feat(oidc): implement additional OIDC configuration settings

[zetaab]

What this PR does / why we need it:

implements methods added in #3423

Which issue(s) this PR fixes:

Fixes #3405
Fixes #3395
Fixes #3462

cc @zhaohuabing

Notable thing is that this will change forwardAccessToken default behaviour from true to false.

Note:
For the release manager: the default behavior of ForwardAccessToken changed from true to false.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 67.38%. Comparing base (eaa685d) to head (83918d1).
Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #3514      +/-   ##
==========================================
+ Coverage   67.30%   67.38%   +0.07%     
==========================================
  Files         167      167              
  Lines       20308    20325      +17     
==========================================
+ Hits        13669    13695      +26     
+ Misses       5645     5638       -7     
+ Partials      994      992       -2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[zhaohuabing]

LGTM. Thanks for picking this up!

[arkodg]

thanks !

[denniskniep]

Further Note for the release manager:
Impact is also that by default (because ForwardAccessToken is now by default false) the idToken, bearerToken and refreshToken Cookie is no longer issued. see #3638 (comment)