feat: jwt as idp (#2363)

* feat: jwt idp

* feat: command side

* feat: add tests

* fill idp views with jwt idps and return apis

* add jwtEndpoint to jwt idp

* begin jwt request handling

* merge

* handle jwt idp

* cleanup

* fixes

* autoregister

* get token from specific header name

* error handling

* fix texts

* handle renderExternalNotFoundOption

Co-authored-by: fabi <fabienne.gerschwiler@gmail.com>

internal/repository/idpconfig/jwt_config.go

@@ -0,0 +1,140 @@
+package idpconfig
+
+import (
+	"encoding/json"
+
+	"github.com/caos/zitadel/internal/eventstore"
+
+	"github.com/caos/zitadel/internal/errors"
+	"github.com/caos/zitadel/internal/eventstore/repository"
+)
+
+const (
+	JWTConfigAddedEventType   eventstore.EventType = "jwt.config.added"
+	JWTConfigChangedEventType eventstore.EventType = "jwt.config.changed"
+)
+
+type JWTConfigAddedEvent struct {
+	eventstore.BaseEvent `json:"-"`
+
+	IDPConfigID  string `json:"idpConfigId"`
+	JWTEndpoint  string `json:"jwtEndpoint,omitempty"`
+	Issuer       string `json:"issuer,omitempty"`
+	KeysEndpoint string `json:"keysEndpoint,omitempty"`
+	HeaderName   string `json:"headerName,omitempty"`
+}
+
+func (e *JWTConfigAddedEvent) Data() interface{} {
+	return e
+}
+
+func (e *JWTConfigAddedEvent) UniqueConstraints() []*eventstore.EventUniqueConstraint {
+	return nil
+}
+
+func NewJWTConfigAddedEvent(
+	base *eventstore.BaseEvent,
+	idpConfigID,
+	jwtEndpoint,
+	issuer,
+	keysEndpoint,
+	headerName string,
+) *JWTConfigAddedEvent {
+	return &JWTConfigAddedEvent{
+		BaseEvent:    *base,
+		IDPConfigID:  idpConfigID,
+		JWTEndpoint:  jwtEndpoint,
+		Issuer:       issuer,
+		KeysEndpoint: keysEndpoint,
+		HeaderName:   headerName,
+	}
+}
+
+func JWTConfigAddedEventMapper(event *repository.Event) (eventstore.EventReader, error) {
+	e := &JWTConfigAddedEvent{
+		BaseEvent: *eventstore.BaseEventFromRepo(event),
+	}
+
+	err := json.Unmarshal(event.Data, e)
+	if err != nil {
+		return nil, errors.ThrowInternal(err, "JWT-m0fwf", "unable to unmarshal event")
+	}
+
+	return e, nil
+}
+
+type JWTConfigChangedEvent struct {
+	eventstore.BaseEvent `json:"-"`
+
+	IDPConfigID string `json:"idpConfigId"`
+
+	JWTEndpoint  *string `json:"jwtEndpoint,omitempty"`
+	Issuer       *string `json:"issuer,omitempty"`
+	KeysEndpoint *string `json:"keysEndpoint,omitempty"`
+	HeaderName   *string `json:"headerName,omitempty"`
+}
+
+func (e *JWTConfigChangedEvent) Data() interface{} {
+	return e
+}
+
+func (e *JWTConfigChangedEvent) UniqueConstraints() []*eventstore.EventUniqueConstraint {
+	return nil
+}
+
+func NewJWTConfigChangedEvent(
+	base *eventstore.BaseEvent,
+	idpConfigID string,
+	changes []JWTConfigChanges,
+) (*JWTConfigChangedEvent, error) {
+	if len(changes) == 0 {
+		return nil, errors.ThrowPreconditionFailed(nil, "IDPCONFIG-fn93s", "Errors.NoChangesFound")
+	}
+	changeEvent := &JWTConfigChangedEvent{
+		BaseEvent:   *base,
+		IDPConfigID: idpConfigID,
+	}
+	for _, change := range changes {
+		change(changeEvent)
+	}
+	return changeEvent, nil
+}
+
+type JWTConfigChanges func(*JWTConfigChangedEvent)
+
+func ChangeJWTEndpoint(jwtEndpoint string) func(*JWTConfigChangedEvent) {
+	return func(e *JWTConfigChangedEvent) {
+		e.JWTEndpoint = &jwtEndpoint
+	}
+}
+
+func ChangeJWTIssuer(issuer string) func(*JWTConfigChangedEvent) {
+	return func(e *JWTConfigChangedEvent) {
+		e.Issuer = &issuer
+	}
+}
+
+func ChangeKeysEndpoint(keysEndpoint string) func(*JWTConfigChangedEvent) {
+	return func(e *JWTConfigChangedEvent) {
+		e.KeysEndpoint = &keysEndpoint
+	}
+}
+
+func ChangeHeaderName(headerName string) func(*JWTConfigChangedEvent) {
+	return func(e *JWTConfigChangedEvent) {
+		e.HeaderName = &headerName
+	}
+}
+
+func JWTConfigChangedEventMapper(event *repository.Event) (eventstore.EventReader, error) {
+	e := &JWTConfigChangedEvent{
+		BaseEvent: *eventstore.BaseEventFromRepo(event),
+	}
+
+	err := json.Unmarshal(event.Data, e)
+	if err != nil {
+		return nil, errors.ThrowInternal(err, "JWT-fk3fs", "unable to unmarshal event")
+	}
+
+	return e, nil
+}