Implement OIDC

[pizkaz]

Fixes #300

Type (Highlight the corresponding type)

• Bugfix
• Feature
• Documentation
• Refactoring (e.g. Style updates, Test implementation, etc.)
• Other (please describe):

Checklist

• Code updated to current develop branch head
• Passes CI checks
• Is a part of an issue
• Tests added for the bugfix or newly implemented feature, describe below why if not
• Changelog is updated
• Documentation of code and features exists

Changes

• Implements OIDC authentication via OpenID-Connect-PHP

Other information

[SamuelWei]

Just a few things noticed during a quick look

[codecov]

Codecov Report

Attention: Patch coverage is 9.00000% with 91 lines in your changes missing coverage. Please review.

Project coverage is 80.76%. Comparing base (afaea03) to head (155fa4d).

Files with missing lines	Patch %	Lines
app/Auth/OIDC/OIDCController.php	0.00%	58 Missing ⚠️
app/Auth/OIDC/OpenIDConnectClient.php	0.00%	16 Missing ⚠️
app/Auth/OIDC/OIDCUser.php	0.00%	9 Missing ⚠️
resources/js/views/Login.vue	28.57%	5 Missing ⚠️
...p/Http/Controllers/api/v1/auth/LoginController.php	57.14%	3 Missing ⚠️

Additional details and impacted files

@@              Coverage Diff              @@
##             develop    #1205      +/-   ##
=============================================
- Coverage      81.52%   80.76%   -0.77%     
- Complexity      1410     1441      +31     
=============================================
  Files            364      367       +3     
  Lines           9548     9647      +99     
  Branches         867      871       +4     
=============================================
+ Hits            7784     7791       +7     
- Misses          1764     1856      +92     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[SamuelWei]

Should be build from scratch using https://github.com/jumbojett/OpenID-Connect-PHP, as this implementation is missing most security checks

[pizkaz]

Hmm how can I convice GitHub that the requested changes were indeed addressed? 🧐

[cypress]

PILOS    Run #1092

Run Properties:   Passed #1092  •  6ffffd17d5: 4.1 Release

Project	PILOS
Branch Review	4.x
Run status	Passed #1092
Run duration	03m 51s
Commit	6ffffd17d5: 4.1 Release
Committer	Samuel Weirich
View all properties for this run ↗︎

---

Test results
Failures	0
Flaky	0
Pending	0
Skipped	0
Passing	177
View all changes introduced in this branch ↗︎

[pizkaz]

OIDC conformance testing:

• https://openid.net/how-to-certify-your-implementation/
• https://openid.net/certification/connect_rp_testing/
• https://www.certification.openid.net/
• Test plans (probably):
  • OIDC Core: Basic Certification Profile RP Tests
  • OIDC Core: Back Channel Logout RP Certification Profile RP Tests
  • OIDC Core: Front Channel Logout RP Certification Profile RP Tests
  • OIDC Core: RP Initiated Logout RP Certification Profile RP Tests