Support for OIDC Dynamic Client Registration

[sberyozkin]

Description

https://openid.net/specs/openid-connect-registration-1_0.html defines a standard mechanism for registering OIDC clients (tenants).

It will be useful for users who are automating the client/tenant registration.

Note, Keycloak users can already do it with https://quarkus.io/guides/security-keycloak-admin-client using Keycloak specific API, however there should also be a way to do it for any OIDC provider implementing this spec

Implementation ideas

Light-weight extension, using Vert.x WebClient, initialized with the OIDC base URL from where it can discover the dynamic registration endpoint address.

It will take a bit of time for me to prioritize but it will be a useful feature to have once it is done

[quarkus-bot]

/cc @pedroigor (oidc)

[sberyozkin]

See also https://www.keycloak.org/docs/latest/securing_apps/#_client_registration

[sberyozkin]

That should also provide an interesting option to set up test users, for all OIDC providers

[sberyozkin]

@calvernaz FYI, this one is underway, alongside other items, the challenge is to make sure this extension can be run independently of quarkus-oidc, as some kind of the job, but also it should be possible to initialize an OIDC tenant for quarkus-oidc, or quarkus-oidc-client... Overall, I'm thinking it will be a very useful addition for Quakus OIDC users, cheers