osb-cmdb performs osb client user authN,authZ as a CF route service url (access to paas-templates private network)

[gberche-orange]

Expected behavior

• As a brother author
• In order to control access to my dashboard from unauthorized access
• I need osb-cmdb to provide a route service endpoint I can use when declaring my dashboard routes using CF routing release

Observed behavior

Osb-cmdb does not yet provide such feature

Affected release

Reproduced on version 1.0

Acceptance test scenario

• Given a brokered service instance with guid brokered_guid is backed by backend service instance with guid backend-guid

• And osb-cmdb is exposed at osb-cmdb-0.redacted_domain

• And osb-cmdb is configured with osb-tenant Oauth and permission endpoint

• When traffic is sent to the route service endpoint https://osb-cmdb-0.redacted_domain/route_service/`brokered_guid`

• Then incoming user request is authenticated against the tenant Oauth server

• And the incoming user request is authorized against the tenant endpoint with brokered_guid as param

• And if authenticated proxifies traffic to specified routed url in X-CF-Forwarded-Url header, otherwises returns a 401 error with a message explaining the authN failure.

• And the incoming user is authorized