add trusted-ids module

[microstudi]

Substitutes the current decidim-via_oberta_authorization and the idcat_mobil gems for the integrated https://github.com/ConsorciAOC-PRJ/decidim-module-trusted-ids gem that performs both tasks along with additional verification workflows (see the plugin for details).

In order to deploy this, the minimum ENV variables that need to be added are:

• VALID_CLIENT_ID (formerly IDCAT_MOBIL_CLIENT_ID (this is optional and can be override for any tenant)
• VALID_CLIENT_SECRET (formerly IDCAT_MOBIL_CLIENT_SECRET (also optional)
• VALID_SITE(formerly IDCAT_MOBIL_SITE_URL (without the path part)
• CENSUS_AUTHORIZATION_ENV=preproduction (or production for production, this configures the via_oberta url automatically)
• OMNIAUTH_ENABLED_BY_DEFAULT=false to not enable the valid authentication by default so it is configurable per tenant (even if a VALID_CLIENT_ID is defined)

In the case of not wanting to allow tenants to configure the VALID_CLIENT_ID or VALID_CLIENT_SECRET, also add the following ENV VAR:

• OMNIAUTH_GLOBAL_ATTRIBUTES=client_id client_secret site icon_path scope

Once deployed, needs to be configured in /system:

• The authorization methods provided with TrustedIds: vàlid and via oberta
• The via oberta settings
• Specific terms and conditions for viaoberta
• Omniauth settings for valid, if customized (optional if VALID_CLIENT_ID and VALID_CLIENT_SECRET` are defined

Upgrade tasks,

It is possible to update the tenant configuration from the IDcatMobil config to the new VALID values, to do that, please run this command in a console:

 Decidim::Organization.find_each {|o| 
  o.update_column(:omniauth_settings, 
    o.omniauth_settings.merge({
       "omniauth_settings_valid_client_id" => o.omniauth_settings["omniauth_settings_idcat_mobil_client_id"],
       "omniauth_settings_valid_client_secret" => o.omniauth_settings["omniauth_settings_idcat_mobil_client_secret"]
     })
  )
}

[tramuntanal]

Good work @microstudi !

Can you please check my comments, mainly small things 😄

[tramuntanal]

Thanks for checking, just a couple of comments and we're done

[tramuntanal]

Thanks @microstudi !