[IDP-873] Generate Openapi Description of Security Requirements

[PrincessMadMath]

Description of changes

Add Swagger Filter to be able to generate security requirements for an OpenAPI Document:

• Add requirements on the operation based on the RequireClientCredentials attributes
• Find all required permissions by scanning all RequireClientCredentials attributes of the API
• Formatting of scopes assuming workleap pattern
• Support minimal api
• Remove support of RequireClientCredentials at class level

Breaking changes

Remove support of the attribute at class level: was dangerous since it was unclear what would be the expected behavior.

[ApiController]
[RequireClientCredentials("cocktail.read")]
public class ClientCredentialsController : ControllerBase
{
    [HttpPost]
    [RequireClientCredentials("cocktail.admin")]
    public IActionResult ChangePrice(int id)
    {
     ...
    }
}

In ASP.NET you should & the Authorization Policy, but our ClientCredentialRequirement is doing a | between the roles: so concatenating the class and method attributes would make an endpoint more accessible. Here to access the ChangePrice endpoint what role the users need (cocktail.read | cocktail.admin, cocktail.admin, cocktail.read & cocktail.admin).

For simplicity and since current usage seems to be at the controller level we remove class support for now.

Additional checks

• Updated the documentation of the project to reflect the changes
• Added new tests that cover the code changes

[PrincessMadMath]

Need to update documentation!