Implement an OIDC compatible Authentication flow.

[pboers1988]

Problem statement
It should be possible to dynamically configure the CNAAS-NMS api and frontend application to be compatible with any OIDC provider. This could be Google, Authy, Facebook, Microsoft and/or SURFconext. Ususally this is done by feeding the application with a .well-known-endpoint that configures the auth(n|z) of your application.

Describe the solution you'd like
Implement the authlib library to configure the api: https://authlib.org/
The dynamic configuration should look something like this

oauth.register(
    "connext",
    server_metadata_url=settings.OIDC_CONF_WELL_KNOWN_URL,
    client_id=settings.OIDC_CLIENT_ID,
    client_secret=settings.OIDC_CLIENT_SECRET,
    client_kwargs={"scope": "openid"},
    response_type="id_token token",
    response_mode="query",
)

The Authlib library provides a mechanism to retrieve tokens and dynamically and download the verification certificates into the application.