feat(CIE): Implement OIDC RP Service with login, callback, and session management

config.json

@@ -56,6 +56,32 @@
       "token_ttl_hours": 24,
       "otp_ttl_minutes": 10
     },
+    "oidc_federation": {
+      "trust_anchors": [
+        "http://127.0.0.1:8000"
+      ],
+      "identity_providers": {
+        "cie_demo": {
+          "profile": "cie",
+          "issuer": "http://127.0.0.1:8002/oidc/op",
+          "trust_anchor": "http://127.0.0.1:8000"
+        }
+      }
+    },
+    "oidc_rp": {
+      "enabled": true,
+      "base_url": "http://127.0.0.1:5555",
+      "client_id": "http://127.0.0.1:8000/oidc/rp",
+      "redirect_uri": "http://127.0.0.1:5555/api/v1/auth/cie/callback",
+      "post_login_redirect_uri": "http://localhost:3000/auth/cie/callback",
+      "organization_name": "that fancy RP",
+      "client_name": "Name of an example organization",
+      "contacts": [
+        "[email protected]"
+      ],
+      "jwks_path": "secrets/oidc/demo-rp-jwks.json",
+      "federation_jwks_path": "secrets/oidc/rp-federation-jwks.json"
+    },
     "mail": {
       "smtp_host": "127.0.0.1",
       "smtp_port": 1025,
@@ -72,4 +98,4 @@
       "allowed_origin": "http://localhost:3000"
     }
   }
-}
+}