Allow enforcing limits on response sizes consumed

[rosstimothy]

Preflight Checklist

• I could not find a solution in the existing issues, docs, nor discussions
• I have joined the ZITADEL chat

Describe your problem

All HTTP responses are consumed in full without a way to configure an upper bound.

oidc/pkg/http/http.go

Line 65 in 7cc5fb6

body, err := io.ReadAll(resp.Body)

Describe your ideal solution

There exists a way to set a limit that is enforced when reading HTTP response bodies.

Version

No response

Additional Context

No response

[muhlemmer]

Thanks for reporting. We could use https://pkg.go.dev/io#LimitReader instead,