feat: add oauth scope (for entra id)

Author: tea-one

extension/java-client-operate/src/main/java/io/camunda/operate/auth/JwtAuthentication.java

@@ -73,6 +73,7 @@ private HttpPost buildRequest() throws URISyntaxException {
     formParams.add(new BasicNameValuePair("client_id", jwtCredential.clientId()));
     formParams.add(new BasicNameValuePair("client_secret", jwtCredential.clientSecret()));
     formParams.add(new BasicNameValuePair("audience", jwtCredential.audience()));
+    formParams.add(new BasicNameValuePair("scope", jwtCredential.scope()));
     httpPost.setEntity(new UrlEncodedFormEntity(formParams));
     return httpPost;
   }

extension/java-client-operate/src/main/java/io/camunda/operate/auth/JwtCredential.java

@@ -2,4 +2,5 @@
 
 import java.net.URL;
 
-public record JwtCredential(String clientId, String clientSecret, String audience, URL authUrl) {}
+public record JwtCredential(
+    String clientId, String clientSecret, String audience, URL authUrl, String scope) {}

extension/spring-boot-starter-camunda-operate/src/main/java/io/camunda/operate/spring/OperateClientConfiguration.java

@@ -76,7 +76,8 @@ public Authentication authentication() {
                 properties.clientId(),
                 properties.clientSecret(),
                 properties.audience(),
-                properties.authUrl()),
+                properties.authUrl(),
+                properties.scope()),
             new JacksonTokenResponseMapper(objectMapper));
       }
       default -> throw new IllegalStateException("Unsupported profile: " + properties.profile());

extension/spring-boot-starter-camunda-operate/src/main/java/io/camunda/operate/spring/OperateClientConfigurationProperties.java

@@ -19,6 +19,7 @@ public record OperateClientConfigurationProperties(
     String clientSecret,
     URL authUrl,
     String audience,
+    String scope,
     // saas auth properies
     String region,
     String clusterId) {