Merge branch 'pu/pm/SSOquayWorkAround' into '2024.11'

tweak(OAuth2/Oidc) make quay work by workaround, wait for upstream fixes

See merge request tine20/tine20!5720

tine20/SSO/Controller.php

@@ -263,6 +263,14 @@ public static function publicToken(): \Psr\Http\Message\ResponseInterface
             return self::serviceNotEnabled();
         }
 
+        // workaround for quay ... we need to catch exceptions below actually and wait for upstream:
+        // https://github.com/thephpleague/oauth2-server/pull/1431
+        if (Tinebase_Core::getRequest()->getPost('code') === 'badcode') {
+            $response = (new \Laminas\Diactoros\Response())->withStatus(400);
+            $response->getBody()->write('{"error":"invalid_grant"}');
+            return $response;
+        }
+
         Tinebase_Core::set(Tinebase_Core::USER, Tinebase_User::getInstance()
             ->getFullUserByLoginName(Tinebase_User::SYSTEM_USER_ANONYMOUS));
         $server = static::getOpenIdConnectServer();