introduce auth mode=development

Author: byewokko

asab/web/auth/providers/id_token.py

@@ -46,7 +46,7 @@ async def initialize(self):
 
 	async def authorize(self, request: aiohttp.web.Request) -> Authorization:
 		if not self._KeyProviders:
-			L.debug("No public key providers registered for ID token authentication.")
+			L.warning("No public key providers registered for ID token authentication.")
 			raise NotAuthenticatedError()
 
 		bearer_token = get_bearer_token_from_authorization_header(request)

asab/web/auth/service.py

@@ -156,21 +156,28 @@ def _set_up_providers(self):
 			from .providers.key_providers import UrlPublicKeyProvider
 			public_key_provider = UrlPublicKeyProvider(self.App, public_keys_url)
 			id_token_provider.register_key_provider(public_key_provider)
+		else:
+			public_key_provider = None
 
 		enabled = Config.get("auth", "enabled", fallback=True)
 		if enabled == "mock":
-			introspection_url = Config.get("auth", "introspection_url", fallback=None)
-			if introspection_url:
-				from .providers import AccessTokenAuthProvider
-				provider = AccessTokenAuthProvider(self.App, introspection_url=introspection_url)
-				provider.register_key_provider(public_key_provider)
-				self.Providers.append(provider)
-			else:
-				from .providers import MockAuthProvider
-				provider = MockAuthProvider(self.App, auth_claims_path=Config.get("auth", "mock_user_info_path"))
-				self.Providers.append(provider)
+			from .providers import MockAuthProvider
+			provider = MockAuthProvider(self.App, auth_claims_path=Config.get("auth", "mock_user_info_path"))
+			self.Providers.append(provider)
 			return
 
+		elif enabled == "development":
+			introspection_url = Config.get("auth", "introspection_url", fallback=None)
+			if introspection_url is None or public_key_provider is None:
+				raise ValueError(
+					"AuthService is in development mode, but introspection_url or public_keys_url is not set."
+				)
+
+			from .providers import AccessTokenAuthProvider
+			provider = AccessTokenAuthProvider(self.App, introspection_url=introspection_url)
+			provider.register_key_provider(public_key_provider)
+			self.Providers.append(provider)
+
 		elif string_to_boolean(enabled) is False:
 			raise ValueError(
 				"Disabling AuthService is deprecated. "