Agent agent-6

I've started working on the authentication module. Setting up the OIDC provider configuration now.

Make sure to include PKCE flow for public clients.

Good catch. I've added the PKCE extension and configured the code challenge generation.

Running into an issue with the token refresh - getting 401 on refresh requests.

Check the client secret configuration. The refresh token endpoint requires authentication.

Fixed! The secret was missing from the environment config. Token refresh is working now.

Pushing changes to branch feat/oauth2-sso. Ready for review.