OIDC: add nonce support to the oauth2 filter

[zhaohuabing]

This PR introduce nonce support to the oauth2 authentication flow, enhancing EG's security posture by preventing malicious users from injecting their own access token into a victim's session through CSRF attacks.

Additional background information can be found at:

• OAuth2 filter: state/nonce support to prevent CSRF envoy#35232
• OAuth2: add a nonce to the state parameter envoy#35919

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 65.64%. Comparing base (eff9611) to head (66af17e).
Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #4271      +/-   ##
==========================================
- Coverage   65.64%   65.64%   -0.01%     
==========================================
  Files         197      197              
  Lines       23551    23552       +1     
==========================================
  Hits        15460    15460              
  Misses       6979     6979              
- Partials     1112     1113       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[arkodg]

🎉 thanks for adding this in upstream @zhaohuabing !

[Xunzhuo]

Nice works! Thanks @zhaohuabing