Restrict VEDA master realm access to members of Github team

[alukach]

Currently, the VEDA master realm admin access is granted to anyone who is a member of the NASA-IMPACT GitHub organization. This is achieved via our custom GithubOrgIdentityProvider:

veda-keycloak/keycloak/providers/github-org-identity-provider/src/main/java/org/nasa/impact/keycloak/provider/GithubOrgIdentityProvider.java

Lines 51 to 64 in e2bfc70

	private boolean checkOrganizationMembership(String accessToken, String organization, String username) {
	// https://docs.github.com/en/rest/orgs/members?apiVersion=2022-11-28#check-organization-membership-for-a-user
	String orgUrl = apiUrl + String.format("/orgs/%s/members/%s", organization, username);
	try {
	SimpleHttp.Response response = SimpleHttp.doGet(orgUrl, session)
	.header("Authorization", "Bearer " + accessToken)
	.header("Accept", "application/json")
	.asResponse();
	int statusCode = response.getStatus();
	return statusCode == 204;
	} catch (IOException e) {
	throw new IdentityBrokerException("Could not verify organization membership", e);
	}
	}

We should alter this provider to additionally check for the membership of a team within the Github org, e.g. veda-auth. This will allow for a more narrowly scoped group of users to have such privileges.

API Docs: https://docs.github.com/en/rest/teams/members?apiVersion=2022-11-28#get-team-membership-for-a-user

[lahirujayathilake]

PR - #43

[alukach]

Closed by #43