Support for JSON Web Token (JWT) Profile for OAuth 2.0 Access Tokens

[andifalk]

https://datatracker.ietf.org/doc/draft-ietf-oauth-access-token-jwt/

• set typ value to "at+jwt" for access tokens (when JWT is used) (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-access-token-jwt-07#section-2.1)

• verify correct typ value "at+jwt" if an JWT access token is expected

• Make sure required claims are in access token: iss, exp, aud, sub, client_id, iat, jti (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-access-token-jwt-07#section-2.2)

• JWT access token should include scope claim if auth request includes scope (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-access-token-jwt-07#section-2.2.3)

• Implement SCIM 2.0 as specified in Support SCIM 2 for user administration #28

• Map authorization claims according to SCIM (https://datatracker.ietf.org/doc/html/draft-ietf-oauth-access-token-jwt-07#section-2.2.3.1)