fix: check return code of ms graphapi /me request. (#2647)

Co-authored-by: Jonas Hungershausen <jonas.hungershausen@ory.sh>

selfservice/strategy/oidc/provider_microsoft.go

@@ -3,6 +3,7 @@ package oidc
 import (
 	"context"
 	"encoding/json"
+	"net/http"
 	"net/url"
 	"strings"
 
@@ -99,6 +100,10 @@ func (m *ProviderMicrosoft) updateSubject(ctx context.Context, claims *Claims, e
 		}
 		defer resp.Body.Close()
 
+		if resp.StatusCode != http.StatusOK {
+			return nil, errors.WithStack(herodot.ErrInternalServerError.WithReasonf("Unable to fetch from `https://graph.microsoft.com/v1.0/me: Got Status %s", resp.Status))
+		}
+
 		var user struct {
 			ID string `json:"id"`
 		}