PLUGINAPI-203 Add supportsScopedOrganizationTokens flag to WebService

[aurelien-poscia-sonarsource]

Summary

• Adds a new per-action boolean flag supportsScopedOrganizationTokens to WebService.NewAction/Action (org.sonar.api.server.ws), following the existing internal/post pattern (mutable field + fluent setter on NewAction, immutable field + getter on Action).
• This flag lets SonarQube Cloud declare, in its Web API documentation, which actions accept authentication via a Scoped Organization Token (SOT). It's infrastructure only — no WS action is annotated with it yet.
• Extends WebServiceTest's MetricWs fixture to cover both the default (false) and an explicit true override.

Tracked in PLUGINAPI-203. SonarQube Cloud's GET api/webservices/list serialization (SC-53832) depends on this being released, since sonarcloud-core pins sonar-plugin-api at a released version rather than a local build.

Test plan

• ./gradlew :plugin-api:test --tests "org.sonar.api.server.ws.WebServiceTest" passes

[hashicorp-vault-sonar-prod]

SC-53831

[sonarqube-next]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
1 Accepted issue

Measures
0 Security Hotspots
0 Dependency risks
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube

[dorian-burihabwa-sonarsource]

The change looks good to me but I would suggest renaming the getter for the new flag as it already has an active form.

[gitar-bot]

Code Review ✅ Approved

Adds the supportsScopedOrganizationTokens boolean flag and fluent setter to WebService actions for SOT authentication documentation. No issues found.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}