t1961: Create OIDCFACTAuthorization class
t2248: Improve error handling during OIDC token validation