Summary:

The code changes in this pull request cover a wide range of updates to the Cedarling application, focusing on various aspects of the authorization and policy management system. The changes include improvements to error handling, token metadata handling, claim mapping, and the introduction of new entity types, such as the Userinfo_token. These changes aim to enhance the security and flexibility of the authorization mechanisms within the Cedarling application.

From an application security perspective, the key points to highlight are:

1. Token Handling: The changes demonstrate a strong focus on securely handling and validating various types of tokens, including access tokens, ID tokens, and userinfo tokens. This is crucial for ensuring the integrity of the authentication and authorization processes.

2. Claim Mapping and Entity Creation: The improvements to claim mapping and the creation of entities based on token metadata indicate a robust approach to mapping user and role information from the tokens to the application's internal data structures. This helps to enforce appropriate access controls and authorization decisions.

3. Error Handling and Logging: The code changes include enhancements to error handling and logging, which is an important aspect of maintaining the overall security and reliability of the application.

4. Policy Management: The updates to the policy store configuration files show that the Cedarling application is using a policy-driven approach to authorization, which can provide a more flexible and maintainable security architecture.

Files Changed:

• jans-cedarling/bindings/cedarling_python/tests/test_authorize.py: The changes update the error messages in the unit tests to better reflect the underlying issue, which is an important security-related improvement.
• jans-cedarling/cedarling/Cargo.toml: The addition of the regex dependency should be reviewed to ensure that the regular expressions are implemented securely and are not vulnerable to ReDoS attacks.
• jans-cedarling/bindings/cedarling_python/src/authorize/errors.rs: The new error types and the centralized error handling mechanism demonstrate a security-conscious approach to exception management.
• jans-cedarling/cedarling/src/authz/mod.rs: The changes to the token entity creation and the use of trusted issuer information are crucial for the overall security of the authorization process.
• jans-cedarling/cedarling/src/authz/entities/create.rs: The input validation and the handling of nested types in the entity creation process are important security considerations.
• jans-cedarling/cedarling/src/authz/entities/test_create.rs: The test cases cover various error scenarios, which is a positive sign for the application's security posture.
• jans-cedarling/cedarling/src/common/cedar_schema/cedar_json.rs: The improvements to the schema handling and type lookup functionality can enhance the overall security of the policy management system.
• jans-cedarling/cedarling/src/authz/token_data.rs: The changes to the TokenPayload struct and the associated methods demonstrate a focus on secure token data handling.
• jans-cedarling/cedarling/src/common/cedar_schema/test_files/test_data_cedar.json: The addition of the Url and TrustedIssuer entities suggests the application is handling URLs and trusted issuers, which are important security considerations.
• jans-cedarling/cedarling/src/common/cedar_schema/cedar_json/entity_types.rs: The custom deserialization implementation for the entity types and attributes is a security-conscious approach.
• jans-cedarling/cedarling/src/common/policy_store.rs: The improvements to the TrustedIssuer struct and the associated metadata handling are crucial for the overall security of the authorization process.
• jans-cedarling/cedarling/src/common/policy_store/claim_mapping.rs: The claim mapping functionality and the handling of regular expressions are important security features.
• jans-cedarling/cedarling/src/common/policy_store/token_entity_metadata.rs: The simplification of the claim_mapping field is a positive change that can improve the security and maintainability of the code.
• jans-cedarling/cedarling/src/lib.rs: The addition of the authorize_entities_data method suggests the application is using a complex authorization mechanism, which requires careful security review.
• `jans