Merge branch 'master' into develop

Author: peppelinux

README.md

@@ -29,6 +29,7 @@ It also comes with the following `add_on` modules.
 
 * Custom scopes, that extends [OIDC standard ScopeClaims](https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims)
 * [Proof Key for Code Exchange by OAuth Public Clients (PKCE)](https://tools.ietf.org/html/rfc7636)
+* [OAuth2 PAR](https://datatracker.ietf.org/doc/html/rfc9126)
 * [OAuth2 RAR](https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar)
 * [OAuth2 DPoP](https://tools.ietf.org/id/draft-fett-oauth-dpop-04.html)
 * [OAuth 2.0 Authorization Server Issuer Identification](https://datatracker.ietf.org/doc/draft-ietf-oauth-iss-auth-resp)
@@ -37,6 +38,9 @@ The entire project code is open sourced and therefore licensed under the [Apache
 
 For any futher information please read the [Official Documentation](https://oidcop.readthedocs.io/en/latest/).
 
+# Certifications
+[![OIDC Certification](https://openid.net/wordpress-content/uploads/2016/04/oid-l-certification-mark-l-rgb-150dpi-90mm-300x157.png)](https://www.certification.openid.net/plan-detail.html?public=true&plan=7p3iPQmff6Ohv)
+
 
 # Contribute
 

docs/source/contents/usage.md

@@ -52,8 +52,9 @@ We can even test the single logout
 Refresh token
 -------------
 
-Here an example about how to refresh a token.
-It is important to consider that only scope=offline_access will get a usable refresh token.
+To obtain a refresh token, you have to use `response_type=code`, add `offline_access` to `scope` and also use `prompt=consent`, otherwise there will be an error (based on [OpenID Connect specification](https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.11)).
+
+To refresh a token:
 
 
     import requests
@@ -73,7 +74,7 @@ It is important to consider that only scope=offline_access will get a usable ref
         'https://127.0.0.1:8000/oidcop/token', verify=False, data=data, headers=headers
     )
 
-oidc-op will return a json response like this::
+oidc-op will return a json response like this:
 
     {
      'access_token': 'eyJhbGc ... CIOH_09tT_YVa_gyTqg',

docs/source/index.rst

@@ -27,6 +27,7 @@ It also comes with the following `add_on` modules.
 
 * Custom scopes, that extends `[OIDC standard ScopeClaims] <https://openid.net/specs/openid-connect-core-1_0.html#ScopeClaims>`_
 * `Proof Key for Code Exchange by OAuth Public Clients (PKCE) <https://tools.ietf.org/html/rfc7636>`_
+* `OAuth2 PAR <https://datatracker.ietf.org/doc/html/rfc9126>`_ 
 * `OAuth2 RAR <https://datatracker.ietf.org/doc/html/draft-ietf-oauth-rar>`_
 * `OAuth2 DPoP <https://tools.ietf.org/id/draft-fett-oauth-dpop-04.html>`_
 

pyproject.toml

@@ -7,7 +7,7 @@ build-backend = "setuptools.build_meta"
 
 [metadata]
 name = "oidcop"
-version = "2.3.0"
+version = "2.3.4"
 author = "Roland Hedberg"
 author_email = "roland@catalogix.se"
 description = "Python implementation of an OAuth2 AS and an OIDC Provider"

setup.py

@@ -72,7 +72,7 @@ def run_tests(self):
         "Programming Language :: Python :: 3.9",
         "Topic :: Software Development :: Libraries :: Python Modules"],
     install_requires=[
-        "oidcmsg==1.5.3",
+        "oidcmsg==1.5.4",
         "pyyaml",
         "jinja2>=2.11.3",
         "responses>=0.13.0"

src/oidcop/__init__.py

@@ -1,6 +1,6 @@
 import secrets
 
-__version__ = "2.3.1"
+__version__ = "2.3.4"
 
 DEF_SIGN_ALG = {
     "id_token": "RS256",