Skipped OPA policy checking for callback step endpoint

gso/auth/oidc_policy_helper.py

@@ -411,6 +411,9 @@ def opa_decision(
         if not (oauth2lib_settings.OAUTH2_ACTIVE and oauth2lib_settings.OAUTH2_AUTHORIZATION_ACTIVE):
             return None
 
+        if _is_callback_step_endpoint(request):
+            return None
+
         try:
             json = await request.json()
         # Silencing the Decode error or Type error when request.json() does not return anything sane.