4.21.0

Stories included in release

Features

• cloudfoundry/uaa #902: Remove non-spec response_type param from /oauth/token endpoint

Bug Fixes

• Refresh grant token response (/oauth/token) is not compliant with OpenID connect 1.0 RFC by not including "id_token"
• UAA does not honor Accept: application/json when defaultIdentityProvider is set