Description

Extend the Integration Test Cases of On-Behalf-Of Authentication Backend

This testing frame work has been setup in #2857 [1]. And lets use this issue to extend the test cases. Here are some of the potential test cases:

• Testing if the create OBO endpoints can be used for issue another OBO Token. (requires - [FEATURE] Handle the edge cases of On-behalf-of Authentication #2891)
• Testing if the create OBO endpoints can be used for modifying auth info, e.g. resetting password. (requires - [FEATURE] Handle the edge cases of On-behalf-of Authentication #2891)
• Testing of the BWC Mode. (related to [Extensions] Add extensions/extensions.yml setting to enable backward compatible plugin mode for extensions #2616 )
• Test if the create OBO endpoint's incoming request does not get network based role mapped in (related to [Feature/Extension] Remove hostmapping from create OBO endpoint. #3161).

Required Pull Request

• Authentication Backend: [Security/Extension] Extension Authentication Backend #2672
• Extensions config for JWT signing/encryption key: Extensions config for JWT signing/encryption key #2671

Reference

[1]: Setup of OBO Authabackend Integration Tests: https://github.com/opensearch-project/security/blob/feature/extensions/src/integrationTest/java/org/opensearch/security/http/OnBehalfOfJwtAuthenticationTest.java
[2]: Similar test cases can be found from JwtAuthenticationTests.java: https://github.com/opensearch-project/security/blob/main/src/integrationTest/java/org/opensearch/security/http/JwtAuthenticationTests.java