Manageiq: Research moving API OpenID-Connect/OAuth2 support into Apache configuration

[jvlcek]

manageiq-api PR 737 added OpenID-Connect/OAuth2 support to the API.

It might be possible to simplify this solution by leveraging OpenID-Connect/OAuth2 setup in the mod_auth_openidc configuration files.

This issue will be used to track this investigation.

• [x] https://github.com/ManageIQ/manageiq-appliance/pull/282
• [x] https://github.com/ManageIQ/manageiq-api/pull/828
• [x] https://github.com/ManageIQ/manageiq/pull/20131

[jvlcek]

@miq-bot add_label core/authentication
@miq-bot add_label refactoring
@miq-bot assign @jvlcek

[bdunne]

If this is not possible, then tests should be added to cover the code moved in #19936

[abellotti]

Hi @jvlcek, was peeking at this today, looks like we should be able to protect our /api endpoint Location
using an AuthType of oauth20. There's a good write-up on it at https://github.com/zmartzone/mod_auth_openidc/wiki/OAuth-2.0-Resource-Server

Hopefully we can kick the tire with some of these examples.

[jvlcek]

@abellotti Thank you for that pointer. I'm kicking away at the tires on it right now.