Add authorizeHttpRequests to Kotlin DSL

[ysavchen]

Closes gh-10481

Comparing to AuthorizeRequestsDslTests, the newly added AuthorizeHttpRequestsDslTests does not include the following test:

@Test
fun `request when secured by mvc path variables then responds based on path variable value`() {
    this.spring.register(MvcMatcherPathVariablesConfig::class.java).autowire()
    this.mockMvc.get("/user/user")
        .andExpect {
            status { isOk() }
        }

    this.mockMvc.get("/user/deny")
        .andExpect {
            status { isForbidden() }
        }
}

@EnableWebSecurity
@EnableWebMvc
open class MvcMatcherPathVariablesConfig {
    @Bean
    open fun securityFilterChain(http: HttpSecurity): SecurityFilterChain {
        http {
            authorizeHttpRequests {
                authorize("/user/{userName}", "#userName == 'user'")
            }
        }
        return http.build()
    }

    @RestController
    internal class PathController {
        @RequestMapping("/user/{user}")
        fun path(@PathVariable user: String) {
        }
    }
}

As far as I understand authorizeHttpRequests API does not provide SpEL support and this test seems obsolete.
But due to default value for access parameter, there is a mismatch between authorizeRequests and authorizeHttpRequets API:

autorhizeRequests {
    authorize("/user/{userName}", "#userName == 'user'")   //invokes authorize with pattern and access
}

authorizeHttpRequests {
    authorize("/user/{userName}", "#userName == 'user'")   //invokes authorize with pattern and servletPath as access type is not String anymore
}

[jzheaux]

Thanks, @ysavchen! I've left some feedback inline.

I'd also like to have @eleftherias take a look since she is quite a bit more familiar with the Kotlin DSL than I am.

[eleftherias]

Thanks for the PR @ysavchen!
I would like to have a test for what happens when we use both authorizeRequests and authorizeHttpRequests in the Kotlin DSL.
I've also left one commend inline.

[jzheaux]

Hi, @ysavchen. Are you able to make the requested changes?

[ysavchen]

Sorry for delay @jzheaux. I needed some time to analyze the options.
I've added a comment regarding the used solution.
Tests are updated.