feat: [hca dcp] implement authorization code flow with azul for hca dcp dev (#4805)

site-config/hca-dcp/ma-dev/authentication/authentication.ts

@@ -0,0 +1,12 @@
+import { AuthenticationConfig } from "@databiosphere/findable-ui/lib/config/entities";
+import { getGoogleProvider, TERRA_SERVICE } from "./constants";
+
+export function getAuthenticationConfig(
+  authenticationConfig: AuthenticationConfig,
+  dataSourceUrl: string
+): AuthenticationConfig {
+  const authentication = { ...authenticationConfig };
+  authentication.providers = [getGoogleProvider(dataSourceUrl)];
+  authentication.services = [TERRA_SERVICE];
+  return authentication;
+}

site-config/hca-dcp/ma-dev/authentication/constants.ts

@@ -0,0 +1,38 @@
+import {
+  OAUTH_FLOW,
+  OAuthProvider,
+} from "@databiosphere/findable-ui/lib/config/entities";
+import { GOOGLE_SIGN_IN_PROVIDER } from "@databiosphere/findable-ui/lib/google/config";
+import { GoogleProfile } from "@databiosphere/findable-ui/lib/google/types";
+
+import { OAUTH_GOOGLE_SIGN_IN } from "../../../common/authentication";
+
+const CLIENT_ID =
+  "713613812354-aelk662bncv14d319dk8juce9p11um00.apps.googleusercontent.com";
+
+/**
+ * Returns the Google OAuth provider configured for the authorization code
+ * flow, with `authorize` derived from the given Azul base URL.
+ * @param dataSourceUrl - Azul base URL.
+ * @returns Google OAuth provider.
+ */
+export function getGoogleProvider(
+  dataSourceUrl: string
+): OAuthProvider<GoogleProfile> {
+  return {
+    ...GOOGLE_SIGN_IN_PROVIDER,
+    ...OAUTH_GOOGLE_SIGN_IN,
+    // Relies on dataSourceUrl having a trailing slash (set as `${dataUrl}/` in dev/config.ts).
+    authorize: `${dataSourceUrl}user/authorize`,
+    clientId: CLIENT_ID,
+    flow: OAUTH_FLOW.AUTHORIZATION_CODE,
+  };
+}
+
+export const TERRA_SERVICE = {
+  endpoint: {
+    profile: "https://sam.dsde-dev.broadinstitute.org/register/user/v1",
+    tos: "https://sam.dsde-dev.broadinstitute.org/register/user/v2/self/termsOfServiceDetails",
+  },
+  id: "terra",
+};

site-config/hca-dcp/ma-dev/config.ts

@@ -2,6 +2,7 @@ import { GIT_HUB_REPO_URL } from "../../common/constants";
 import { SiteConfig } from "../../common/entities";
 import { makeManagedAccessConfig } from "../cc-ma-dev/config";
 import { makeConfig } from "../dev/config";
+import { getAuthenticationConfig } from "./authentication/authentication";
 
 // Template constants
 const BROWSER_URL = "https://explore.dev.singlecell.gi.ucsc.edu";
@@ -20,4 +21,12 @@ if (config.analytics) {
   config.analytics = undefined;
 }
 
+// Update authentication for the dev environment (authorization code flow).
+if (config.authentication) {
+  config.authentication = getAuthenticationConfig(
+    config.authentication,
+    config.dataSource.url
+  );
+}
+
 export default config;