Check client secret not expired in ClientSecretAuthenticationProvider

[doctormacky]

Describe the bug
When check the client id and secret which load from database, the jwt code are always be generated even the client id is expred.

To Reproduce
set a expiration date for client id and secret, then try to call /oauth2/token with the predefined client id and secret.

Expected behavior
return exception like 'the client id is expired'

Sample

A link to a GitHub repository with a minimal, reproducible sample.

Reports that include a sample will take priority over reports that do not.
At times, we may require a sample, so it is good to try and include a sample up front.

I know we can customize the ClientSecretAuthenticationProvider by ourselves, but as a build-in/default one, We should check this attribute (expirate date) by default.

[jgrandja]

Thanks for the request @doctormacky. This would be a good enhancement. Are you interested in submitting a PR?

[doctormacky]

@jgrandja I am glad to help on that, which branch should I work on? I noted that this project is a crazy one and moving very fast.

[jgrandja]

@doctormacky Please base the PR on 0.4.x. Thank you!

[doctormacky]

@jgrandja I already submit a PR, please review it. thanks.