[identity] Update to include subclusters, user IDs, deployments

We want to be able to track when an identity token comes from a
particular subcluster or deployment.

This change adds that functionality.

.flake8

@@ -4,6 +4,7 @@ ignore = E203,W503,ANN101,ANN102,S322,ANN206,S201,D105,D107,ANN401
 per-file-ignores =
     src/replit/__init__.py:F401
     src/replit/web/__init__.py:F401
+    tests/test_identity.py:S105,S106
 exclude =
     src/replit/goval/api
 

DEVELOPMENT.md

@@ -0,0 +1,39 @@
+# Upgrade protobufs
+
+In order to upgrade the protobuf definitions, the following script can be used.
+
+```shell
+#!/bin/bash
+
+set -e
+
+GOVAL_DIR="${GOVAL_DIR:-${HOME}/goval}"
+WORK_DIR="$(mktemp -d)"
+
+function cleanup {
+  rm -rf "${WORK_DIR}"
+}
+trap cleanup EXIT
+
+# Download the latest protobuf binaries.
+curl -sSL https://github.com/protocolbuffers/protobuf/releases/download/v24.2/protoc-24.2-linux-x86_64.zip -o "${WORK_DIR}/protoc.zip"
+(cd "${WORK_DIR}" && unzip protoc.zip)
+mkdir -p "${WORK_DIR}/replit/goval"
+
+rsync \
+  -Lazr \
+  --exclude='api/npm' \
+  --include='*/' \
+  --include='*.proto' \
+  --exclude='*' \
+  "${GOVAL_DIR}/api" \
+  "${WORK_DIR}/replit/goval"
+find "${WORK_DIR}" -name '*.proto' | xargs sed -i 's@import "api/@import "replit/goval/api/@g'
+"${WORK_DIR}/bin/protoc" \
+  -I="${WORK_DIR}" \
+  --python_out=src/ \
+  "${WORK_DIR}/replit/goval/api/signing.proto" \
+  "${WORK_DIR}/replit/goval/api/client.proto" \
+  "${WORK_DIR}/replit/goval/api/repl/repl.proto" \
+  "${WORK_DIR}/replit/goval/api/features/features.proto"
+```

pyproject.toml

@@ -51,3 +51,6 @@ replit = "replit.__main__:cli"
 exclude = [
 	"_pb2.py$",  # Generated code
 ]
+
+[tool.black]
+exclude = "src/replit/goval/api"