fix: 🐛 add read-only hmac field and enable oidc auth creation

addons/core/translations/form/en-us.yaml

@@ -60,6 +60,8 @@ client_id:
 client_secret:
   label: Client Secret
   help: The client secret is set-only and may not be unset.
+client_secret_hmac:
+  label: Client Secret HMAC
 max_age:
   label: Maximum Age
   help: The OIDC "max_age" parameter sent to the Authorization Server indicating a maximum acceptable time in seconds since the user's last authentication before requiring the user to reauthenticate. 0 indicates an immediate need to reauthenticate.

addons/core/translations/resources/en-us.yaml

@@ -10,6 +10,7 @@ account:
       description: Set a password for the account.
   types:
     password: Password
+    oidc: OIDC
   actions:
     create: Create Account
     delete: Delete Account

ui/admin/app/components/form/auth-method/oidc/index.hbs

@@ -6,6 +6,14 @@
   @showEditToggle={{if @model.isNew false true}}
   as |form|
 >
+
+  <form.actions
+    @disabled={{if @model.cannotSave @model.cannotSave}}
+    @enableEditText={{t 'actions.edit-form'}}
+    @submitText={{t 'actions.save'}}
+    @cancelText={{t 'actions.cancel'}}
+  />
+
   <form.input
     @value={{@model.type}}
     @label={{t 'form.type.label'}}
@@ -118,6 +126,15 @@
     {{/if}}
   </form.input>
 
+  {{#unless @model.isNew}}
+    <form.input
+      @value={{@model.attributes.client_secret_hmac}}
+      @label={{t 'form.client_secret_hmac.label'}}
+      readonly={{true}}
+      @disabled={{true}}
+    />
+  {{/unless}}
+
   {{! Signing Algorithms }}
   <Rose::Form::Fieldset>
     <:title>{{t 'form.signing_algorithms.label'}}</:title>

ui/admin/app/templates/scopes/scope/auth-methods/index.hbs

@@ -24,6 +24,12 @@
         >
           {{t 'resources.auth-method.types.password'}}
         </dropdown.link>
+        <dropdown.link
+          @route='scopes.scope.auth-methods.new'
+          @query={{hash type='oidc'}}
+        >
+          {{t 'resources.auth-method.types.oidc'}}
+        </dropdown.link>
       </Rose::Dropdown>
     {{/if}}
   </page.actions>

ui/admin/app/templates/scopes/scope/auth-methods/new.hbs

@@ -14,6 +14,9 @@
       @model={{@model}}
       @submit={{route-action 'save' @model}}
       @cancel={{route-action 'cancel' @model}}
+      @removeItemByIndex={{route-action 'removeItemByIndex' @model}}
+      @addStringItem={{route-action 'addStringItem' @model}}
+      @addAccountClaimMapItem={{route-action 'addAccountClaimMapItem' @model}}
     />
   </page.body>
 </Rose::Layout::Page>