Fully deprecate HTTP client.

[Joerger]

Description The new API client should completely replace the old http client. We can leave the http server lib/auth/apiserver.go for backwards compatibility if needed.

There is no set timeline, but this should be used to more easily track progress.

Convert remaining http endpoints to GRPC:

• resources:
  • Sessions
  • [ ] CRUD
  • Cert Authority
  • [x] CRUD
  • [x] GetClusterCACert
  • [x] RotateCertAuthority
  • [x] RotateExternalCertAuthority
  • Tokens
  • [x] GenerateToken
  • [ ] RegisterUsingToken
  • Nodes
  • [x] CRUD
  • [x] XXX UpsertNodes - users should range over nodes with UpsertNode
  • [x] DeleteAllNodes
  • Reverse Tunnel
  • [ ] CRUD (Get unimplemented?)
  • TunnelConnection
  • [ ] CRUD
  • [ ] GetAllTunnelConnections
  • [ ] DeleteTunnelConnections
  • [ ] DeleteAllTunnelConnections
  • Remote Cluster
  • [x] CRUD
  • [x] DeleteAllRemoteClusters
  • Auth Server
  • [ ] CRUD
  • Proxy
  • [ ] CRUD
  • [ ] DeleteAllProxies
  • Password
  • [x] CheckPassword
  • [ ] ChangePassword
  • [x] UpsertPassword
  • Web Session
  • [ ] CRUD
  • [ ] ExtendWebSession
  • User
  • [x] UpsertUser - Should be deprecated in favor of Update and Create
  • [ ] AuthenticateWebUser
  • [ ] AuthenticateSSHUser
  • Connectors
  • [x] CreateOIDCAuthRequest
  • [ ] ValidateOIDCAuthCallback
  • [x] CreateSAMLAuthRequest
  • [ ] ValidateSAMLResponse
  • [x] CreateGithubAuthRequest
  • [ ] ValidateGithubAuthCallback
  • Namespace
  • [ ] CRUD
  • Cluster Config
  • [x] GetClusterConfig
  • [x] SetClusterConfig
  • Cluster Name
  • [ ] GetClusterName
  • [ ] SetClusterName
  • Static Tokens
  • [x] DeleteStaticTokens
  • [x] GetStaticTokens
  • [x] SetStaticTokens
  • Auth Preference
  • [x] GetAuthPreference
  • [x] SetAuthPreference
  • Trusted Cluster'
  • [ ] ValidateTrustedCluster
  • App
• misc:
  • [ ] ProcessKubeCSR
  • [x] GetDomainName
  • [ ] CertAuthority
  • [x] GenerateServerKeys - Renamed to GenerateHostCerts
  • [ ] RegisterNewAuthServer
  • [ ] GetU2FAppID
  • [ ] GetMFAAuthenticateChallenge
  • [ ] GenerateKeyPair
  • [x] XXX GenerateHostCert - Should be deprecated in favor of GenerateHostCerts
  • [ ] GetSignupU2FRegisterRequest
  • [ ] ChangePasswordWithToken
  • [ ] EmitAuditEventLegacy
  • [ ] PostSessionSlice
  • [ ] GetSessionChunk
  • [ ] UploadSessionRecording
  • [ ] GetSessionEvents
  • [ ] SearchEvents
  • [ ] SearchSessionEvents
  • [ ] GetAppServers
  • [ ] GetDatabaseServers

If any of these methods are no longer needed/supported, feel free to help track this by updating the bullet point.

• [x] XXX UpsertNodes - note for why it's not needed

Unimplemented and unsupported methods such as DeactivateCertAuthority are omitted.

[awly]

@Joerger please migrate GetAuthPreference for 7.0, for use in teleport plugins.

[strideynet]

https://github.com/gravitational/teleport/pull/18677 removes CheckPassword - hence "completing" the HTTP -> gRPC migration for it 😉

[strideynet]

Good progress being made on CertAuthority CRUD methods:

https://github.com/gravitational/teleport/pull/23070 https://github.com/gravitational/teleport/pull/22985 https://github.com/gravitational/teleport/pull/22624

[strideynet]

As of https://github.com/gravitational/teleport/pull/38667 GenerateHostCert is migrated.

[Joerger]

RotateCertAuthority migrated: https://github.com/gravitational/teleport/pull/36536 RotateExternalCertAuthority migrated: https://github.com/gravitational/teleport/pull/36540

[Joerger]

Static token endpoints removed: https://github.com/gravitational/teleport/pull/36545

[strideynet]

As an FYI - rather than migrating GetAll/DeleteAll methods - we should remove these and migrate call sites to use List.