[REQUEST] Implement OIDC authorization flow

[winston0410]

Is your feature request related to a problem? Please describe.
I would like to authorize user with external IDP and giving them access to AdventureLog without registering again.

Describe the solution you'd like
Adventurelog to support basic OIDC authorization flow. It doesn't have to be PKCE, the basic flow with client id and client secret should solve the problem

Describe alternatives you've considered
SAML and LDAP. These two approaches are more complex, and OIDC is more modern

Additional context
Add any other context or screenshots about the feature request here.

[Aesgarth]

I'd love to see this too

[seanmorley15]

I am looking into this right now! I want to actually revamp the auth system first, this would mean moving from the current auth system (dj-rest-auth) which is limited to basically just signup and registration, to allauth which has a lot more features like MFA and ODIC (also will make it easier to support a future AdventureLog mobile app 🤫)

[nebriv]

Using allauth is a great solution, I use it in many of my django projects. +1! Its a well thought out library, hopefully the migration isn't too painful!

[seanmorley15]

I am currently working on the AllAuth system in the development branch. I am just working some things out before its released but it should not require any manual migration. Thankfully Django makes the whole auth switch really easy!
This will migrate from JWT to session based auth and add MFA as well!

[spiritedsnowcat]

I'm excited for this! Thanks for putting the work in. I plan to use Authentik on my home server to do SSO and MFA, but this project supporting OIDC is gonna be a huge enhancement!

[UndyingSoul]

Can't wait for this feature. I've been putting off deploying AdventureLog until some sort of SSO is supported. Like @spiritedsnowcat, I'll be using Authentik as an OIDC provider.

I am willing to test this feature as it develops.