feat(oidc_auth): Add backend support for OIDC Auth

[deo002]

Changes

• Added endpoints to update, delete and create user with oidc token.
• Added role based access for admin apis
• Changed /users/{id} endpoint to /users/{username} endpoint.
• TODO: Add changelogs for /users endpoints
• Set flag TranslateError in GORM Config to true to convert database-specific errors into GORM's own generalized errors: https://gorm.io/docs/error_handling.html#Dialect-Translated-Errors
• Had to update Go from 1.20 to 1.22 because some packages required it.
• Change JWT framework to letsstrat-go/jwx becase the JWKS extension for golang-jwt was of an incompliant license.

Submitter Checklist

• Includes tests (if there is a feature changed/added)
• Includes docs ( if changes are user facing)
• I have tested my changes locally.

[GMishx]

Changes looks good.

[avinal]

Few comments

[GMishx]

Found issues during testing:

1. Default user role in DB is admin, the role based access middleware checks for ADMIN which fails.
   • Result: Admin user cannot perform admin tasks unless role updated in DB manually.
   • Suggested change: Make the role as enum or constant.
2. Endpoint /users/oidc takes token as a parameter in body.
   • Result: User can imitate as a different user.
   • Suggested change: Use token only from the header.
3. Authorization header is not parsed correctly.
   • Result: Authorization header should be Authorization: Bearer {jwt} which cannot be parsed by the middleware.
   • Suggested change: JWT token should be extracted after Bearer string from Authorization header.

Azure AD is not working at the moment, will continue further testing later :-)

[GMishx]

Tested, working as expected.

Just need to remove the unique constraint on the display_name field.

[GMishx]

LGTM

Requested changes done.