Oauth2 implement rfc8693

[pmlopes]

See https://datatracker.ietf.org/doc/html/rfc8693

This is a new official flow for Oauth2 for token exchange (user impersonation/delegation).

The flow is quite similar to other on-behalf-of flows, it should be simple to add support for it.