FS-5044 - Add role-based auth to FAB

[wjrm500]

Ticket

Add role-based auth to FAB

Description

Users must be a member of the "FSD_ADMIN" group in Azure AD to authenticate for FAB, as per TDA requirements.

How to test

Pre-requisites

• Get the Funding Service repos cloned locally (see Docker Runner)
• Checkout this branch in FAB repo

Auth success

• Request to myself or Gideon that you are added to the "FSD_ADMIN" group on the test Azure AD tenant
• Spin up database, FAB and Pre-Award containers locally
• Go to https://fund-application-builder.levellingup.gov.localhost:3011/ in your browser (preferably in an incognito window to avoid any previous auth state)
• Sign in with your Microsoft credentials
• Confirm that you end up landing on the FAB home page, with "Fund application builder" in the black banner at the top

Auth failure

• Replace "FSD_ADMIN" with some other random string in create_app.py, to ensure that you do not have the correct role
• Spin up database, FAB and Pre-Award containers locally (see Docker Runner)
• Go to https://fund-application-builder.levellingup.gov.localhost:3011/ in your browser (preferably in an incognito window to avoid any previous auth state)
• Sign in with your Microsoft credentials
• Confirm that you end up landing on a page in the Authenticator frontend with content that includes "Contact the Forms team on Slack at #funding-service-forms-support to request access."

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud