[wip] - Use msal OIDC

[ReneHezser]

Work in progress

[ciur]

Are you sure you want to change the auth-server to use OIDC?

My idea is to keep the auth-server as minimal as possible — basic password-based authentication should be enough.

Of course, there are many other authentication options: OIDC (with different providers), LDAP, and so on — each with its own setup and requirements. Instead of putting all these options into a single component (the auth-server), we can separate them by creating an auth-free core Docker image, for example papermerge:3.5-sso, and then build custom Docker images for specific authentication methods.

For instance, if you want to use Entra authentication, you could create your own entra-auth container that includes the Entra-specific backend logic (in Go, for example) and use it together with the generic auth-free papermerge:3.5-sso Docker image.
The beauty of this approach is that you are free to write your own authentication component, the way you want and in what you want, without centralized reviews.
papermerge:<version>-sso is a docker image which contains only papermerge-core repository without auth-server or any other auth related components features. This image is not there yet (I will create one soon, as I am planing also to implement my custom SSO component).