test: Add Client Authentication Integration Tests (#2508)

Run different grant types with private_key_jwt authentication instead of client_secret
Works after merge of #2507

server/src/test/resources/integration.test.properties

@@ -1,4 +1,5 @@
 integration.test.app_url=http://localhost:8080/app/
 integration.test.base_url=http://localhost:8080/uaa
 integration.test.timeout_multiplier=1
-smtp.port=2525
+smtp.port=2525
+integration.test.signing-key=-----BEGIN PRIVATE KEY-----\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\n-----END PRIVATE KEY-----

uaa/src/main/webapp/WEB-INF/spring/oauth-clients.xml

@@ -230,6 +230,29 @@
                             <entry key="redirect-uri" value="http://localhost/**"/>
                         </map>
                     </entry>
+                    <entry key="client_with_jwks_trust">
+                        <map>
+                            <entry key="authorized-grant-types"
+                                   value="authorization_code,client_credentials,refresh_token,password"/>
+                            <entry key="scope" value="openid,password.write,scim.userids,cloud_controller.read,cloud_controller.write"/>
+                            <entry key="authorities" value="password.write,scim.userids,cloud_controller.read,cloud_controller.write,uaa.resource"/>
+                            <entry key="autoapprove" value="true"/>
+                            <entry key="redirect-uri" value="http://localhost/*,http://localhost:8080/**,http://localhost:7000/**"/>
+                            <entry key="jwks" value="{&quot;kty&quot;:&quot;RSA&quot;,&quot;e&quot;:&quot;AQAB&quot;,&quot;use&quot;:&quot;sig&quot;,&quot;kid&quot;:&quot;legacy-token-key&quot;,&quot;alg&quot;:&quot;RS256&quot;,&quot;n&quot;:&quot;qMClJXznycV2bQ1pFbN8W-AWSYhpS2MVAGhkWNlmxv2Ix0_-n6zjivjdoxcq7RJR4kVycoVeD07DiWElYSnQLdeQPgKAcBiwilR30UyyDTKcqDQQ5rkCg2ONlwV0aMsg74KaXeXsV653ASs3FYEtuS1aD_Db5-FyXF8HkHo8xy19NUnqsDWQnh1Hhklynxu2tvW0fw2oDE1pwNl-WLEVPtlcpCtf4VSv-GawtBiI6xmYsGBMC9w29ESHFqPw0NSCRhlyJf6rDBNH_766mzK_vEzA4rzGTBEUqDxTg_8JpRhh9D3qljSsmqCtpQoloOAaUKCqSJb_hKPspe-7r9cYmw&quot;}"/>
+                        </map>
+                    </entry>
+                    <entry key="client_with_allowpublic_and_jwks_uri_trust">
+                        <map>
+                            <entry key="authorized-grant-types"
+                                   value="authorization_code,client_credentials,refresh_token,password,urn:ietf:params:oauth:grant-type:jwt-bearer"/>
+                            <entry key="scope" value="openid,password.write,scim.userids,cloud_controller.read,cloud_controller.write"/>
+                            <entry key="authorities" value="password.write,scim.userids,cloud_controller.read,cloud_controller.write,uaa.resource"/>
+                            <entry key="autoapprove" value="true"/>
+                            <entry key="allowpublic" value="true"/>
+                            <entry key="redirect-uri" value="http://localhost/*,http://localhost:8080/**,http://localhost:7000/**"/>
+                            <entry key="jwks_uri" value="http://localhost:8080/uaa/token_keys"/>
+                        </map>
+                    </entry>
                 </map>
             </constructor-arg>
         </bean>