Features
- allow optional claim specs when verifying JWT access tokens; thanks @bodewig
- return the raw bearer token from
openidc.bearer_jwt_verify; thanks @bodewig - add support for passing session options to resty.session; closes #56; thanks @gene1wood
- add unauth_action "pass" option to .authenticate(); closes #53; thanks @dholth
- renew access token on expiration with refresh token grant; thanks @gonzalad
- support for prompt parameter during authorization, returning session data, and logout url override; thanks @gdestuynder
Bugfixes
- guard call to openidc_discover against repeated use; thanks @bodewig