fix: oidc token renewal

[kulmann]

Description

this PR fixes multiple oidc related things:

• Our dockerized dev environment was missing the redirect uris for silent token renewal /oidc-silent-redirect.html. The silent renewal landed in a (silent ) access_denied.
• silent token renewal had a url format that the oidc-client-lib could not parse when in vue router hash mode
• we now stop the application bootstrap early in the silent redirect callback page. This mitigates an ocis bug in the authentication middleware. Will post an ocis issue as well later on.

As a result you should not get redirected to the access denied page anymore. That was happening on token renewals before.

Issues

Fixes #8420

[update-docs]

Thanks for opening this pull request! The maintainers of this repository would appreciate it if you would create a changelog item based on your changes.

[kulmann]

Converted back to draft. There are other issues... redirect to logged out page still happening. I see 401 errors from requests in the token renewal iframe in the network tab. Investigating.

[kulmann]

@dschmidt I re-introduced the redirect uris https://host.docker.internal:9200/ (and for the other ports as well) because those are needed for redirect after logout. At least that's what we've hardcoded in the userManager config. ;-)

[sonarcloud]

SonarCloud Quality Gate failed.   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

26.7% Coverage
0.0% Duplication

[kulmann]

While debugging this @dschmidt and I also discovered an ocis bug: owncloud/ocis#5986