Central OAuth2 + OpenID Connect (OIDC) for the Açoriano Oriental ecosystem.
This server is not a user-facing login page. A client app must redirect users to
/authorize with proper parameters.
https://auth.acorianooriental.pt/authorize?
response_type=code
&client_id={CLIENT_ID}
&redirect_uri={URL_ENCODED_REDIRECT_URI}
&scope=openid%20email%20profile
&state={RANDOM}
&code_challenge={BASE64URL_SHA256(code_verifier)}
&code_challenge_method=S256
&nonce={RANDOM}