V0.4 improvements

[gianlucafrei]

Hi there, I implemented some minor improvements:

• Changed log level of some log messages to debug
• Added caffein ache to classpath (Spring Cloud Gateway asked for it in a warn log)
• Added kotlin support for jackson (Not really used, but removes the warn message during startup)
• Added origin header validation as a defense-in-depth measure for csrf-samesite-cookie validation
• Moved main configuration validation to spring main method to reduce problems with circular bean dependencies
• Upgraded dependencies to newest version (Snyk PRs)
• Added possibility for federated logout
• Updated default user-mapping configuraion
• Added additional mappings to the GitHub login provider
• Added missing log when ResponseStatusException is thrown
• Implemented check if hostUri from config is a valid uri
• Fixed a open-redirect vulnerability during login

[gianlucafrei]

Implemented @EnableOWASPApplicationGateway annotation for simple extension. OAG can now also be used as a Spring Library instead of running the out-of-the-box library:

@EnableOWASPApplicationGateway
@SpringBootApplication
public class OagExtensionDemoApplication {

    public static void main(String[] args) {
        SpringApplication.run(OagExtensionDemoApplication.class, args);
    }
}

Additional classes like beans and so on can then be easily added:

@Component("stub-driver-factory")
public class StubLoginDriverFactory implements LoginDriverFactory<StubLoginDriver> {

    @Override
    public StubLoginDriver load(LoginProviderSettings settings) {

        return new StubLoginDriver();
    }
}