mutliple values in quarkus.oidc.token.header

[thatjasonbourne]

Description

I am using io.quarkus:quarkus-websockets and would like to authorize the handshake request. Since the JavaScript WebSocket API doesn't allow the Authorization header to be sent, I'd like to use the Sec-WebSocket-Protocol header for this, and it works fine when I set quarkus.oidc.token.header=Sec-WebSocket-Protocol (quarkus.oidc.token.header is used in BearerAuthenticationMechanism), but unfortunately I have to use that header in the rest of the app as well. It would be great if I could specify two headers like this: quarkus.oidc.token.header=Authorization,Sec-WebSocket-Protocol

Implementation ideas

BearerAuthenticationMechanism {
        ...
        private String extractBearerToken(RoutingContext context, OidcTenantConfig oidcConfig) {
                final HttpServerRequest request = context.request();

                List<String> headers = oidcConfig.token.header
                        .orElseGet(() -> Collections.singletonList(HttpHeaders.AUTHORIZATION.toString()));

                final String headerValue = headers.stream().map(header -> request.headers().get(header))
                        .filter(Objects::nonNull).findAny().orElse(null);

                ...
        }
        ...
}

[quarkus-bot]

/cc @pedroigor, @sberyozkin

[sberyozkin]

@thatjasonbourne Please see #29919 for the way to make it work