WIP: Passports

[rushtong]

Addresses

TODO

Summary

This is a rough first pass/proof of concept at trying to generate a compliant GA4GH passport implementation.

TODO

Things that we need to review for achieving compliance:

• Request a ga4gh_passport_v1 scope for all passport requests
• Encoded JWTs The spec requires that: "Visas are signed JWTs encoded into strings using JWS Compact Serialization". This PR provides a decoded version for demonstration purposes.
• Complete the currently unimplemented claim types:
  • AcceptedTermsAndPolicies
  • LinkedIdentities
• ResearcherStatus: We need to provide a URL Claim to describe a researcher
• AffiliationAndRole: Investigate the domain value we're using now

---

Have you read CONTRIBUTING.md lately? If not, do that first.

• Label PR with a Jira ticket number and include a link to the ticket
• Label PR with a security risk modifier [no, low, medium, high]
• PR describes scope of changes
• Get a minimum of one thumbs worth of review, preferably two if enough team members are available
• Get PO sign-off for all non-trivial UI or workflow changes
• Verify all tests go green
• Test this change deployed correctly and works on dev environment after deployment

[rushtong]

@dependabot show ignore conditions

[sonarqubecloud]

Quality Gate passed

Issues
22 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
3 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
7 New issues
0 Accepted issues

Measures
0 Security Hotspots
14.9% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud