feat: add oauth2 login against myep

config/services.yaml

@@ -19,5 +19,19 @@ services:
     App\:
         resource: '../src/'
 
+    # The myep OAuth2 client. Endpoint URLs are configuration rather than constants (same as
+    # myep-team), so dev, staging and production differ by .env alone. Empty credentials are a
+    # valid state: the login page then says the client is not registered yet instead of bouncing
+    # the browser at a broken authorize URL.
+    App\Security\OAuth2\EpClient:
+        arguments:
+            $options:
+                client_id: '%env(string:EP_OAUTH2_CLIENT_ID)%'
+                client_secret: '%env(string:EP_OAUTH2_CLIENT_SECRET)%'
+                url_authorize: '%env(string:EP_OAUTH2_URL_AUTHORIZE)%'
+                url_access_token: '%env(string:EP_OAUTH2_URL_ACCESS_TOKEN)%'
+                url_userinfo: '%env(string:EP_OAUTH2_URL_USERINFO)%'
+                scopes: '%env(csv:EP_OAUTH2_SCOPES)%'
+
     # add more service definitions when explicit configuration is needed
     # please note that last definitions always *replace* previous ones