Check ID Response as JWT (Normative)

[Casper Biering]

Spec says: "The Check ID Endpoint MAY return claims in JWT format which can be JWS [JWS] signed or JWE [JWE] encrypted."

Spec also says: "This endpoint can be used by clients that are not able to or do not wish to handle ID Tokens"

What is the purpose of Check ID Endpoint returning a JWT?

[John Bradley]

Fix it returns a JSON object containing the claims

[John Bradley]

fixes #258 make check_id response only JSON Sec 7.2

→ 5d9d50489a2b