Support for OIDC Client Credentials Flow

Current Situation

• JOC Cockpit supports the OIDC Authentication Flow and Implicit Flow.
• For batch processing purposes users would like JOC Cockpit to support the Client Credentials Flow.

Desired Behavior

• The JOC Cockpit OIDC Identity Service supports the Client Credentials Flow.
• We find two use cases:
  • JS7 jobs that access the JS7 REST API.
    • This includes the JITL Job Templates that ship with JS7´that should be prepared to use this flow.
    • This includes Java jobs, JavaScript jobs and shell jobs implemented by users.
  • External applications and scripts that access the JS7 REST API.
    • Users implement where to store the OIDC login token and how to renew the token.
• For Java, JavaScript, JITL job types a solution based on certificates is offered to securely store and to retrieve the OIDC login token. This includes that the JS7 REST API offers methods to external applications to add and to update renewed Login Tokens.