Sub-Task #256
Updated by Bricklou 26 days ago
Implements the actual OIDC auth flow endpoints: - Login start: builds the authorize URL for a given provider id and redirects the user. - Callback: handles the provider's redirect, exchanges the code, validates the token, creates/links the local user account, and creates a server-side session. Absorbs the scope of the former subtask #177 ("Handle OAuth/OIDC callback and create server-side session"), now merged here alongside login initiation since both are part of the same endpoint group.