Well Known Security

[bbengfort]

Scope of changes

This PR adds the "well known security" files to the ./well-known endpoint including:

1. /.well-known/jwks.json: https://auth0.com/docs/secure/tokens/json-web-tokens/json-web-key-sets#learn-more
2. /.well-known/security.txt: https://securitytxt.org/
3. /.well-known/openid-configuration: https://connect2id.com/learn/openid-connect

These endpoints allow clients to verify the security model of Quarterdeck and to use Quarterdeck as an authentication service.

Fixes SC-10002

Type of change

• new feature
• bug fix
• documentation
• testing
• technical debt
• other (describe)

Acceptance criteria

Check to ensure that the security model exposed by these endpoints makes sense.

Author checklist

• I have manually tested the change and/or added automation in the form of unit tests or integration tests
• I have updated the dependencies list
• I have recompiled and included new protocol buffers to reflect changes I made
• I have added new test fixtures as needed to support added tests
• Check this box if a reviewer can merge this pull request after approval (leave it unchecked if you want to do it yourself)
• I have moved the associated Shortcut story to "Ready for Review"

Reviewer(s) checklist

• Any new user-facing content that has been added for this PR has been QA'ed to ensure correct grammar, spelling, and understandability.

[shortcut-integration]

This pull request has been linked to Shortcut Story #10002: Quarterdeck OpenID Tokens and JWKS.

[daniellemaxwell]

This looks good!

[codecov]

Codecov upload limit reached ⚠️

This org is currently on the free Basic Plan; which includes 250 free private repo uploads each rolling month. This limit has been reached and additional reports cannot be generated. For unlimited uploads, upgrade to our pro plan.

Do you have questions or need help? Connect with our sales team today at sales@codecov.io