Certification 2

[rohe]

Contains the following changes

• Client registration endpoint should return a 201 HTTP response on successful client registration.
• Default token lifetime should not be 0 (zero=infinite). Changed to be 30 minutes.
• Authorization error response MUST contain ‘state’ if it is present in the request.
• Made sure cookies was only parsed once.
• To old cookie should result in re-authentication.
• Fixed incorrect error code on usage of unusable ‘authorization code’.
• Revoke tokens that has been minted using a code that then is used once more.
• Make sure a refresh token is used by the client that it was given too.
• prompt==login forces re-authentication.
• ‘prompt’ value is a list.
• If response_type==id_token return userinfo that normally would be returned from the userinfo endpoint in the id_token.
• form_post results in no return_uri or response_args in resp_info.
• Error response when response_mode==form_post not handled correctly. return_uri needed.
• Use extra info in ValueError exception instance to return better error code.
• Allow endpoints to have their own request verification error handler - added method.
• Having session ID in ID Token instance simplifies things.

[rohe]

As I said on the call: massive amount of incremental changes. Tried to squash the commits into one but couldn't get it to work.

[rohe]

Ah, dependent on OIdcMsg 1.4.1 . Will issue that PR in a moment.

[rohe]

Mismatch between @nsklikas changes to claims handling and what I've got. Have to close this PR and try to merge the two branches.