Airflow/Cognito Integration

[LucaCinquini]

We need to have Users log in to Airflow using Cognito account.

[mike-gangl]

Gherkin should include

login via UI (manual)
token login via airflow API
token login via OGC endpoint

[rtapella]

login via unity-sds-client

[LucaCinquini]

System Validation Criteria:
o Unity developers that have a Cognito account can login to the Airflow UI via a web browser
o Successful execution of the Gherkin tests for:

• Cognito token login via airflow API
• Cognito token login via OGC endpoint

[GodwinShen]

@nikki-t successfully demo'd Cognito integration, work with @jpl-btlunsfo to work out the call back.

[LucaCinquini]

It was decided that the Cognito authentication will be handled by the top level shared services proxy.

What is working right now for SPS:

• The top-level shared service proxy is protected by Cognito authentication
• HTTP(s) requests are correctly proxied from top-level proxy to mid-level proxy to Airflow

What still needs to be implemented:

• We need to be able to use the Cognito token for Airflow and OGS API requests
• Once the above is working, remove the Airflow login from the mid-proxy and prevent direct access to the mid-proxy