lionick

Add missing claims for Oauth2 protected resource

1

I am planning to add missing claims for Oauth2 Protected Resource to the idpy-oidc repo, as they are completey different from rp. So I will prepare a PR with these...

Support multiple values for a key param

1

We need to change the implementation of `to_urlencoded` to support the `doseq` option of the `urllib.parse.urlencode` function. The documentation is here: https://docs.python.org/3/library/urllib.parse.html#urllib.parse.urlencode

Native Applications have to use ephemeral ports in the redirect_uri. This is something that is already addressed by the RFCs: [Draft-ietf-oauth-security-topics-27](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-security-topics#name-countermeasures): This document therefore advises simplifying the required logic and...

This PR addresses an issue where the id_token lifetime was not properly handled on a per-client basis.