Messages - 2.3.1.2 Parameters in request object

[Nat Sakimura]

At one time, it was stated that parameters in request object takes precedence over the parameters in the query parameters.

This was replaced with all the parameters has to be in the request object.

It should be reverted back.

(This is in relation to nonce in request file.)

[John Bradley]

I agree that nonce and state at least should be allowed to be optional in the object.

[John Bradley]

Fixes #378 Sec 2.3.1.2 allow nonce and state not to be in request object

→ 48c4cbdc3d47

[John Bradley]

I also made client_id and redirect_uri optional.

If those are also going to be quite dynamic. If the client is just using the JWT to pass some static set of claim requests having to create large numbers of request files is annoying.

[Michael Jones]

Already done by John