News
* Allow the user session lifetime to be configured via Flask. (35)
* Add support for implicit/hybrid flow. (47)
Fixes
* Store the signed ID Token JWT in the user session to allow it to be forwarded in logout requests. (32)
* Log error on unexpected 'state' returned to 'post_logout_redirect_uri'. (33)
* Store ID Token claim 'auth_time' in user session if it's set. (34)
* Add documentation for specifying auth request parameters. (39)
* Don't throw exception on missing attributes in user session. (53)
* Handle no token response after authentication response. (54)