Cherry pick certificate authorization checks to Ironwood

[kaizoku]

This cherry picks an upstreamed WaffleFlag to require logins for certificate views.

This also adds the certificate status to the GeneratedCertificates admin page view.

JIRA tickets: Implements BB-1388.

Dependencies: None

Sandbox URL: https://pr20957.sandbox.opencraft.hosting/

Testing instructions:

1. Generate a certificate to test with.

   /edx/bin/{python,manage}.edxapp lms --settings=devstack_docker create_fake_cert verified course-v1:edX+DemoX+Demo_Course
   

2. Check the certificate renders normally with no login required in an logged-out browser: http://localhost:18000/certificates/user/8/course/course-v1:edX+DemoX+Demo_Course
3. Enable the waffle switch

   /edx/bin/{python,manage}.edxapp lms --settings=devstack_docker waffle_switch certificates.require_login on
   

4. Check the certificate page again and ensure it requires login now.

Author notes and concerns:

1. Should we create a waffle configuration in a new file for the certificates application?

Reviewers

• (@giovannicimolin )
• edX reviewer[s] TBD

[giovannicimolin]

@kaizoku Your PR is failing because master has a feature to handle WaffleFlagNamespace that our ironwood branch doesn't have.
Can you check if it's possible to cleanly cherry pick these two lines to fix the issue?

[giovannicimolin]

👍

• I tested this:

1. Checked out this branch.
2. Generated fake certificate for user.
3. Checked that the certificate was publicly accessible ✔️
4. Switched certificates.require_login on
5. Checked that the certificate page required login to be accessible, and the redirect pointed back to the correct page. ✔️

• I read through the code
• I checked for accessibility issues
• Includes documentation ⚠️

@kaizoku Thanks for the work here! Can you make these changes on the upstream PR too?

[lgp171188]

@josh, @giovannicimolin, is this still required? Asking because I found a sandbox for this PR on Ocim stage for this PR and was wondering if that can be archived.

[Agrendalath]

We're not using this branch anymore, so I'm closing the PR.