Bearer token support

[azmeuk]

Hi. Some plugins like nextcloud-oidc-login or nextcloud-social-login allow to use OIDC tokens to authenticate.

nextcloud-oidc-login - for instance - still misses some features to be correctly used with news, but a quick test suggests that news is not ready for Bearer authentication either:

$ # where `xxxxxxx` is a OIDC access token
$ curl -H "Authorization: Bearer xxxxxxx" "https://nextcloud.tld/index.php/apps/news/api/v1-3/version"
{"message":"CORS requires basic auth"}

I am not sure if this is a bug or a feature request :) Is the CORS decorator needed on the API endpoints?

[SMillerDev]

We're just using standard authentication methods from nextcloud. If these apps that extend that don't work with news I expect they don't extend it enough.