SSO becames a mess since 3.2.0

[tbouliere-datasolution]

Related commit : 4e02efd
Since 3.2.0 intershop use ICM '/token' REST endpoint for authentication and it relies heavily on angular-oauth2-oidc to handle lifecycle of ICM token.
Even for anonymous browsing an oauth token is required.

The problem starts when you try to integrate a third-party SSO system.
Now you have to handle a token from 2 sources, one for the anonymous browsing (ICM) and one for logged browser (external SSO system).

Kind of hack has been code there :

intershop-pwa/src/app/core/identity-provider/auth0.identity-provider.ts

Line 90 in 1f87684

tokenEndpoint: serviceConf?.tokenEndpoint,

But this configuration will be override when openid document is loaded. And that created a lots of side effets

Expected Behavior

Anonymous token should not be driven by SSO mecanism

AB#83902

[tbouliere-datasolution]

Also oidc provider is hardcode here

intershop-pwa/src/app/core/services/user/user.service.ts

Line 125 in 1f87684

this.oauthService.fetchTokenUsingGrant(

But the associated configuration is loaded as side effect.

OauthService should be injected in core code.