[QA]tests for auth-app token generation via API and cli

[ScharfViktor]

related: #9755
docs task: #10605

Note

Creatiing app token:
POST https://localhost:9200/auth-app/tokens?expiry=24h

• this returns the actual token (save to use it later - cannot be accessed later on)

List app tokens:
GET https://localhost:9200/auth-app/tokens

• this returns list of tokens with id (NOT actual token value)

we need to have api tests for that and cli test

Bugs

• server returns status code 500 when creating token for non-existent user (Impersonation) #10815
• server returns status code 500 when deleting auth-app token of a different user #10921
• can't delete auth-app token using the token received from auth-app create request #10675

Test Cases

API

• create with expiry [tests-only][full-ci]add test for creating and listing auth token for an app using api #10662
• try to create without expiry
• list [tests-only][full-ci]add test for creating and listing auth token for an app using api #10662
• delete [tests-only][full-ci] adding test for deleting auth-app token using the token received from auth-app list request #10814
  • can't delete auth-app token using the token received from auth-app create request #10675

Impersonation

• create with expiry and username [tests-only][full-ci] add test for creating auth token for an app using impersonation api #10733
• create with expiry and user-id
• list [tests-only][full-ci] add test for creating auth token for an app using impersonation api #10733
• check impersonation works only with AUTH_APP_ENABLE_IMPERSONATION=true
• create token by user
• try to create token for non-existing user
• try to delete token by a different user

CLI

• create [tests-only][full-ci] adding test for creating auth token for an app using cli #10660
• try to create without expiry
• create with expiry and user-id
• check impersonation works only with AUTH_APP_ENABLE_IMPERSONATION=true

Use of Token

• resource access using own app token
• access resource of another user using impersonation token
• try to access resource of another user using own token
• check if token expires

cc @saw-jan

[nirajacharya2]

need to confirm how to delete the tokens.
#10675

[nirajacharya2]

need to confirm how to delete the tokens. #10675

skipping delete test.

[saw-jan]

@nirajacharya2 I have update the description. Please, have a look

TL;DR: token return by creation request is the actual token, and the token returned by list request is the token id. So, use actula token for resource access and token-id for token deletion.