IDForwarding: Require that id forwarding is enabled for data source (#77131)

* Require that id forwarding is enabled for data source

* Address feedback

pkg/services/pluginsintegration/clientmiddleware/forward_id_middleware_test.go

@@ -2,20 +2,31 @@ package clientmiddleware
 
 import (
 	"context"
+	"encoding/json"
 	"net/http"
 	"testing"
 
 	"github.com/grafana/grafana-plugin-sdk-go/backend"
-	"github.com/grafana/grafana/pkg/web"
 	"github.com/stretchr/testify/require"
 
 	"github.com/grafana/grafana/pkg/plugins/manager/client/clienttest"
 	"github.com/grafana/grafana/pkg/services/contexthandler/ctxkey"
 	contextmodel "github.com/grafana/grafana/pkg/services/contexthandler/model"
 	"github.com/grafana/grafana/pkg/services/user"
+	"github.com/grafana/grafana/pkg/web"
 )
 
 func TestForwardIDMiddleware(t *testing.T) {
+	settingWithEnabled, err := json.Marshal(map[string]any{
+		"forwardIdToken": true,
+	})
+	require.NoError(t, err)
+
+	settingWithDisabled, err := json.Marshal(map[string]any{
+		"forwardIdToken": false,
+	})
+	require.NoError(t, err)
+
 	t.Run("Should set forwarded id header if present", func(t *testing.T) {
 		cdt := clienttest.NewClientDecoratorTest(t, clienttest.WithMiddlewares(NewForwardIDMiddleware()))
 
@@ -25,13 +36,36 @@ func TestForwardIDMiddleware(t *testing.T) {
 		})
 
 		err := cdt.Decorator.CallResource(ctx, &backend.CallResourceRequest{
-			PluginContext: backend.PluginContext{},
+			PluginContext: backend.PluginContext{
+				DataSourceInstanceSettings: &backend.DataSourceInstanceSettings{
+					JSONData: settingWithEnabled,
+				},
+			},
 		}, nopCallResourceSender)
 		require.NoError(t, err)
 
 		require.Equal(t, "some-token", cdt.CallResourceReq.Headers[forwardIDHeaderName][0])
 	})
 
+	t.Run("Should not set forwarded id header if setting is disabled", func(t *testing.T) {
+		cdt := clienttest.NewClientDecoratorTest(t, clienttest.WithMiddlewares(NewForwardIDMiddleware()))
+
+		ctx := context.WithValue(context.Background(), ctxkey.Key{}, &contextmodel.ReqContext{
+			Context:      &web.Context{Req: &http.Request{}},
+			SignedInUser: &user.SignedInUser{IDToken: "some-token"},
+		})
+
+		err := cdt.Decorator.CallResource(ctx, &backend.CallResourceRequest{
+			PluginContext: backend.PluginContext{
+				DataSourceInstanceSettings: &backend.DataSourceInstanceSettings{
+					JSONData: settingWithDisabled,
+				},
+			},
+		}, nopCallResourceSender)
+		require.NoError(t, err)
+		require.Len(t, cdt.CallResourceReq.Headers[forwardIDHeaderName], 0)
+	})
+
 	t.Run("Should not set forwarded id header if not present", func(t *testing.T) {
 		cdt := clienttest.NewClientDecoratorTest(t, clienttest.WithMiddlewares(NewForwardIDMiddleware()))
 
@@ -41,7 +75,11 @@ func TestForwardIDMiddleware(t *testing.T) {
 		})
 
 		err := cdt.Decorator.CallResource(ctx, &backend.CallResourceRequest{
-			PluginContext: backend.PluginContext{},
+			PluginContext: backend.PluginContext{
+				DataSourceInstanceSettings: &backend.DataSourceInstanceSettings{
+					JSONData: settingWithEnabled,
+				},
+			},
 		}, nopCallResourceSender)
 		require.NoError(t, err)