dexidp/dex ? reverse-engineered prompt

Build me a self hosted identity login service that works as an OpenID Connect provider and can hand out signed ID tokens to other apps.

I want it to let users sign in through outside providers like LDAP, GitHub, Google, Microsoft, and SAML, then act as the single login layer that client apps talk to. It should support the usual OAuth login flow, return user info like email, name, groups, and allow refresh tokens when the connector supports it. Please make it usable for Kubernetes too, so it can be pointed at a cluster and used for API server login with common tools like kubectl.

Include a simple web login page, config driven setup, storage for users and clients, and a clear sample config so I can run it locally or in Docker. If anything needs current protocol details or connector behavior, look up the latest docs online and follow those.