Handle the OIDC SSO callback. Exchanges the authorization code, validates the ID token, then logs in the person bound to the token issuer and subject. On first login, the person holding the token email is bound to them, or created when none exists.
GET
/auth/oidc/callback
curl \
--request GET 'http://api.example.com/auth/oidc/callback' \
--header "Authorization: $API_KEY"