fix(Core): use groupClaim in @auth rule for oidc

[wooj2]

Updated the algorithm to support multiple read restricted group based rules. For example, if given the following schema:

 type OIDCMultiGroupPost
   @model
   @auth(
     rules: [
    { allow: owner, provider: oidc, identityClaim: "sub"},
    { allow: groups, provider: oidc, groups: ["Admins"],
                                   groupClaim: "https://myapp.com/claims/groups"},
    { allow: groups, provider: oidc, groups: ["Moderators", "Editors"],
                                   groupClaim: "https://differentapp.com/claims/groups"}
     ]
   ) {
   id: ID!
   title: String!
   owner: String
 }

The following examples of OIDC tokens with the following claims, will result in a subscription document that does not filter on the owner (since the user is part of at least one of the groups of a claim that was specified in the schema)

Example 1:
["username": "user1",
 "sub": "123e4567-dead-beef-a456-426614174000",
 "https://myapp.com/claims/groups": ["Admins"]]

Example 2:
["username": "user1",
 "sub": "123e4567-dead-beef-a456-426614174000",
 "https://differentapp.com/claims/groups": ["Moderators"]]

Example 3:
["username": "user1",
 "sub": "123e4567-dead-beef-a456-426614174000",
 "https://differentapp.com/claims/groups": ["Moderators", "Editors"]]

On the other hand, the following examples of OIDC tokens with the following claims, will result in a subscription document that will filter on the owner (since the user is NOT part of any of the groups of a claim that was specified in the schema)

Example 4:
["username": "user1",
 "sub": "123e4567-dead-beef-a456-426614174000"]

Example 5:
["username": "user1",
 "sub": "123e4567-dead-beef-a456-426614174000",
 "https://differentapp.com/claims/groups": ["Admins"]]

Example 6:
["username": "user1",
 "sub": "123e4567-dead-beef-a456-426614174000",
 "https://differentapp.com/claims/groups": ["Users"]]

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

[TrekSoft]