OIDC: Refresh token

[andybalaam]

When logged in using OIDC, our access token will expire very often (possibly every 5 minutes).

So, we should detect when that has happened and:

• refresh the access token using the refresh token
• retry the request

This should be invisible to the user unless either of those steps fails.

We think/hope there is a single place in the code where all authenticated requests go through, so hopefully these changes can focus in that area.

Refer to https://areweoidcyet.com/client-implementation-guide/ for more info.

Tasks

Beta Give feedback

1. OIDC: Store the refresh token #25708
   A-Authentication A-Login A-OIDC T-Enhancement +4
   
2. OIDC: Make issuer metadata available somewhere vector-im/element-web#25749
   A-Authentication A-OIDC T-Task +3
3. Propose solution to web team
4. OIDC: Attempt to refresh expired tokens #25839
   A-Authentication A-OIDC T-Enhancement +3
5. Proactively refresh tokens (?)

[weeman1337]

@andybalaam can you triage this issue? I don't really know what to do with it.