This can be toggled on or off with a feature toggle.

Also changed the name of some variables to make the code more readable

Since we may not want to enable the identity check, it must be
togglable. This commit adds environment variable
REACT_APP_ENABLE_IGA_CHECK for toggling the check in the frontend, and
django settings variable IGA_CHECK for toggling the check in the
backend.

Queries iga for an external id matching ours. If a match is found, the
name of the owner is returend. Otherwise we return null. Uses the new
iga module to fetch the data.

Andreas Ellewsen authored 3 years ago and Jonas Braathen committed 3 years ago

If a sponsor verifies a nin that is already in use by an account in
cerebrum, the guest will gain access to that account, which in turn
allows the guest to change the password of that account. This makes it
possible to abuse the guest service to steal the account of users.

A feature that checks for this problem, and helps the sponsor make a
decision on it, will be introduced in the near future. At that point
nin verification can be enabled again.

Resolves: GREG-202

Link login was replaced by our own implementation some time ago, making
sesame pointless.

Introduces the CEREBRUM_MANUAL_SPONSOR_UNITS settings variable which
contains a list of stedkode for units where sponsors are handled
manually.

Resolves: GREG-163

To reduce the amount of code and complexity of the service we move away
from a management command triggered by a cronjob, to a task handled by
django-q. Everything works the same way as before, but the management
command now schedules the task instead of doing it. Introduces the
ORGREG_SCHEDULE_TYPE settings variable controlling the scheduled when
scheduling the import using the management command.

The setup has five parts:
- a new email template type
- a new django-q task for notifying
- a management command for scheduling the task periodically
- a new settings variable NOTIFIER_LIMIT for controlling the number of
  days into the future the notifier script should use for end date of
  roles.
- a new settings variable NOTIFIER_SCHEDULE_TYPE for controlling how
  often the notifier task should be scheduled when using the management
  command.

Resolves: GREG-162

Done to make djangoq settings accessible in production.
The sync setting is changed to the default False value since the run
order of the tasks is not relevant for our use case.
Mail sending functions have gotten a sync argument to force the tasks to
complete before checking their consequences in tests.

- Set the default to IsAdminUser
- Set it explicitly on all the views
- Add tests

We do not use the token after initial login, no need to refresh.

Set cookie SameSite policy to Lax and skip the HttpOnly flag to allow the cookies to be used by the frontend

To prevent hammering on the invite endpoint we throttle requests to the
endpoint to 100/day per ip.

Resolves: GREG-84