Add worker to refresh user's authorized project with low urgency

It does the same job as AuthorizedProjectWorker but not marked as high
urgency. Not every authorization calculation need to completed with such
priority. This worker will be used for low priority recalculation.

app/workers/all_queues.yml

@@ -927,6 +927,13 @@
   :resource_boundary: :unknown
   :weight: 2
   :idempotent: true
+- :name: authorized_project_update_user_refresh_with_low_urgency
+  :feature_category: :authentication_and_authorization
+  :has_external_dependencies: 
+  :urgency: :low
+  :resource_boundary: :unknown
+  :weight: 1
+  :idempotent: true
 - :name: authorized_projects
   :feature_category: :authentication_and_authorization
   :has_external_dependencies: 

app/workers/authorized_project_update/user_refresh_with_low_urgency_worker.rb

+# frozen_string_literal: true
+
+module AuthorizedProjectUpdate
+  class UserRefreshWithLowUrgencyWorker < ::AuthorizedProjectsWorker
+    feature_category :authentication_and_authorization
+    urgency :low
+
+    idempotent!
+  end
+end

config/sidekiq_queues.yml

@@ -32,6 +32,8 @@
   - 1
 - - authorized_keys
   - 2
+- - authorized_project_update_user_refresh_with_low_urgency
+  - 1
 - - authorized_projects
   - 2
 - - auto_devops

spec/support/shared_examples/workers/authorized_projects_worker_shared_example.rb

+# frozen_string_literal: true
+
+require 'spec_helper'
+
+RSpec.shared_examples "refreshes user's project authorizations" do
+  describe '#perform' do
+    let(:user) { create(:user) }
+
+    subject(:job) { described_class.new }
+
+    it "refreshes user's authorized projects" do
+      expect_any_instance_of(User).to receive(:refresh_authorized_projects)
+
+      job.perform(user.id)
+    end
+
+    context "when the user is not found" do
+      it "does nothing" do
+        expect_any_instance_of(User).not_to receive(:refresh_authorized_projects)
+
+        job.perform(-1)
+      end
+    end
+
+    it_behaves_like "an idempotent worker" do
+      let(:job_args) { user.id }
+
+      it "does not change authorizations when run twice" do
+        group = create(:group)
+        create(:project, namespace: group)
+        group.add_developer(user)
+
+        # Delete the authorization created by the after save hook of the member
+        # created above.
+        user.project_authorizations.delete_all
+
+        expect { job.perform(user.id) }.to change { user.project_authorizations.reload.size }.by(1)
+        expect { job.perform(user.id) }.not_to change { user.project_authorizations.reload.size }
+      end
+    end
+  end
+end

spec/workers/authorized_project_update/user_refresh_with_low_urgency_worker_spec.rb

+# frozen_string_literal: true
+
+require 'spec_helper'
+
+describe AuthorizedProjectUpdate::UserRefreshWithLowUrgencyWorker do
+  it 'is labeled as low urgency' do
+    expect(described_class.get_urgency).to eq(:low)
+  end
+
+  it_behaves_like "refreshes user's project authorizations"
+end

spec/workers/authorized_projects_worker_spec.rb

@@ -3,40 +3,5 @@
 require 'spec_helper'
 
 describe AuthorizedProjectsWorker do
-  describe '#perform' do
-    let(:user) { create(:user) }
-
-    subject(:job) { described_class.new }
-
-    it "refreshes user's authorized projects" do
-      expect_any_instance_of(User).to receive(:refresh_authorized_projects)
-
-      job.perform(user.id)
-    end
-
-    context "when the user is not found" do
-      it "does nothing" do
-        expect_any_instance_of(User).not_to receive(:refresh_authorized_projects)
-
-        job.perform(-1)
-      end
-    end
-
-    it_behaves_like "an idempotent worker" do
-      let(:job_args) { user.id }
-
-      it "does not change authorizations when run twice" do
-        group = create(:group)
-        create(:project, namespace: group)
-        group.add_developer(user)
-
-        # Delete the authorization created by the after save hook of the member
-        # created above.
-        user.project_authorizations.delete_all
-
-        expect { job.perform(user.id) }.to change { user.project_authorizations.reload.size }.by(1)
-        expect { job.perform(user.id) }.not_to change { user.project_authorizations.reload.size }
-      end
-    end
-  end
+  it_behaves_like "refreshes user's project authorizations"
 end