Create MFA Report script

[mitchellhenke]

🎫 Ticket

Link to the relevant ticket:
https://gitlab.login.gov/lg-teams/data-analytics/reporting/-/issues/20

🛠 Summary of changes

To make it easier to investigate support cases, this PR creates a new report that can be run by passing a set of UUIDs. It is based on the existing MFA Report used by the IG User Report. I've also added the platform_authenticator field to WebAuthn configurations in the report so we can tell what kind of authenticator it is. I've included a sample of what the report looks like below:

Sample Report

[
  {
    "phone_configurations": [
      {
        "id": 1,
        "phone": "+1 555-000-0000",
        "created_at": "2025-01-01T00:00:00.000Z",
        "confirmed_at": "2025-01-01T00:00:00.000Z"
      }
    ],
    "auth_app_configurations": [
      {
        "name": "My auth app",
        "created_at": "2025-01-01T00:00:00.000Z"
      }
    ],
    "webauthn_configurations": [
      {
        "name": "ABC",
        "platform_authenticator": false,
        "created_at": "2025-01-01T00:00:00.000Z"
      }
    ],
    "piv_cac_configurations": [
      {
        "name": "PIV",
        "created_at": "2025-01-01T00:00:00.000Z"
      }
    ],
    "backup_code_configurations": [
      {
        "created_at": "2025-01-01T00:00:00.000Z",
        "used_at": null
      },
      {
        "created_at": "2025-01-01T00:00:00.000Z",
        "used_at": null
      },
      {
        "created_at": "2025-01-01T00:00:00.000Z",
        "used_at": null
      },
      {
        "created_at": "2025-01-01T00:00:00.000Z",
        "used_at": null
      },
      {
        "created_at": "2025-01-01T00:00:00.000Z",
        "used_at": null
      },
      {
        "created_at": "2025-01-01T00:00:00.000Z",
        "used_at": null
      },
      {
        "created_at": "2025-01-01T00:00:00.000Z",
        "used_at": null
      },
      {
        "created_at": "2025-01-01T00:00:00.000Z",
        "used_at": null
      },
      {
        "created_at": "2025-01-01T00:00:00.000Z",
        "used_at": null
      },
      {
        "created_at": "2025-01-01T00:00:00.000Z",
        "used_at": null
      }
    ]
  }
]

[zachmargolis]

is this a JSON-only report? might match existing tooling better of we could find a way to do tabular representation?

[mitchellhenke]

It is, yeah. I'm not sure what representing as a table could look like since the fields for each MFA type can vary pretty significantly (in content and amount).

[mitchellhenke]

More similar to the IG Report than the other reports unfortunately