Add auth_time, acr and azp support for OIDC claims

db/migrate/20251231055350_add_auth_time_to_oidc_tokens.rb

@@ -0,0 +1,6 @@
+class AddAuthTimeToOidcTokens < ActiveRecord::Migration[8.1]
+  def change
+    add_column :oidc_authorization_codes, :auth_time, :integer
+    add_column :oidc_refresh_tokens, :auth_time, :integer
+  end
+end

db/migrate/20251231060112_add_acr_to_oidc_tokens_and_sessions.rb

@@ -0,0 +1,7 @@
+class AddAcrToOidcTokensAndSessions < ActiveRecord::Migration[8.1]
+  def change
+    add_column :sessions, :acr, :string
+    add_column :oidc_authorization_codes, :acr, :string
+    add_column :oidc_refresh_tokens, :acr, :string
+  end
+end

db/schema.rb

@@ -10,7 +10,7 @@
 #
 # It's strongly recommended that you check this file into your version control system.
 
-ActiveRecord::Schema[8.1].define(version: 2025_12_31_055350) do
+ActiveRecord::Schema[8.1].define(version: 2025_12_31_060112) do
   create_table "active_storage_attachments", force: :cascade do |t|
     t.bigint "blob_id", null: false
     t.datetime "created_at", null: false
@@ -113,6 +113,7 @@ ActiveRecord::Schema[8.1].define(version: 2025_12_31_055350) do
   end
 
   create_table "oidc_authorization_codes", force: :cascade do |t|
+    t.string "acr"
     t.integer "application_id", null: false
     t.integer "auth_time"
     t.string "code_challenge"
@@ -135,6 +136,7 @@ ActiveRecord::Schema[8.1].define(version: 2025_12_31_055350) do
   end
 
   create_table "oidc_refresh_tokens", force: :cascade do |t|
+    t.string "acr"
     t.integer "application_id", null: false
     t.integer "auth_time"
     t.datetime "created_at", null: false
@@ -172,6 +174,7 @@ ActiveRecord::Schema[8.1].define(version: 2025_12_31_055350) do
   end
 
   create_table "sessions", force: :cascade do |t|
+    t.string "acr"
     t.datetime "created_at", null: false
     t.string "device_name"
     t.datetime "expires_at"