token-validation-*: look for annotations more robustly, support for meta annotations

[janolaveide]

The JwtTokenAnnotationHandler inspects the handler method of an incoming rest call in order to determine which (if any) annotations of type Protected, ProtectedWithClaims or Protected are present, and thus need to be honoured. The currrent implementation only inspects the direct/immediate annotations on the method or the class. This makes it impossible to group common annotations into a meta-annotation e.g like

@RestController
@ProtectedWithClaims(issuer = "selvbetjening", claimMap = { "acr=Level4" })
@Target(ElementType.TYPE)
@Retention(RetentionPolicy.RUNTIME)

public @interface ProtectedRestController {

}

It also makes it impossible for these annotations to be detected if they are present on an interface or a superclass. This PR creates a subclass SpringJwtTokenAnnotationHandler that overrides the getAnnotations method. This methods then uses a Spring utility class AnnotationsUtils to detect annotations on the method/class also if they are provided via meta-annotations or superclasses/interfaces.
Note that this will only work when using Spring Boot. Ideally this extension should be on the JwtTokenAnnotationHandler itself, but implementing this using JDK-methods only is quite a mouthful, and left as an exercise to the maintainers. :-)

[tommytroen]

Nice addition :)
LGTM

[janolaveide]

Får du merget denne også @tommytroen ?

[tommytroen]

Får du merget denne også @tommytroen ?

Will do. Tenker å få med noen flere PRs før vi releaser, men bør kunne få ut en senere i dag eller i morgen. @janolaveide