* fix: append client id to aud * handle new callback path Co-authored-by: Livio Amstutz <livio.a@gmail.com>
* fix: handle code separately * fix: option to ignore expiration on id_token and error handling * fix: op handler as http.Handler * fix: terminate session possible wihtout id_token_hint