[Security in Core]: Cleaning up the hooks between the security plugin and Core

[TinaHeiligers]

Part of https://github.com/elastic/kibana/issues/174578

Internal hooks

This area is about cleaning the various hooks between the security plugin and core, by exposing internals APIs that Core could consume instead.

• Authentication / http
  • https://github.com/elastic/kibana/blob/de844665f75667d425687a83a6de50f01e5dca01/x-pack/plugins/security/server/authentication/authentication_service.ts#L113
  • (depends on licensing) https://github.com/elastic/kibana/blob/de844665f75667d425687a83a6de50f01e5dca01/x-pack/plugins/security/server/authentication/authentication_service.ts#L189
  • (depends on licensing) https://github.com/elastic/kibana/blob/de844665f75667d425687a83a6de50f01e5dca01/x-pack/plugins/security/server/authorization/authorization_service.tsx#L172
• ES re-authentication https://github.com/elastic/kibana/blob/de844665f75667d425687a83a6de50f01e5dca01/x-pack/plugins/security/server/authentication/authentication_service.ts#L241
• Saved Objects extensions (depends on authz)
  • https://github.com/elastic/kibana/blob/main/packages/core/saved-objects/core-saved-objects-server/src/extensions/extensions.ts

There are no consumer-facing APIs to move here, it's mostly about taking this opportunity to (finally) remove tech debt around those hooks.

[elasticmachine]

Pinging @elastic/kibana-security (Team:Security)

[elasticmachine]

Pinging @elastic/kibana-core (Team:Core)