OneTimeTokenAuthenticationToken does not have a Jackson Mixin

[marcusdacoregio]

Describe the bug

If the OneTimeTokenAuthenticationToken is serialized and saved in the database as JSON, when we try to deserialize it with an ObjectMapper it fails because there is no Mixin for it in SecurityJackson2Modules

To Reproduce
Save the OneTimeTokenAuthenticationToken as JSON and try to deserialize it using an ObjectMapper with the SecurityJackson2Modules module registered

Expected behavior
It should know how to serialize/deserialize properly

Sample

[marcusdacoregio]

Turns out I had some time to create a PR #18096

[marcusdacoregio]

There is also a need to create the same mixin for Jackson 3, while deprecating this one. I'll see if I have some time to do it.

[jzheaux]

@marcusdacoregio, Spring Security 7 introduces OneTimeTokenAuthentication as well. Are you able to add serialization support for this as well? Since an application can add its own mixins, I believe this will go into 7.1.

NOTE: I'll close this in favor of #18096 and continue this conversation over there.