sso integrations (#822)

* stub out hybrid sso

* support for PKCE authorization_code clients

* sso service urls

* sso client key

* abstract request validator

* support for verifying password

* custom AuthorizationCodeStore that does not remove codes

* cleanup

* comment

* created master password

* ResetMasterPassword

* rename Sso client to OidcIdentity

* update env builder

* bitwarden sso project in docker-compose

* sso path in nginx config

util/Setup/Templates/DockerCompose.hbs

@@ -87,6 +87,23 @@ services:
       - default
       - public
 
+  sso:
+    image: bitwarden/sso:{{{CoreVersion}}}
+    container_name: bitwarden-sso
+    restart: always
+    volumes:
+      - ../identity:/etc/bitwarden/identity
+      - ../core:/etc/bitwarden/core
+      - ../ca-certificates:/etc/bitwarden/ca-certificates
+      - ../logs/sso:/etc/bitwarden/logs
+    env_file:
+      - global.env
+      - ../env/uid.env
+      - ../env/global.override.env
+    networks:
+      - default
+      - public
+
   admin:
     image: bitwarden/admin:{{{CoreVersion}}}
     container_name: bitwarden-admin

util/Setup/Templates/NginxConfig.hbs

@@ -104,6 +104,10 @@ server {
     proxy_pass http://identity:5000/;
   }
 
+  location /sso/ {
+    proxy_pass http://sso:5000/;
+  }
+
   location /icons/ {
     proxy_pass http://icons:5000/;
   }