feat(CIE): Implement OIDC RP Service with login, callback, and session management

2026-06-16 23:33:59 +02:00
parent bb7ed18539
commit 5f81d2dcf7
31 changed files with 3218 additions and 4 deletions
@@ -31,6 +31,11 @@ public revocable link generated by operator/admin.
 - Registration creates `citizen`.
 - Login path:
  - OTP email via Mailpit
+- CIE OIDC RP demo flow implemented for local CIE provider:
+  start login, callback token exchange, encrypted/signed `userinfo`,
+  local user reunification, frontend polling result
+- JWT/JWS/JWK operations use `jwt-cpp`.
+- JWE decryption remains custom OpenSSL in `common/OidcCrypto.*`.
 - Auth token: bearer token from `api_tokens`
 - Banned users cannot authenticate.