Merge commit from fork

* fix: add `Scopes` to `Request` interface so that scopes can be validated on all requests

* feat: assert org from scope exists when authorizing requests

* fix: check all scopes

* comments

* check org on callback creation

* fix tests

* clarifications

* fix scope marshaling

* fix: enfore organization for authrequest in initiation

* fix: filter sessions on the accounts page by organization scope

* add integration tests

---------

Co-authored-by: Livio Spring <[email protected]>
Co-authored-by: Max Peintner <[email protected]>

internal/repository/authrequest/auth_request.go

@@ -39,6 +39,7 @@ type AddedEvent struct {
 	HintUserID       *string                   `json:"hint_user_id,omitempty"`
 	NeedRefreshToken bool                      `json:"need_refresh_token,omitempty"`
 	Issuer           string                    `json:"issuer,omitempty"`
+	OrganizationID   string                    `json:"organization_id,omitempty"`
 }
 
 func (e *AddedEvent) Payload() interface{} {
@@ -67,7 +68,8 @@ func NewAddedEvent(ctx context.Context,
 	loginHint,
 	hintUserID *string,
 	needRefreshToken bool,
-	issuer string,
+	issuer,
+	organizationID string,
 ) *AddedEvent {
 	return &AddedEvent{
 		BaseEvent: *eventstore.NewBaseEventForPush(
@@ -92,6 +94,7 @@ func NewAddedEvent(ctx context.Context,
 		HintUserID:       hintUserID,
 		NeedRefreshToken: needRefreshToken,
 		Issuer:           issuer,
+		OrganizationID:   organizationID,
 	}
 }