[Workhorse] Handle runHTTPRequest action in duo workflow handler

Overview

Workhorse WS handler that proxies gRPC connecti... (#547502 - closed) and Workhorse: Act as a proxy to Duo Workflow (!193149 - merged) introduces Workhorse as a proxy to Duo Workflow Service

When the service needs to perform API request to Gitlab, it performs a request directly to the instance

Problem

It's challenging from the Security point of view to perform direct requests to arbitrary self-managed instance, so we still need to proxy the requests via user machine.

Even if we implement direct requests to the instances, it still may be a problem to the customers with closed networks that doesn't allow any incoming requests.

Proposal

Handle runHTTPRequest action in Workhorse and perform Rails requests directly from there

Open questions

If we need to wrap such requests into a composite identity, what would be the solution

Edited by 🤖 GitLab Bot 🤖