Merge branch 'release/1.4.1'

Conflicts:
	common/pom.xml
	pom.xml
	samples/api/pom.xml
	samples/app/pom.xml
	samples/pom.xml
	scim/pom.xml
	uaa/pom.xml
Update Spring OAuth to 1.0.5

[Fixes #47646199] [cfid-715] redirect_uri checking is insecure
[release] Bump version to 1.4.2
Merge branch 'release/1.4.2'

Conflicts:
	common/pom.xml
	pom.xml
	samples/api/pom.xml
	samples/app/pom.xml
	samples/pom.xml
	scim/pom.xml
	uaa/pom.xml
Merge branch 'release/1.4.2' into develop
[release] Bump next release version to 1.4.3-SNAPSHOT
Add Oracle DB support to UAA
Fix minor typo in file name ~/.uaac.yml
Add missing properties to UaaConfiguration

Change-Id: I28550a6c7ee5f634ab9613a8ca2b5dde6751a3ab
[cfid-758] Add "autoapprove" binding to UaaConfiguration

[Fixes #49614819] [cfid-758] config error message in the production log

Change-Id: If28149a76291fa2dc45de7929b3c9ea1ffd4aa45
Fix typo in security doc
Merge pull request #42 from asankha/patch-1

Fix minor typo in file name ~/.uaac.yml
Initial code to map external authorities to scopes
External scopes are not added for client_credentials grants

Externally authorized scopes now don't appear in the approval flow
Minor updates
Fix the owner password flow to work with users authenticated by the login server
Code cleanup

Error conditions were not being handled correctly
Allow the user to send additional authorization attributes that are added to the token
Changed additionalAuthorizationAttributes to az_attr

Changed the key to send additional authorization information through the token request
Makes it simpler and matches the actual claim in the token
externalScopes request parameter is now external_scopes