[Feature] Use OAuth2 access_token and refresh_token

[waclaw66]

I have searched the existing feature requests to make sure this is not a duplicate request.

• Yes

The feature

I've noticed that oauth2 usage is quite simplified within Immich. According my investigation it's used only for first authentication and then the internal access token without time restriction is used only. When the access to the app is banned to the user, Immich can be still used without any restriction until logout.
I would suggest to store access_token and refresh_token to the sessions table and use those properly when auth provider tokens are expired.

Platform

• Server
• Web
• Mobile