feat: use github.com/coreos/go-oidc/v3

cmd/server/container.go

@@ -84,7 +84,7 @@ func getServiceContainer(ctx context.Context, conf *config.Config) (*service.Con
 		)
 	}
 
-	provider, err := oidc.NewProvider(ctx, conf.OIDC.IssuerURL)
+	provider, err := oidc.NewProvider(ctx, conf.OIDC.IssuerURL, conf.OIDC.SkipIssuerVerification)
 	if err != nil {
 		return nil, errors.Wrap(err, "could not create oidc provider")
 	}
@@ -93,6 +93,7 @@ func getServiceContainer(ctx context.Context, conf *config.Config) (*service.Con
 		oidc.WithCredentials(conf.OIDC.ClientID, conf.OIDC.ClientSecret),
 		oidc.WithProvider(provider),
 		oidc.WithScopes("email", "openid"),
+		oidc.WithAcrValues(conf.OIDC.AcrValues),
 	))
 
 	return ctn, nil