BE: AUth: Implement JWT auth w/ JWKS

[Haarolean]

https://docs.spring.io/spring-security/reference/servlet/oauth2/resource-server/jwt.html

---

via: provectus/kafka-ui#4145

In our case we have a central place where authentication already happens using Azure AD as IDP, and we would like to just forward the JWT resultant from the oauth provider authentication to kafka-ui, and then kafka-ui could just validate the jwt using JWKS (https://auth0.com/docs/secure/tokens/json-web-tokens/json-web-key-sets).

A similar feature is present in Grafana (https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/jwt/#verify-token-using-a-json-web-key-set-loaded-from-https-endpoint), which we are using fine.

As it is now, our only solution is to authenticate using Azure AD in our central place to get access to the internal network to reach kafka-ui, and then authenticate again into kafka-ui using the same method.

[pisal-shubham]

Hello @Haarolean
Can I work on this issue ?

[Haarolean]

@pisal-shubham I haven't taken a good look into this, but sure. I think we'd need a config property for the app to act as a resource server as well in case of OAuth authentication.