[CAUSEWAY-3742] Improve security/oauth ; deprecate AuthenticationStrategyJwt

• Type: Improvement
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Affects Version/s: 2.0.0
• Fix Version/s: 3.3.0, 2.3.0
• Component/s: Ext Sec spring-oauth2, Security Spring
• Assignee: Daniel Keir Haywood
• Reporter: Daniel Keir Haywood
• Created: 12/May/24 14:35
• Updated: 28/Sep/24 11:52

Description

Implementation of an AuthenticationManager (Spring SPI) that works for both oauth and jwt tokens, also our own SPI of AuthConverter.

And, for Restful, a do-nothing AuthenticationStrategy that uses the above (rather than doing any validation in and of itself).