Add PKCE support for PingFed

Duggan, Johnrequested to merge
pingfed into dev

Summary of Changes

What: This is based upon @gzi's support for PKCE in custos. Basically, we need to use the browser cookies to track the code verifier as the default storage will lose it between the auth request and the callback.

Why: PingFed login is broken on ndip-test and ndip-k8s due to a configuration change to add PKCE support by Heidi.

Impact: Requires configuration change for Ansible/K8s deployments to enable PKCE support.

Checklist

  • The MR has a clear and concise title
  • Code is self-documented and follows style guidelines.
  • Automated tests are written and pass successfully.
  • Regression tests (e.g. manually triggered system tests, manual GUI/tool tests, ...) are performed to make sure the MR does not break anything (when applicable)
  • Readme file is present and up-to-date.

Documentation Updates

Additional Notes

Related deployment repo issue: https://code.ornl.gov/ndip/deployments/calvera/-/work_items/378

Edited by Duggan, John

Merge request reports