feat: Identity brokering (#730)

* feat: add/ remove external idps

* feat: external idp add /remove

* fix: auth proto

* fix: handle login

* feat: loginpolicy on authrequest

* feat: idp providers on login

* feat: link external idp

* fix: check login policy on check username

* feat: add mapping fields for idp config

* feat: use user org id if existing

* feat: use user org id if existing

* feat: register external user

* feat: register external user

* feat: user linking

* feat: user linking

* feat: design external login

* feat: design external login

* fix: tests

* fix: regenerate login design

* feat: next step test linking process

* feat: next step test linking process

* feat: cascade remove external idps on user

* fix: tests

* fix: tests

* feat: external idp requsts on users

* fix: generate protos

* feat: login styles

* feat: login styles

* fix: link user

* fix: register user on specifig org

* fix: user linking

* fix: register external, linking auto

* fix: remove unnecessary request from proto

* fix: tests

* fix: new oidc package

* fix: migration version

* fix: policy permissions

* Update internal/ui/login/static/i18n/en.yaml

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

* Update internal/ui/login/static/i18n/en.yaml

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

* Update internal/ui/login/handler/renderer.go

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

* Update internal/ui/login/handler/renderer.go

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

* fix: pr requests

* Update internal/ui/login/handler/link_users_handler.go

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

* fix: pr requests

* fix: pr requests

* fix: pr requests

* fix: login name size

* fix: profile image light

* fix: colors

* fix: pr requests

* fix: remove redirect uri validator

* fix: remove redirect uri validator

Co-authored-by: Livio Amstutz <livio.a@gmail.com>

internal/static/i18n/en.yaml

@@ -26,6 +26,7 @@ Errors:
     AddressNotFound: Address not found
     NotHuman: The User must be personal
     NotMachine: The User must be technical
+    NotAllowedToLink: User is not allowed to link with external login provider
     Username:
       Reservied: Username is already taken
     Code:
@@ -45,6 +46,11 @@ Errors:
       HasUpper: Password must contain upper case
       HasNumber: Password must contain number
       HasSymbol: Password must contain symbol
+    ExternalIDP:
+      Invalid: Externer IDP invalid
+      IDPConfigNotExisting: IDP provider invalid for this organisation
+      NotAllowed: External IDP not allowed on this organisation
+      MinimumExternalIDPNeeded: At least one IDP must be added
     Mfa:
       Otp:
         AlreadyReady: Multifactor OTP (OneTimePassword) is already set up
@@ -97,7 +103,7 @@ Errors:
     MemberInvalid: Project member is invalid
     MemberAlreadyExists: Project member already exists
     MemberNotExisting: Project member doesn't exist
-    MinimumOneRoleNeeded: At least one role should be added
+    MinimumOneRoleNeeded: At least one role must be added
     RoleAlreadyExists: Role already exists
     RoleInvalid: Role is invalid
     RoleNotExisting: Role doesn't exist