All - JWT and JOSE specification versions

[Michael Jones]

Assuming we finish before JWT and JOSE do, we'll need to write a note calling which JWT and JOSE spec versions OpenID Connect uses. It should also say that while every effort will be made to prevent breaking changes to JWT and JOSE, that should they occur, people should use the specifically referenced draft versions in preference to the final versions, unless using a possible future profile that updates these references.

[Michael Jones]

We will have an Implementer's Note saying that we are referencing several pre-final IETF specs. This includes JOSE, JWT, and ACCT. Also OAuth Assertions and OAuth JWT.

[Michael Jones]

Fixed #882 - Called out pre-final IETF specifications used

→ <<cset 6343ca6f51a7>>