Prototype AAI Infrastructure Component Token Flows in OpenCADC Services (CADC-12760 #5)

Token flow use cases include scenarios where infrastructure software (services and other background processes) need to make authenticated calls to other service API. This is part of the operation of the infrastructure, not in response to a user interaction or request to an API.

The miniSRCNet Demonstrator can be used to provide some concrete examples of infrastructure components that will rely on correct token flows. We anticipate two flavours of use case:

• authenticated access so that proprietary assets (files, observations, s/w images) can be synchronized to SRCNet nodes by authenticating and enforcing permissions
• protect some global services from use/abuse by users when they are intended for use by infrastructure running at the SRCNet nodes only

The Purple team will provide the implementation recommendations for token flows as part of https://jira.skatelescope.org/browse/SP-3952

This Feature will deliver a prototype of the recommended approach for operational tokens in the A&A library, and will document the approach and the lessons learned during the prototyping.

As part of the prototyping, token use will be made configurable in affected MSND software. New versions will be released for use in the MSND deployments.

Architectural aspects:

• data access API
• every node will synchronize data with its own identity