[poc] GitHub proxy

[greedy52]

RFD:

• RFD 0178: GitHub proxy #44527

Setup:

• Login as an admin user (e.g with editor role) on WebUI, follow guided enrolment for GitHub integration.

Overview:

sequenceDiagram                                
    participant git                                
    participant tsh                                
    participant client browser                                
    participant Proxy                                
    participant Auth                                
    participant GitHub                                
                                
    git->>tsh: sshCommand="tsh git ssh"                                
    alt no GitHub user ID                                
      tsh->>Proxy: CreateGitHubAuthRequestForUser                                
      Proxy->>Auth: CreateGitHubAuthRequestForUser                                
      tsh->> client browser: open                                
      client browser->> GitHub: redirect                                
      GitHub<<->>Proxy: callback                                
      Proxy<<->>Auth: verify callback and generate new cert with GitHub user ID                                
      client browser->>tsh: new cert with GitHub user ID                                
    end                                
    tsh->>Proxy: SSH transport and RBAC                                
    Proxy->>Auth: `GenerateGitHubUserCert`                                
    Auth->>Proxy: signed cert with "[email protected]" ext                                   
    Proxy->>GitHub: forward SSH                                
    git <<->>GitHub: pack-protocol                                

Loading

[aws-amplify-us-west-2]

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-47968.d3pp5qlev8mo18.amplifyapp.com