Vaadin Web Security integration improvements

[mshabarov]

Description

Various enhancements for making Vaadin Web Security API be more extendable and flexible:

• Add ability to disable auto-configured ViewAccessChecker flow#17189
• Easier use of a custom ViewAccessChecker flow#16636
• Allow disabling the ViewAccessChecker even when extending VaadinWebSecurity flow#15818
• Bean in VaadinAwareSecurityContextHolderStrategyConfiguration should probably be a static instance flow#16953
• Vaadin Web Security and Extra Login Parameter #4403
• Enable rerouting to a custom page if a View-based access is denied flow#11335
• Bean definition of VaadinAwareSecurityContextStrategy cannot be replaced/overridden flow#17519
• Missing customization for accessAnnotationChecker and viewAccessChecker spring#914
• Restrict VaadinWebSecurity to urlMapping flow#17624
• Support Meta-Annotations for view access flow#17859
• made vaadin auth success handler accessible flow#18071
• Security annotations on parent layouts flow#18675
• Support authentication event notifications within the context of the associated VaadinSession flow#18666
• Vaadin stateless jwtAuth should allow custom claims to be added instead of just subject and roles. flow#18681

[knoobie]

Additional ideas by @archiecobbs vaadin/flow#20092 (comment) to be considered

[mcollovati]

A branch with an experimental attempt to integrate Vaadin with Spring Security following the Configurer pattern, to make configuration more flexible.

https://github.com/mstahv/vaadin-with-rest-end-points-and-spring-security/blob/spike/refactor-vaadin-security/src/main/java/com/vaadin/flow/spring/security/VaadinAdvancedSecurityConfigurer.java
https://github.com/mstahv/vaadin-with-rest-end-points-and-spring-security/blob/spike/refactor-vaadin-security/src/main/java/com/vaadin/flow/spring/security/VaadinInternalSecurityConfigurer.java

The result would allow writing something like

    @Bean
    SecurityFilterChain vaadinSecurityConfig(HttpSecurity http)
            throws Exception {
        return http
                .with(VaadinSecurityConfigurer.vaadinAdvanced(),
                        vaadinCfg -> vaadinCfg
                                 .secureAnyRequest(AuthorizeHttpRequestsConfigurer.AuthorizedUrl::authenticated)
                                 .loginView(LoginView.class)
                                .enableAccessControl(true)
                                .authenticationSuccessUrl("/")
                                .logoutUrl("/")
                  ).build();
    }