AuthorizationEndpoint does not support response_type=id_token

[mmoayyed]

/authorize?nonce=...&state=...&redirect_uri=...&response_type=id_token&client_id=client&scope=openid

is a valid request. Yet there exists this:

if(!responseTypes.contains("token") && !responseTypes.contains("code")) {
            throw new UnsupportedResponseTypeException("Unsupported response types: " + responseTypes);
        }

[mmoayyed]

I am happy to post a PR on this. Is that agreeable? This is really stopping us to get certified on a few other OIDC profiles.

[dsyer]

Duplicates #619 #220.

[rwinch]

Closing as duplicate

[mmoayyed]

Thanks. Good to know it was documented elsewhere.