merge: Migrate to Quarkus-based web API

This pull request changes the web API to a Quarkus-based version. Currently, the OpenDC web API is written in Python (using Flask). Although Python is a powerful language to develop web services, having another language next to Kotlin/Java and JavaScript introduces some challenges.

For instance, the web API and UI lack integration with our Gradle-based build pipeline and require additional steps from the developer to start working with. Furthermore, deploying OpenDC requires having Python installed in addition to the JVM. 

By converting the web API into a Quarkus application, we can enjoy further integration with our Gradle-based build pipeline and simplify the development/deployment process of OpenDC, by requiring only the JVM and Node to work with OpenDC.

## Implementation Notes :hammer_and_pick:

* Move build dependencies into version catalog
* Design unified communication protocol
* Add Quarkus API implementation
* Add new web client implementation
* Update runner to use new web client
* Fix compatibility with React.js UI
* Remove Python build steps from CI pipeline
* Update Docker deployment for new web API
* Remove obsolete database configuration

## External Dependencies :four_leaf_clover:

* Quarkus

## Breaking API Changes :warning:

* The new web API only supports SQL-based databases for storing user-data, as opposed to MongoDB currently. We intend to use H2 for development and Postgres for production.

1 files changed, 0 insertions, 91 deletions

diff --git a/opendc-web/opendc-web-api/opendc/exts.py b/opendc-web/opendc-web-api/opendc/exts.py
deleted file mode 100644
index 3ee8babb..00000000
--- a/opendc-web/opendc-web-api/opendc/exts.py
+++ /dev/null
@@ -1,91 +0,0 @@
-import os
-from functools import wraps
-
-from flask import g, _request_ctx_stack
-from jose import jwt
-from werkzeug.local import LocalProxy
-
-from opendc.database import Database
-from opendc.auth import AuthContext, AsymmetricJwtAlgorithm, get_token, AuthError
-
-
-def get_db():
-    """
-    Return the configured database instance for the application.
-    """
-    _db = getattr(g, 'db', None)
-    if _db is None:
-        _db = Database.from_credentials(user=os.environ['OPENDC_DB_USERNAME'],
-                                        password=os.environ['OPENDC_DB_PASSWORD'],
-                                        database=os.environ['OPENDC_DB'],
-                                        host=os.environ.get('OPENDC_DB_HOST', 'localhost'))
-        g.db = _db
-    return _db
-
-
-db = LocalProxy(get_db)
-
-
-def get_auth_context():
-    """
-    Return the configured auth context for the application.
-    """
-    _auth_context = getattr(g, 'auth_context', None)
-    if _auth_context is None:
-        _auth_context = AuthContext(
-            alg=AsymmetricJwtAlgorithm(jwks_url=f"https://{os.environ['AUTH0_DOMAIN']}/.well-known/jwks.json"),
-            issuer=f"https://{os.environ['AUTH0_DOMAIN']}/",
-            audience=os.environ['AUTH0_AUDIENCE'])
-        g.auth_context = _auth_context
-    return _auth_context
-
-
-auth_context = LocalProxy(get_auth_context)
-
-
-def requires_auth(f):
-    """Decorator to determine if the Access Token is valid.
-    """
-    @wraps(f)
-    def decorated(*args, **kwargs):
-        token = get_token()
-        payload = auth_context.validate(token)
-        _request_ctx_stack.top.current_user = payload
-        return f(*args, **kwargs)
-
-    return decorated
-
-
-current_user = LocalProxy(lambda: getattr(_request_ctx_stack.top, 'current_user', None))
-
-
-def has_scope(required_scope):
-    """Determines if the required scope is present in the Access Token
-    Args:
-        required_scope (str): The scope required to access the resource
-    """
-    token = get_token()
-    unverified_claims = jwt.get_unverified_claims(token)
-    if unverified_claims.get("scope"):
-        token_scopes = unverified_claims["scope"].split()
-        for token_scope in token_scopes:
-            if token_scope == required_scope:
-                return True
-    return False
-
-
-def requires_scope(required_scope):
-    """Determines if the required scope is present in the Access Token
-    Args:
-        required_scope (str): The scope required to access the resource
-    """
-    def decorator(f):
-        @wraps(f)
-        def decorated(*args, **kwargs):
-            if not has_scope(required_scope):
-                raise AuthError({"code": "Unauthorized", "description": "You don't have access to this resource"}, 403)
-            return f(*args, **kwargs)
-
-        return decorated
-
-    return decorator