feature/fix-service-task-oauth-flow (#1108)

* corrected service task controller excluded auth methods to reference the correct controller w/ burnettk

* fixed docs requirements file w/ burnettk

---------

Co-authored-by: jasquat <jasquat@users.noreply.github.com>

docs/requirements.txt

@@ -17,14 +17,14 @@ imagesize==1.4.1
 Jinja2==3.1.2
 lazy-object-proxy==1.10.0
 livereload==2.6.3
-lsprotocol==2023.0.0a1
+lsprotocol==2023.0.1
 markdown-it-py==3.0.0
 MarkupSafe==2.1.2
 mdit-py-plugins==0.4.0
 mdurl==0.1.2
 myst-parser==2.0.0
 packaging==23.1
-pygls==1.0.2
+pygls==1.3.0
 Pygments==2.17.2
 pyspellchecker==0.7.2
 PyYAML==6.0.1

spiffworkflow-backend/src/spiffworkflow_backend/routes/authentication_controller.py

@@ -64,7 +64,7 @@ def verify_token(token: str | None = None, force_run: bool | None = False) -> di
     if not force_run and AuthorizationService.should_disable_auth_for_request():
         return None
 
-    token_info = _find_token_from_headers(token)
+    token_info = _find_token_from_request(token)
 
     # This should never be set here but just in case
     _clear_auth_tokens_from_thread_local_data()
@@ -306,7 +306,7 @@ def _force_logout_user_if_necessary(user_model: UserModel | None, decoded_token:
     return False
 
 
-def _find_token_from_headers(token: str | None) -> dict[str, str | None]:
+def _find_token_from_request(token: str | None) -> dict[str, str | None]:
     api_key = None
     if not token and "Authorization" in request.headers:
         token = request.headers["Authorization"].removeprefix("Bearer ")

spiffworkflow-backend/src/spiffworkflow_backend/services/authorization_service.py

@@ -78,8 +78,8 @@ PATH_SEGMENTS_FOR_PERMISSION_ALL = [
 ]
 
 AUTHENTICATION_EXCLUSION_LIST = {
-    "authentication_begin": "spiffworkflow_backend.routes.authentication_controller",
-    "authentication_callback": "spiffworkflow_backend.routes.authentication_controller",
+    "authentication_begin": "spiffworkflow_backend.routes.service_tasks_controller",
+    "authentication_callback": "spiffworkflow_backend.routes.service_tasks_controller",
     "authentication_options": "spiffworkflow_backend.routes.authentication_controller",
     "github_webhook_receive": "spiffworkflow_backend.routes.webhooks_controller",
     "login": "spiffworkflow_backend.routes.authentication_controller",