• Closes Add authentication to /query route #322
• See also Add authentication to /query route federation-api#104 for related implementation

Changes proposed in this pull request:

• /query route now expects an authorization token by default
• added logic to verify token using google-auth
• added new optional env vars:
  • NB_QUERY_CLIENT_ID: Client ID of query tool
  • NB_ENABLE_AUTH: Whether or not to enable authentication (will determine if client ID is also checked)
• existing tests of /query route updated to use mock token
• added filters to tests of startup events to suppress the startup warning about unset NB_API_ALLOWED_ORIGINS (when this warning is irrelevant to the test)

Checklist

This section is for the PR reviewer

• PR has an interpretable title with a prefix ([ENH], [FIX], [REF], [TST], [CI], [MNT], [INF], [MODEL], [DOC]) (see our Contributing Guidelines for more info)
• PR has a label for the release changelog or skip-release (to be applied by maintainers only)
• PR links to GitHub issue with mention Closes #XXXX
• Tests pass
• Checks pass

For new features:

• Tests have been added

For bug fixes:

• There is at least one test that would fail under the original bug conditions.