Messages - 2.3.1 Encrypted ID Token at Check ID Endpoint

[Edmund Jay]

Does the Check ID Endpoint need to check whether the ID Token is unencrypted before processing?

[John Bradley]

Fixes #454 Sec 2.3 client MUST NOT send encrypted JWT to the Check ID Endpoint

→ 8b162f452f42