feat: Add and configure Entra ID and Azure B2C.

PATCHES/openid_connect-3390668-6.patch

@@ -0,0 +1,17 @@
+diff --git a/src/Controller/OpenIDConnectRedirectController.php b/src/Controller/OpenIDConnectRedirectController.php
+index 3271c54..a4fc578 100644
+--- a/src/Controller/OpenIDConnectRedirectController.php
++++ b/src/Controller/OpenIDConnectRedirectController.php
+@@ -295,7 +295,11 @@ class OpenIDConnectRedirectController implements ContainerInjectionInterface, Ac
+         if ($op === 'login') {
+           $success = $this->openIDConnect->completeAuthorization($openid_connect_client, $tokens);
+
+-          if (!$success) {
++          // We need the full user object to check if the account is blocked.
++          $account = $this->currentUser->getAccount();
++
++          // Display an error if the current user is blocked and not anonymous.
++          if (!$success && $this->currentUser->id() && !$account->isBlocked()) {
+             $this->messenger()->addError($this->t('Logging in with @provider could not be completed due to an error.', $provider_param));
+           }
+         }

PATCHES/openid_connect_windows_aad-3346603-5.patch

@@ -0,0 +1,13 @@
+diff --git a/src/Plugin/OpenIDConnectClient/WindowsAad.php b/src/Plugin/OpenIDConnectClient/WindowsAad.php
+index 8845843..6431581 100644
+--- a/src/Plugin/OpenIDConnectClient/WindowsAad.php
++++ b/src/Plugin/OpenIDConnectClient/WindowsAad.php
+@@ -318,7 +318,7 @@ as the mapping between Azure AD accounts and Drupal users.<br/>
+       case 2:
+         $v2 = str_contains($endpoints['token'], '/oauth2/v2.0/');
+         if (!$v2) {
+-          $request_options['form_params']['resource'] = 'https://graph.microsoft.com';
++          $request_options['form_params']['scope'] = 'https://graph.microsoft.com/.default';
+         }
+         break;
+     }

composer.json

@@ -69,6 +69,8 @@
         "drupal/masquerade": "^2.0@beta",
         "drupal/memcache": "^2.3",
         "drupal/metatag": "^2.0",
+        "drupal/openid_connect": "dev-3.x",
+        "drupal/openid_connect_windows_aad": "^2.0@beta",
         "drupal/override_node_options": "^2.6",
         "drupal/paragraphs_admin": "^1.4",
         "drupal/pathauto": "^1.8",
@@ -101,6 +103,7 @@
         "rlanvin/php-rrule": "2.3.1",
         "unocha/common_design": "^9",
         "unocha/gtm_barebones": "^1.0",
+        "unocha/ocha_azure_tweaks": "^0.1.0",
         "unocha/ocha_monitoring": "^1.0",
         "unocha/ocha_search": "^1.0"
     },