feat(security/pipeline): Add Pipeline to add more possibilities to the security builder

[42atomys]

Relative Issues: Resolve #22 , resolve #21, resolve #9, resolve #10, resolve #11

Describe the pull request
The current version of the security factories works in a very basic way and does not allow advanced uses like comparing several objects of different steps or allowing later the comparison of HMAC which is for example useful for the webhook of GitHub or Twitch.

For this we had to rewrite version 1 of the factory builder to add a so-called Pipeline overlay

In other words, stop me, I recoded the GitHub Actions system in one night, f***

TODO

• Build fonctionnal pipeline code
• Integrate already implemented the header and compare factory in this version
• Structure the code and clean it
• Add tests suites to Pipeline, Factory
• Rewrite configuration tests suites with this new version
• Rewrite handlers tests suites with this new version
• Implements new factory to resolve Security Factory: compareWithAllowedIPs / compareWithBlockedIPs #22
• Implements new factory to resolve Security Factory: compareWithGeneratedHMAC #21
• Implements new factory to resolve Security Factory: Add Built-In for Gitlab #10
• Implements new factory to resolve Security Factory: Add Built-In for Github #11

Checklist

• I have linked the relative issue to this pull request
• I have made the modifications or added tests related to my PR
• I have added/updated the documentation for my RP
• I put my PR in Ready for Review only when all the checklist is checked

Breaking changes ?
yes

Additional context

Concrete example, actual static comparaison of an header with factory/v1.Builder

security:
  - getHeader:
      name: X-Hook-Secret
  - compareWithStaticValue:
      values: ['foo', 'bar']

New version builder with factory/v2.Pipeline

security:
- header:
    id: secretHeader
    inputs:
    - name: headerName
      valueFrom:
        envRef: HEADER
- compare:
    id: secretCompare
    inputs:
    - name: first
      value: '{{ .Outputs.secretHeader.value }}'
    - name: second
      value: 'developmentSecret'
      valueFrom:
        envRef: HOOK_SECRET

[42atomys]

Config to allow IP based on X-Forwarded-For header:

  security:
  - header:
      inputs:
      - name: headerName
        value: X-Forwarded-For
  - hasPrefix:
      inputs:
      - name: text
        value: '{{ .Outputs.header.value }}'
      - name: prefix
        values: ['127.0.0.1', '[::1]']

Config to allow IP based on RemoteAddr

  security:
  - hasPrefix:
      inputs:
      - name: text
        value: '{{ .Inputs.request.RemoteAddr }}'
      - name: prefix
        values: ['127.0.0.1', '[::1]']

Config to reject (only add inverse: true)

  security:
  - hasPrefix:
      inverse: true
      inputs:
      - name: text
        value: '{{ .Inputs.request.RemoteAddr }}'
      - name: prefix
        values: ['127.0.0.1', '[::1]']

[42atomys]

Webhook configuration for Github (Tested OK | Security OK)

- name: github
  entrypointUrl: /webhooks/github
  security:
  - generate_hmac_256:
      id: signature
      inputs:
      - name: payload
        value: '{{ .Inputs.payload }}'
      - name: secret
        valueFrom:
          envRef: GITHUB_WEBHOOK_SECRET 
  - header:
      id: headerSignature
      inputs:
      - name: headerName
        value: X-Hub-Signature-256
  - compare:
      inputs:
      - name: first
        value: '{{ .Outputs.headerSignature.value }}'
      - name: second
        value: 'sha256={{ .Outputs.signature.value }}'
  storage:
  - type: redis
    specs:
      host: localhost
      port: '6379'
      database: 0
      key: github

[42atomys]

Webhook configuration for Gitlab (Tested OK | Security OK)

- name: gitlab
  entrypointUrl: /webhooks/gitlab
  security:
  - header:
      inputs:
      - name: headerName
        value: X-Gitlab-Token
  - compare:
      inputs:
      - name: first
        value: '{{ .Outputs.header.value }}'
      - name: second
        valueFrom:
          envRef: GITLAB_WEBHOOK_TOKEN
  storage:
  - type: redis
    specs:
      host: localhost
      port: '6379'
      database: 0
      key: gitlab

[rgaiffe]

LGTM with few changes.