OIDC: Achieve OpenID Connect 1.0 Certification

[n2ygk]

Is your feature request related to a problem? Please describe.

Formal certification of the DOT OIDC implementation is lacking.

Describe the solution you'd like

Achieve https://openid.net/certification/

Describe alternatives you've considered

Additional context

[n2ygk]

I've started running the basic OP tests using https://github.com/n2ygk/dot-tutorial as the basis. So far many features check out but get these errors for JWKS:

"Unable to verify id_token signature based on server keys"
"server JWKS does not contain a key with the correct kty that also matches (or does not have) alg/x5t#S256/'use':'sig'"

[n2ygk]

This was a dumb error. I had installed an RSA private key but had the application algorithm set to HMAC instead of RSA.

[n2ygk]

Status notes are here: https://github.com/n2ygk/dot-tutorial/blob/main/certification/notes.md