[FIXES #2408] Refresh Token and Logout OIDC requests

[afabiani]

Fixes

• Fix refresh token issue (actually the refresh do not work, so you are logged out after few seconds) An 500 error happens on /refreshToken endpoint call - up to @afabiani - note: I verified this happens also for keycloak

java.lang.NullPointerException
	it.geosolutions.geostore.services.rest.security.oauth2.OAuth2SessionServiceDelegate.retrieveAccessToken(OAuth2SessionServiceDelegate.java:196)
	it.geosolutions.geostore.services.rest.security.oauth2.OAuth2SessionServiceDelegate.refresh(OAuth2SessionServiceDelegate.java:96)
	it.geosolutions.geostore.services.rest.impl.RESTSessionServiceImpl.refresh(RESTSessionServiceImpl.java:199)
	it.geosolutions.geostore.services.rest.impl.RESTSessionServiceImpl.refresh(RESTSessionServiceImpl.java:226)
	java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	java.base/java.lang.reflect.Method.invoke(Method.java:566)
	org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:344)

• Check logout correctness (Actually it logs out from MapStore, but as well as you click again on login, you are not asked for password anymore (that should be correct in some way, let' see).

Notes

If you want this one to be working correctly, you must update your local spring-security configuration as follows:

    <security:http auto-config="true" create-session="never">
        <security:http-basic entry-point-ref="restAuthenticationEntryPoint"/>
        <security:csrf disabled="true"/>
        <security:custom-filter ref="authenticationTokenProcessingFilter" before="FORM_LOGIN_FILTER"/>
        <security:custom-filter ref="sessionTokenProcessingFilter" after="FORM_LOGIN_FILTER"/>
        <security:custom-filter ref="oidcOpenIdFilter" position="OPENID_FILTER"/>
        <security:anonymous />
    </security:http>

Partially fix geosolutions-it/MapStore2#10151

[tdipisa]

@offtherailz thanks the new openid connect client implemented by @afabiani, we should probably to mark the other google and keycloak specific as deprecated in favor of this and the dev guide updated accordingly. What do you think?

[offtherailz]

After these changes, I have the "no access token found error", on first login.
I verified that this doesn't happen with previous implementation (but we had only the refresh token issue).
The filters should be all present. We need to be able to externalize the configuration for the provider choosen.
Logout should be forwarded to the provider, if logoutURL is configured.