feat: added oauth protocol support and mcp server APIs

[petruki]

This pull request introduces comprehensive support for OAuth 2.0 dynamic client registration and authorization flows in the Switcher API, including new endpoints, models, authentication middleware, and documentation updates. It also adds the SWITCHER_MANAGEMENT_URL environment variable to support browser-based consent screens, and upgrades the SonarCloud GitHub Action.

The most important changes are:

OAuth 2.0 Support

• Added new models for OAuthClient and OAuthAuthorizationCode to manage OAuth clients and authorization codes in the database. [1] [2]
• Implemented OAuth endpoints and schemas (/oauth/register, /oauth/authorize, /oauth/token, and well-known endpoints), with OpenAPI documentation and schema definitions. [1] [2] [3] [4] [5] [6] [7] [8]
• Updated authentication middleware to support both session JWTs and OAuth access tokens, with a new authAny strategy for dual compatibility on specific routes. [1] [2] [3]

Environment and Configuration

• Added the SWITCHER_MANAGEMENT_URL environment variable to .env-cmdrc-template and .env.dev to configure the consent screen location for OAuth clients. [1] [2] [3]
• Updated the README.md to document dynamic OAuth client consent screen behavior and the use of SWITCHER_MANAGEMENT_URL.

CI/CD

• Upgraded the SonarCloud scan GitHub Action from v8.2.1 to v8.3.0 for both master.yml and sonar.yml. [1] [2]

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
95.9% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud