develop
OIDC: Send and validate a nonce on authorization requests #5695
OIDC: Add configurable authorization prompt option #5698
Cluster: Collect OIDC groups at login for group-based admission
Logs: Add package pkg/log/status to provide generic outcome constants
OIDC: Upgrade "zitadel/oidc" from v1 to v2 #782
Auth: Delegate cluster OIDC logout to the Portal end-session endpoint #5684
Auth: Add RP-initiated OIDC logout via PHOTOPRISM_OIDC_LOGOUT #5684 #5433
Links: Use canonical trailing-slash form for website URLs
Tests: Improve isolation and add fixes #5263
OIDC: Scope the RP state cookie to the instance OIDC base path
OIDC: Add "address" to the default userinfo request scopes #782
Tests: Add unit tests #782