changelog:
===============================================================================
OAuth2.0 Client:
Add Device Authorization Flow for Web Application
Add PKCE support for Client
Fallback to none in case of wrong expires_at format.
OAuth2.0 Provider:
Add support for CORS to metadata endpoint.
Add support for CORS to token endpoint.
Remove comma after Bearer in WWW-Authenticate
OAuth2.0 Provider - OIDC:
Call save_token in Hybrid code flow
OIDC add support of refreshing ID Tokens with refresh_id_token
The RefreshTokenGrant modifiers now take the same arguments as the
AuthorizationCodeGrant modifiers (token, token_handler, request).
General:
Added Python 3.9, 3.10, 3.11
Improve Travis & Coverage
Signed-off-by: Xu Huan <xuhuan.fnst@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>