OAuth 2.0 requires that confidential clients use at least basic authentication when communicating with the authorization server. For this purpose, let's introduce a client credential provider such that
[ ] it replaces the existing M2M credential provider (with reasonable backwards compatibility);
[ ] the client credentials are manageable via the credential admin API;
[ ] the client credentials are manageable via the credential admin UI.
OAuth 2.0 requires that confidential clients use at least basic authentication when communicating with the authorization server. For this purpose, let's introduce a client credential provider such that
related #309