Design OIDC flow/integration for builtin Dataverse users

[GPortas]

Overview of the Feature Request

#10959 served as a starting point for the new OIDC-based authentication. This allows users to login to Dataverse from the SPA using OIDC credentials. It also removes our reliance on JSF login and session cookies to access the dataverse API.

Our goal is to support builtin users with OIDC, without affecting the current authentication in JSF. We will analyze the options available, including using Dataverse as an Identity Provider.

This feature will require support from the backend team for analysis and implementation.

What kind of user is the feature intended for?
API User, SPA User

What inspired the request?

• Q1 2025 milestone
• Handle unregistered users in BearerTokenAuthMechanism #10959

What existing behavior do you want changed?

None

Any brand new behavior do you want to add to Dataverse?

Capability for authenticating builtin users using OIDC

Any open or closed issues related to this feature request?

#10959

Are you thinking about creating a pull request for this feature?
Yes