Description
Transferring some of the discussion from here, it is reasonable to setup a public field in codebase to holding some of the common logic for OBO authentication, such as the configuration checks.
Related issue/PR
Potential solutions
Potential place 1: ~/security/src/test/java/org/opensearch/security/authtoken
- reason: it is related to the OnBehalfOf feature, so that we can setup an util class in here.
**Potential place 2: ~/security/src/main/java/org/opensearch/security/util
- reason: Just like its name it is the util directory. (Recommended)
Exit Criteria
Set up the ultil class to place the reusable logic for checking endpoint calls, checking keys.