feature: the web service is an OpenID Provider, which signs the directory's users in to other systems, the clients being service accounts with redirect URIs.

debian-package/debian/control

@@ -23,6 +23,8 @@ Depends: ${misc:Depends},
          python3-ldap,
          python3-pyotp,
          python3-fido2,
+         python3-jwt,
+         python3-oauthlib,
          python3-psycopg,
          python3-psutil,
          python3-prometheus-client,
@@ -49,7 +51,8 @@ Description: Linux VPN router with IPSec, road-warrior, OpenVPN and WireGuard su
  needs. Its two-level CA, whose root may be kept offline, has issuing CAs for
  the VPN clients, for site-to-site and for general use, and publishes their
  certificates and CRLs. Caddy, installed by the package from the Ubuntu
- archive or from Caddy's repository, serves HTTPS. It keeps metrics of the
+ archive or from Caddy's repository, serves HTTPS, and an optional OpenID
+ Provider signs the directory's users in to other systems. It keeps metrics of the
  router in PostgreSQL and serves them for an OpenTelemetry Collector, and
  makes scheduled backups to a local folder, copied to the cloud with rclone,
  or to a Proxmox Backup Server. Nothing in the package is specific to a cloud