Add AWS remote auth login

api/authorization.yml

@@ -18,6 +18,9 @@ components:
       type: http
       scheme: bearer
       bearerFormat: JWT
+    external_auth:
+      type: http
+      scheme: basic
 
   parameters:
     PaginationPrefix:
@@ -363,6 +366,15 @@ components:
           items:
             $ref: "#/components/schemas/ExternalPrincipal"
 
+    ExternalLoginInformation:
+      type: object
+      required:
+        - presigned_url
+      properties:
+        presigned_url:
+          type: string
+
+
 paths:
   /auth/users:
     get:
@@ -1102,6 +1114,7 @@ paths:
           $ref: "#/components/responses/Unauthorized"
         default:
           $ref: "#/components/responses/ServerError"
+
   /auth/users/{userId}/external/principals/ls:
       parameters:
         - in: path
@@ -1112,6 +1125,7 @@ paths:
       get:
         tags:
           - auth
+          - external
           - experimental
         parameters:
           - $ref: "#/components/parameters/PaginationPrefix"
@@ -1148,6 +1162,7 @@ paths:
     post:
       tags:
         - auth
+        - external
         - experimental
       operationId: createUserExternalPrincipal
       summary: Create principal as external identity connected to lakeFS user
@@ -1164,8 +1179,9 @@ paths:
           $ref: "#/components/responses/ServerError"
     delete:
         tags:
-            - auth
-            - experimental
+          - auth
+          - external
+          - experimental
         operationId: deleteUserExternalPrincipal
         summary: delete external principal from user's external principal list
         responses:
@@ -1208,6 +1224,38 @@ paths:
         default:
           $ref: "#/components/responses/ServerError"          
 
+  /auth/external/login:
+    post:
+      tags:
+        - auth
+        - external
+        - experimental
+      operationId: externalLogin
+      summary: perform a login using an external authenticator
+      security: []
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/ExternalLoginInformation"
+      responses:
+        200:
+          description: successful login
+          headers:
+            Set-Cookie:
+              schema:
+                type: string
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/User"
+        401:
+          $ref: "#/components/responses/Unauthorized"
+        420:
+          description: too many requests
+        default:
+          $ref: "#/components/responses/ServerError"
+
   /healthcheck:
     get:
       operationId: healthCheck

api/swagger.yml

@@ -17,6 +17,7 @@ security:
   - cookie_auth: []
   - oidc_auth: []
   - saml_auth: []
+  - external_auth: []
 components:
   securitySchemes:
     basic_auth:
@@ -38,6 +39,10 @@ components:
       type: apiKey
       in: cookie
       name: saml_auth_session
+    external_auth:
+      type: http
+      scheme: basic
+
   parameters:
     PaginationPrefix:
       in: query
@@ -1050,6 +1055,14 @@ components:
         secret_access_key:
           type: string
 
+    ExternalLoginInformation:
+      type: object
+      required:
+        - presigned_url
+      properties:
+        presigned_url:
+          type: string
+
     AuthenticationToken:
       type: object
       required:
@@ -1803,7 +1816,37 @@ paths:
         default:
           $ref: "#/components/responses/ServerError"
 
-
+  /auth/external/login:
+    post:
+      tags:
+        - auth
+        - external
+        - experimental
+      operationId: externalLogin
+      summary: perform a login using an external authenticator
+      security: []
+      requestBody:
+        content:
+          application/json:
+            schema:
+              $ref: "#/components/schemas/ExternalLoginInformation"
+      responses:
+        200:
+          description: successful login
+          headers:
+            Set-Cookie:
+              schema:
+                type: string
+          content:
+            application/json:
+              schema:
+                $ref: "#/components/schemas/AuthenticationToken"
+        401:
+          $ref: "#/components/responses/Unauthorized"
+        420:
+          description: too many requests
+        default:
+          $ref: "#/components/responses/ServerError"
 
   /auth/capabilities:
     get: