feat: support federated OIDC login through the OAuth2 Authorization Server (#24050)

[netroms]

Backport of #24050 to 2.42.
JIRA:DHIS2-21752

What

Fixes federated OIDC login through DHIS2's OAuth2 Authorization Server. After an external-IdP login ("Log in with Google"), reading the authorization at /oauth2/token returned HTTP 500, because the persisted principal (DhisOidcUser wrapping a UserDetailsImpl) is not on Spring Security's SecurityJackson2Modules deserialization allowlist.

The persistence layer now swaps the heavyweight DHIS2 principal for a lean, Spring-native UsernamePasswordAuthenticationToken (DHIS2 username + authorities) at the toEntity serialization boundary, so the persisted attributes round-trip with no custom Jackson mixins. This also fixes the federated flow end to end — the username/email claims previously carried the IdP sub.

Backport notes

• Cherry-picked from master (cd398b5) with one trivial conflict in UserDetailsImpl.java: the PR deletes the unused userDetailsMixin Jackson factory, which on 2.42 lacked the dataViewMaxOrganisationUnitLevel parameter (that field does not exist on 2.42), so git could not auto-match the deletion. Resolved by accepting the deletion (the PR's intent). The only resulting difference from master's UserDetailsImpl is the pre-existing absence of the dataViewMaxOrganisationUnitLevel field on 2.42.
• Spring Authorization Server on 2.42 is 1.5.5 — the exact version the fix was verified against in the original PR.
• Confirmed the removed Jackson annotations are dead: userDetailsMixin is referenced nowhere, UserDetailsImpl is not Jackson-serialized elsewhere, and Redis Spring Session uses JDK serialization (not Jackson).
• Verified locally: mvn test-compile of dhis-service-core, dhis-test-integration, dhis-test-web-api → BUILD SUCCESS; all three backported tests compile (LeanPrincipalTest, Dhis2OAuth2AuthorizationServiceIntegrationTest, FederatedOidcTokenControllerTest).

Original PR: #24050

AI Assisted

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud