4.x OIDC

[grgrzybek]

Here's a short description of the changes:

• new AuthConfigurationServlet servlet (path /auth/config) that returns OIDC configuration, so client side know whether (or not) to use OIDC. Similar role to Keycloak servlet
• AuthenticationConfiguration is prepared earlier - in HawtioContextListener, because it's needed both in AuthConfigurationServlet and ContentSecurityPolicyFilter
• AuthenticationConfiguration contains additional fields read from properties file, related to OIDC configuration
• new io.hawt.web.auth.oidc.OidcConfiguration containing everything needed for OIDC configuration
• new io.hawt.web.auth.oidc.OidcLoginModule which is JAAS login module
• new OIDC stuff has only one new dependency - NimbusDS JOSE library. It also needs existing httpclient4.
• Nimbus JOSE is used to parse and validate OpenID Connect access tokens - for date validity and public key signature. Keys are obtained from jwks_uri endpoint
• ContentSecurityPolicyFilter configuration is a bit better (IMO) - instead of using String.format(), it constructs proper Content-Security-Policy using lists

[grgrzybek]

Sorry - my bad. I built/tested with JDK11 without Spring.

[github-actions]

Test Results

  4 files  ±0    4 suites  ±0   12m 16s ⏱️ -6s
 60 tests ±0   59 ✅ ±0   1 💤 ±0  0 ❌ ±0 
244 runs  ±0  234 ✅ ±0  10 💤 ±0  0 ❌ ±0 

Results for commit e60997a. ± Comparison against base commit e646378.

♻️ This comment has been updated with latest results.

[hawtio-ci]

Test results

Run attempt: 1202
Detailed summary

NAME	TESTS	PASSED ✅	SKIPPED 💤	FAILED ❌	ERRORS 🚫	TIME 🕖
results-quarkus-17-firefox	61	59	2	0	0	181.989
results-quarkus-21-firefox	61	59	2	0	0	182.99
results-springboot-17-firefox	61	58	3	0	0	185.004
results-springboot-21-firefox	61	58	3	0	0	186.271

[tadayosi]

Fantastic job!

A few minor comments but otherwise all great to me.

[tadayosi]

@grgrzybek Please resolve conflicts before merging. Also, do you already consider the remaining comment as resolved? We need to resolve all before merging a pull req as a repository rule.