session
Typed browser session authentication scheme.
OpenID Connect stores the raw OidcToken.Id in a provider-specific session. Map it to an application principal with io.ktor.server.auth.mapPrincipal when protecting routes.
Throws
when OAuth sessions are not enabled (oauth { } was omitted or OidcOAuthConfig.disableSessions was called).