```release-note:feature
**Direct Callback Mode in OIDC Auth**: Add new `callback_mode=direct` role option to cause the oidc callback to be direct to the server instead of the client, and add a `callbackmode=direct` option to the oidc login method in the cli.
```
