sso integrations (#822)

* stub out hybrid sso

* support for PKCE authorization_code clients

* sso service urls

* sso client key

* abstract request validator

* support for verifying password

* custom AuthorizationCodeStore that does not remove codes

* cleanup

* comment

* created master password

* ResetMasterPassword

* rename Sso client to OidcIdentity

* update env builder

* bitwarden sso project in docker-compose

* sso path in nginx config

src/Identity/appsettings.json

@@ -4,17 +4,20 @@
     "siteName": "Bitwarden",
     "projectName": "Identity",
     "stripeApiKey": "SECRET",
+    "oidcIdentityClientKey": "SECRET",
     "baseServiceUri": {
       "vault": "https://localhost:8080",
       "api": "http://localhost:4000",
       "identity": "http://localhost:33656",
       "admin": "http://localhost:62911",
       "notifications": "http://localhost:61840",
+      "sso": "http://localhost:51822",
       "internalNotifications": "http://localhost:61840",
       "internalAdmin": "http://localhost:62911",
       "internalIdentity": "http://localhost:33656",
       "internalApi": "http://localhost:4000",
-      "internalVault": "http://localhost:4001"
+      "internalVault": "http://localhost:4001",
+      "internalSso": "http://localhost:51822"
     },
     "sqlServer": {
       "connectionString": "SECRET"