Persist u/p login for a short time

[hatched]

If you log in with a user/pass you're immediately logged out on refresh. We should persist this for a short time like we do with macaroons.

[hatched]

When providing the full user-tag and credentials to the Juju API it does not return a macaroon, this is by design. To get it to return a macaroon you need to provide only the user-tag. It will then respond with a macaroon that needs to be discharged at the supplied location. In my quick tests I was not able to get this location to discharge the macaroon. This system is how the CLI performs a login when the user provides only the username and not the password so it is possible...

Juju uses https://github.com/go-macaroon-bakery/macaroon-bakery/tree/v2/httpbakery to discharge the macaroons. Investigation is needed into how this differs from the bakeryjs version that we use.

[hatched]

Now that users can register additional controllers with the user/pass authentication system we should investigate using the macaroon token flow for u/p registrations. This would mean that we would only have to store the macaroons and not the user/pass directly.

[cristinadresch]

@hatched what should be the next steps here?

[hatched]

This needs to wait until the charm conversion is done as authentication will need a slight overhaul to support that change then we can revisit this.

[huwshimi]

This is the relevant issue blocking us from implementing this: https://bugs.launchpad.net/juju/+bug/1864517.