Use LocalUserDetailsLoader instead.

Change to UdsPersonUserDetailsServiceImpl construction necessitates.

UdsPersonUserDetailsServiceImpl is not initialized automatically by either of the primary 'local-users' or 'preauth' Profiles. It's typically constructed by downstream projects manually (not by component scanning).

Registering more than 1 UserDetailsService - say one for the uw-spring-security stack, and a different one for UdsPersonUserDetailsServiceImpl - will result in ApplicationContext initializationerrors as the Configuration classes provided in uw-spring-security-config expect 1 and only 1 UserDetailsService.

The recommended use now for UdsPersonUserDetailsServiceImpl is to provide the needed UserDetailsService by hand, not by automatic autowiring. If the 1 UserDetailsService provided by uw-spring-security is appropriate, it's easy to retrieve from the ApplicationContext; if an alternate one is required it can be constructed without registering it as a @Bean.

Also refactored AttributesMapper test to remove duplicate code and include test for 'blank' values.

Properly handles cases where container may return blank String values in the returned list.
Tests were previously adding List objects as headers - need to add just String values.

Propagate 1.6.x down through the sub-modules.

@JsonProperty won't work with the abstract '? extends GrantedAuthority' type, as Jackson doesn't have a constructor or factory to convert a string into a concrete implementation.

This change adds a factory method which takes a Collection<String> (which Jackson can understand) and uses Spring Security's utility method to convert the Collection of Strings to a Collection of GrantedAuthority instances.

Note: the 'Amy Administrator' user provided by the 'local-users.json|yaml' file is no longer strictly equivalent to those provided in 'local-users.properties'. See adi-ia/uw-spring-security#5; correcting that seems to be outside of the scope of a bugfix, as it will result in something that likely requires a new feature release.

Thus begins the deprecation path for the profiles 'local-users' and 'preauth'.

The same ObjectMapper instance with a YAMLFactory can load both YAML and JSON.

New optional user interface for populating the LocalUserDetailsManagerImpl instance provided in the 'local-users' profile. The default configuration will still use the existing LocalUserDetailsAttributesMapper.Default implementation.

To switch to the new loader, set the 'edu.wisc.uwss.local.userDetailsLoader.enabled' Environment property to true. The default resource loaded is edu/wisc/uwss/local/local-users.json (classpath), to change that location set the 'edu.wisc.uwss.local.userDetailsLoader.resource' Environment property to a valid Spring Resource expression ('classpath:', 'file:', etc).