, given that we haven't made progress with #3745, I would be a bit concerned about having a GA without understanding what needs to be changed to accommodate that PR.

@bogdandrutu, when you have some time, can we do a pair programming session and get that sorted out?