1.7.1

Improvements

• oauth_application_management: added token_endpoint_auth_method to the default supported fields

Bugfixes

• oauth_pkce: authenticate client application using token endpoint auth method in endpoints other than the token endpoint (when the PKCE code is present).

• oidc: fixed signing/encryption alg fields exposed from the "/.well-known/openid-configuration" suched that overridden values from dependent features are taken into account (one consequence of that not happening was the oidc_self_issued feature not advertising only support for RS256 in the mentioned fields).

• oauth_saml_bearer_grant: do not override, but add, "urn:ietf:params:oauth:client-assertion-type:saml2-bearer" as a supported token_endpoint_auth_method in the metadata payload.