Investigate using OIDC for auth

[daurer]

No description provided.

[DiamondJoseph]

https://www.rabbitmq.com/docs/oauth2

RMQ now has an oauth2 plugin that should enable us to authenticate clients.

[DiamondJoseph]

Very rudimentary AuthZ thoughts:

queues:
cm12345-1.raw-data
cm12345-1.processed-data
cm12346-1.raw-data
cm12346-1.processed-data
An analysis consumer, with a service account authentication token, has read access to *.raw-data and write access to *.processed-data
A data producer with user authentication information has write access to x.raw-data where x is every visit the user is authorized to write to, and that the audience for the authentication token is valid for.

[DiamondJoseph]

This comment has been moved to a more appropriate location
https://github.com/DiamondLightSource/workflows/issues/232