Modeler API on Self-Managed is not Authorized

[jwulf]

Tests of Modeler API on Self-Managed currently fail due to not being authorized.

This could be because the OAuth token for Modeler on SaaS needs an audience of api.cloud.camunda.io and Self-Managed, apparently, it should be requested with no audience. See here: https://docs.camunda.io/docs/next/apis-tools/web-modeler-api/authentication/?authentication=self-managed

[jwulf]

Yes, Modeler token request on Self-Managed needs to be made with no audience.

On Camunda SaaS, it needs an audience of api.cloud.camunda.io.

In the OAuthProvider, I've coded it so that if the OAuth endpoint is the Camunda SaaS one, a Modeler token request uses the correct audience, otherwise, it will use a CAMUNDA_MODELER_OAUTH_AUDIENCE if one is provided, otherwise nothing.