Merge branch 'releases/1.8.3' into develop
Bump next developer version
Automatically display diff and push to develop
git diff should be non interactive
Add notification.write and scim.userids scope to login client

[#77585216][#77585238]
https://www.pivotaltracker.com/story/show/77585216
https://www.pivotaltracker.com/story/show/77585238

Signed-off-by: Madhura Bhave <mbhave@gopivotal.com>
Replace the word 'origin' with a constant
This makes searching for references in an IDE much easier.
Helpful when working with the multi tenancy in UAA
Add login server only endpoint for changing email

[#76898458] https://www.pivotaltracker.com/story/show/76898458

Signed-off-by: Madhura Bhave <mbhave@gopivotal.com>
Add notifications service client to bootstrapped clients in default profile.

[#77585216] https://www.pivotaltracker.com/story/show/77585216
Open up an endpoint, validated by the scope oauth.login that will allow a user to be created without having to request a token
https://www.pivotaltracker.com/story/show/77874930
[#77874930]
Temporary disable keystone until we got a working build
Add example signing and verifications keys to uaa.yml

Signed-off-by: Madhura Bhave <mbhave@gopivotal.com>
Update ChangeEmailEndpoint to check one time code before changing email

[#76898458] https://www.pivotaltracker.com/story/show/76898458

Signed-off-by: Madhura Bhave <mbhave@gopivotal.com>
Upgrade to Spring Security Oauth2 2.0.3-RELEASE
Change package name for BaseClientDetails

Change to use the new class AuthorizationRequest

Fix AuthorizationRequest, and add new methods not previously present in interface

Fix usage of AuthorizationRequest

Fix usage of AuthorizationRequest

Update references to XSD for v2

Implement authorization request manager

Fix classname change

Fix token services to new v2

Constants have moved

Use the new Oauth2Request instead of AuthorizationRequest

Fix LoginServerTokenEndpointFilter

Fix retrieval of client ID

Fix constructor to handle the Oauth2RequestFactory
Add new field, autoapprove, that the JDBC client details service expects
Adjust test cases for Spring Security Oauth2 v2 upgrade
Attempt to upgrade UaaTokenServiceTests to v2
Fix the usage of 'aud' in the refresh token.
This field should be the resource ids (actually should be client_id according to openID, will address that later)
https://www.pivotaltracker.com/story/show/79246210
[#79246210]
Fix upgrade issues around request validation

Correct dependencies

Properly set all variables of the authorization request
Backwards Compatibility:
Add in a filter that replaces all commas in the scope parameter with spaces.
This is because the new Spring Security Oauth2 parses only spaces, according to spec

Make the token flow backwards compatible
Rest template changed Bearer to bearer
Request scopes can be empty - it means we wish to have all of them
Fix Oauth2RestTemplate behavior change in Spring Security Oauth2
https://github.com/fhanik/spring-security-oauth/commit/b3d55e44f85e672930831f02e3b4e888b9a9c511