There is no way to authorize user to oc-id app using CLI

Describe the Enhancement:

Add to chef-server-ctl command to authorize user to use oc-id application, for instance:

chef-server-ctl user-authorize-app myuser supermarket

Describe the Need:

When adding a new organization/user to chef server I'd like to immediately authorize this user to private supermarket. This feature is really needed to anyone who is using private supermarket and wants to automate provisioning to avoid manual steps.

Current Alternative

At the moment there is no alternative/workaround. If I add a new organization and user the user can't be used directly for sharing cookbook to supermarket, so the one shot automated provisioning is not possible. Each time after user is created I have to deploy windows instance to go to supermarket in browser, log in with the new user and authorize supermarket for the user.

Can We Help You Implement This?:

yes if you provide me all necessary information what and where should happen to authorize user for app.

Start by tracing the chef-server-ctl command entry point and the oc-id authorization flow for the supermarket application. Define how the proposed user-authorize-app command should connect these pieces, including its arguments and successful authorization behavior; the issue does not name files or tests.