Introduce filter_by and deprecate authorized_only (close #579)

in the OAuth2ClientList web-service.

Also cleaned up dory access and refresh tokens for confidentialClientId
(see OAuth2TestBase)

Change-Id: I47e2416c0a6ce9fc3f500f5f30e3ca021f984142
diff --git a/Changes b/Changes
index a8d2d27..4fa4ecd 100644
--- a/Changes
+++ b/Changes
@@ -1,6 +1,8 @@
 # version 0.74.1-SNAPSHOT
 
 - Switch Docker image to temurin (diewald).
+- - Introduce filter_by and deprecate authorized_only in OAuth2
+  client list (close #579)
 
 # version 0.74