Security token passed with OwP requests

[sshetenhelm]

Story Right now communications are "open" between Mgmt APIs and Blacklight. It might be good to have a security token of some kind passed with the requests. The Mgmt APIs are blocked by the firewall [note: need to review/confirm the setup] and should be unreachable but this would be a second line of defense.

This work should take place after #2876 (merging demo with main) but prior to release)

Acceptance

• [x] Configure security token in AWS Parameter Store
• [x] Add to Camerata
  • [x] Management
  • [x] Blacklight
• [x] Pass security token with OwP API requests from Blacklight
  • [x] Use Authorization HTTP header
• [x] All OwP handlers in Management validate the header value

[K8Sewell]

PRs ready for review: Blacklight - https://github.com/yalelibrary/yul-dc-blacklight/pull/1032/ Camerata - https://github.com/yalelibrary/yul-dc-camerata/pull/382 Management - https://github.com/yalelibrary/yul-dc-management/pull/1418

[K8Sewell]

Camerata - auto-deployed to Test Blacklight - Deployed to Test with release v1.63.7 Management - Deployed to Test with release v2.71.5

[K8Sewell]

Not working - taking back to in progress

[K8Sewell]

I did not add the token variable to all the places it needed to be. This PR fixes that - https://github.com/yalelibrary/yul-dc-camerata/pull/384

[K8Sewell]

Confirmed that auth token present in blacklight and management tasks on AWS yet still getting an 'unauthorized' response instead of displaying the request form as expected. Taking back to in progress.

[K8Sewell]

PRs ready for review:

https://github.com/yalelibrary/yul-dc-blacklight/pull/1042 https://github.com/yalelibrary/yul-dc-management/pull/1426

[K8Sewell]

PRs ready for review:

https://github.com/yalelibrary/yul-dc-blacklight/pull/1043 https://github.com/yalelibrary/yul-dc-management/pull/1426

[martinlovell]

We can just put the header on requests so management knows it's blacklight. We don't need them on responses. Blacklight will trust that it's talking to management for this ticket.

[K8Sewell]

Updated the PRs and they are ready for review

PRs ready for review:

https://github.com/yalelibrary/yul-dc-blacklight/pull/1043 https://github.com/yalelibrary/yul-dc-management/pull/1426

[K8Sewell]

Deployed to Test with Blacklight release v1.63.8 and Management release v2.71.6

[K8Sewell]

Behaviors work as expected. Will promote to UAT.

#### Curl in Terminal  #### User Flow Pending request from pending to approved   Creation of request     As an admin of some but not all permission sets - search display results as expected 

[sshetenhelm]

Appears to be working as expected for me in UAT :)