Bugfixes
- fix return of access_token when
renew_access_token_on_expiry = false; see #121 - restore backwards compatible behavior of accepting non-supported signatures on
id_token's received on a backchannel call to the token endpoint in an OIDC flow
Features
- added support for verifying HMAC signatures on ID tokens (was supported for JWT access tokens only); see #122