new feature, support for client credentials.

[dniel]

When using BASIC authentication against a service, the ForwardAuth application will use the username and password as clientId and clientSecret to look up access token using client_credentials flow. This is useful when doing machine to machine lookup instead of end user authorization grant flow.

• The access token retriever from the client_credentials flow is cached for 24 hours to avoid hitting the Auth0 endpoints exceed your API quota.
• The access token retrieved will then be added to the forwarded request as a normal http header with Authorization Bearer token.

In addition to the new feature, this pull request also contains

• update all dependencies to latest versions
• migrate to spring boot 2.3.0

[sonarcloud[bot]]

SonarCloud Quality Gate failed.

0 Bugs
0 Vulnerabilities (and 0 Security Hotspots to review)
1 Code Smell

10.2% Coverage
0.0% Duplication