feat(router): HMAC based Subgraph Auth

[ardatan]

Ref ROUTER-123

Documentation -> graphql-hive/console#7215

Following the same principle in Hive Gateway. So the existing Yoga and Apollo recipes can be used for subgraphs.

hmac_signature:
   enabled: false #default
   enabled: true # signs all requests
   enabled:
       expression: |
      # enable only for products
      if .subgraph.name == "products"
         true
      else
        false
   secret: MY_SECRET # required
   extension_name: hmac-signature # by default

[github-actions]

✅ k6-benchmark results

     ✓ response code was 200
     ✓ no graphql errors
     ✓ valid response structure

     █ setup

     checks.........................: 100.00% ✓ 206016      ✗ 0    
     data_received..................: 6.0 GB  200 MB/s
     data_sent......................: 81 MB   2.7 MB/s
     http_req_blocked...............: avg=3.99µs   min=721ns   med=1.84µs  max=13.46ms  p(90)=2.66µs  p(95)=3.07µs  
     http_req_connecting............: avg=933ns    min=0s      med=0s      max=2.74ms   p(90)=0s      p(95)=0s      
     http_req_duration..............: avg=21.4ms   min=2.33ms  med=20.43ms max=208.81ms p(90)=29.02ms p(95)=32.2ms  
       { expected_response:true }...: avg=21.4ms   min=2.33ms  med=20.43ms max=208.81ms p(90)=29.02ms p(95)=32.2ms  
     http_req_failed................: 0.00%   ✓ 0           ✗ 68692
     http_req_receiving.............: avg=183.57µs min=26.96µs med=42.66µs max=165.46ms p(90)=89.88µs p(95)=408.18µs
     http_req_sending...............: avg=25.35µs  min=5.72µs  med=11.08µs max=32.97ms  p(90)=16.4µs  p(95)=28.35µs 
     http_req_tls_handshaking.......: avg=0s       min=0s      med=0s      max=0s       p(90)=0s      p(95)=0s      
     http_req_waiting...............: avg=21.19ms  min=2.26ms  med=20.3ms  max=57.99ms  p(90)=28.74ms p(95)=31.87ms 
     http_reqs......................: 68692   2284.279525/s
     iteration_duration.............: avg=21.83ms  min=6.46ms  med=20.79ms max=274.54ms p(90)=29.46ms p(95)=32.66ms 
     iterations.....................: 68672   2283.614446/s
     vus............................: 50      min=50        max=50 
     vus_max........................: 50      min=50        max=50 

[github-actions]

🐋 This PR was built and pushed to the following Docker images:

Image Names: ghcr.io/graphql-hive/router

Platforms: linux/amd64,linux/arm64

Image Tags: ghcr.io/graphql-hive/router:pr-542 ghcr.io/graphql-hive/router:sha-aeb4f25

Docker metadata

{
"buildx.build.ref": "builder-78520e8d-ed94-427d-97c9-d60f7db7ffa2/builder-78520e8d-ed94-427d-97c9-d60f7db7ffa20/rdpc8vq8pvnf945nc6f85fz8t",
"containerimage.descriptor": {
  "mediaType": "application/vnd.oci.image.index.v1+json",
  "digest": "sha256:770a88c8b23d5dc2c4ae4f90bb4db6e67e278f50bb7199e7717a63217a2160c6",
  "size": 1609
},
"containerimage.digest": "sha256:770a88c8b23d5dc2c4ae4f90bb4db6e67e278f50bb7199e7717a63217a2160c6",
"image.name": "ghcr.io/graphql-hive/router:pr-542,ghcr.io/graphql-hive/router:sha-aeb4f25"
}