Builds a Session: OIDC authorization-code + PKCE against the gateway's Keycloak proxy, single-flight refresh, StrictMode-safe idempotent code exchange.
Builds a Session: OIDC authorization-code + PKCE against the gateway's Keycloak proxy, single-flight refresh, StrictMode-safe idempotent code exchange.