refactor: consolidate authorization extension admin scopes (#1022)

refactor(identity-api): consolidate authorization extension and drop redundant JWKS URL validation

Switch the issuerservice-oauth2 BOM to the shared identityhub-api-authorization
extension and remove the duplicate JWKS URL parsing in
Oauth2JwtAuthenticationExtension, which is already validated during config checks.

Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: paullatzelsperger

dist/bom/issuerservice-oauth2-bom/build.gradle.kts

@@ -20,9 +20,9 @@ plugins {
 dependencies {
     implementation(project(":dist:bom:issuerservice-base-bom"))
     implementation(project(":extensions:api:issuer-admin-api:issuer-admin-api-authentication-oauth2"))
-    implementation(project(":extensions:api:issuer-admin-api:issuer-admin-api-authorization-oauth2"))
+    implementation(project(":extensions:api:identityhub-api-authorization"))
     implementation(project(":extensions:api:identity-api:identity-api-authentication-oauth2"))
-    implementation(project(":extensions:api:identity-api:identity-api-authorization-oauth2"))
+//    implementation(project(":extensions:api:identity-api:identity-api-authorization-oauth2"))
     // needed for interaction with the embedded STS
     implementation(project(":extensions:sts:sts-core"))
     implementation(project(":extensions:sts:sts-account-service-local"))

extensions/api/identity-api/identity-api-authentication-oauth2/src/main/java/org/eclipse/edc/identityhub/api/Oauth2JwtAuthenticationExtension.java

@@ -81,12 +81,6 @@ public void initialize(ServiceExtensionContext context) {
 
         webService.registerResource(alias, new ServicePrincipalAuthenticationFilter(participantContextService, IdentityApiScopes.ADMIN));
 
-        URL url;
-        try {
-            url = new URL(oauthConfiguration.jwksUrl());
-        } catch (MalformedURLException e) {
-            throw new EdcException(e);
-        }
         var resolver = JwksPublicKeyResolver.create(keyParserRegistry, oauthConfiguration.jwksUrl(), monitor, oauthConfiguration.cacheValidityInMillis());
         webService.registerResource(alias, new JwtValidatorFilter(tokenValidationService, resolver, getRules()));
     }