controller_oauth2_service_authorize
Start an OAuth login with an external identity provider.
The configured service module supplies the provider authorization URL. The controller stores the service data and original request arguments in a signed, expiring state value, then renders the Cotonic worker that performs the redirect. The state expires after one hour.