Appt 565/okta integration

[MikeHDigital]

This change adds Okta authentication as an option for user login.

There is a test user set up in the okta organisation, credentials for that will be available in confluence to facilitate testing of this change, however this will need actioning in whatever new development and test organisations that will be set up. Details around the accounts and organisation setup for the deployment to environments are still to be determined.

NHS Mail should continue to work but as yet only been able to test with the dummy oidc locally.

Significant change in this PR would be to the shape of the configuration elements around auth. As there are now multiple auth providers that need their own validation parameters and urls settting up I have altered the configuration structure to facilitate this.

Obviously that will be a breaking change if the configuration for the environments isn't amended before releasing this change set. The intention would be to add this new configuration shape to the environments in addition to the existing configuration before this is released, and then the old configuration shape can be removed once this release has stabilised.

[MikeHDigital]

I think if everyone is going to run this as it stands we will run into rate limit issues pulling the jwks especially if people iterate a lot by restarting the api.

I will add some tests that simulate the failure I'm expecting and see what we can do to mitigate the failure to allow the local oidc to keep working in the event of us breaching the rate limits set by okta.

I guess an easy enough work around will be to pull the okta config or have developers get their own okta trial account for local dev in lieu of a more "real" NHS okta org.

Okta now configured with staging environment and tested locally. Getting onto the pipeline and variable work.

[vicr1]

Additional work is needed to the deployment pipeline to make sure that configuration for the deployed application is correct. As it stands this will not work if deployed as the env vars will not be setup correctly.

[sonarqubecloud]

Quality Gate passed

Issues
1 New issue
0 Accepted issues

Measures
0 Security Hotspots
58.2% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud