Add example signing and verifications keys to uaa.yml

Signed-off-by: Madhura Bhave <mbhave@gopivotal.com>
Update ChangeEmailEndpoint to check one time code before changing email

[#76898458] https://www.pivotaltracker.com/story/show/76898458

Signed-off-by: Madhura Bhave <mbhave@gopivotal.com>
Upgrade to Spring Security Oauth2 2.0.3-RELEASE
Change package name for BaseClientDetails

Change to use the new class AuthorizationRequest

Fix AuthorizationRequest, and add new methods not previously present in interface

Fix usage of AuthorizationRequest

Fix usage of AuthorizationRequest

Update references to XSD for v2

Implement authorization request manager

Fix classname change

Fix token services to new v2

Constants have moved

Use the new Oauth2Request instead of AuthorizationRequest

Fix LoginServerTokenEndpointFilter

Fix retrieval of client ID

Fix constructor to handle the Oauth2RequestFactory
Add new field, autoapprove, that the JDBC client details service expects
Adjust test cases for Spring Security Oauth2 v2 upgrade
Attempt to upgrade UaaTokenServiceTests to v2
Fix the usage of 'aud' in the refresh token.
This field should be the resource ids (actually should be client_id according to openID, will address that later)
https://www.pivotaltracker.com/story/show/79246210
[#79246210]
Fix upgrade issues around request validation

Correct dependencies

Properly set all variables of the authorization request
Backwards Compatibility:
Add in a filter that replaces all commas in the scope parameter with spaces.
This is because the new Spring Security Oauth2 parses only spaces, according to spec

Make the token flow backwards compatible
Rest template changed Bearer to bearer
Request scopes can be empty - it means we wish to have all of them
Fix Oauth2RestTemplate behavior change in Spring Security Oauth2
https://github.com/fhanik/spring-security-oauth/commit/b3d55e44f85e672930831f02e3b4e888b9a9c511