By the way, I did some work connecting up the remaining bits of OIDC and was able to successfully login with Keycloak and Authentik using a fork of this branch. I haven't bothered cleaning it up because I don't want to step on what you're doing, but let me know if I can help with this PR in any way (and of course feel free to use anything from my branch).
https://gitlab.com/nikhiljha/conduit/-/tree/conduit-oidc?ref_type=heads
