[OAuth] Add feature to limit apps to groups

We could use a feature to limit the use of app credentials to selected groups if using a grant flow that authenticates as a user (all but Client Credentials).

added part::backend source::customer type::feature labels

assigned to @debdolph

changed title from [OAuth] Add feature to limit apsp to groups to [OAuth] Add feature to limit apps to groups

created merge request !805 (closed) to address this issue

mentioned in merge request !805 (closed)

On second thought, this was a stupid idea. Authorisation is a separate act from authentication and resides in the realm of the client.

closed