JWT API token support for Terraform Module Registry
Why are we doing this work
Supporting API authentication using a JWT token is needed in order to support a Terraform Module Registry API (being added as part of #321102 (closed)) because Terraform uses Bearer auth for everything except the file download, which is performed by passing a URL to go-get which cannot pass any other auth. This means that auth needs to be included in the URL as a query parameter, and should be time limited (5 minutes should be enough).
There is currently a Gitlab::ConanToken that performs a similar function for the Conan Package API, so this should consider refactoring and extending this concept to be used for Terraform Registry as well.
Relevant links
Edited by Matt Kasa