Create CILogon OAuth2 Client for Production Deployment

[alukach]

We need an CILogon OAuth2 client for our Production deployment.

Acceptance Criteria

• (@yuvipanda) Client created with details roughly as such:

  Name : VEDA Auth Prod
  Contact email : TBD
  Home uri : https://github.com/NASA-IMPACT/veda-keycloak
  Scopes : [email, org.cilogon.userinfo, profile, openid]
  Callbacks :
  [https://auth.openveda.cloud/realms/veda/broker/cilogon/endpoint]
  
  
  Refresh enabled? : true
  Refresh lifetime? : 3600000
  Issuer : (none)
  Sign tokens? : true
  Proxy Limited? : false
  Public client? : false
  Strict Scopes? : true
  

• (@anayeaye) Store values as Secrets Manager Secret (e.g veda-keycloak-prod-cilogon-oauth-creds) on prod AWS Account:

  {
      "id": "cilogon:/client_id/...", 
      "secret": "_Zrp...qg"
  }

• (@anayeaye) Populate IDP_SECRET_ARN_CILOGON var in GitHub prod environment

[j08lue]

Previous discussion:

• CILogon subscription required? #42