All work

Fix incorrect NonNull annotations in API

Remove dashes from subject claim examples

Spurious warning "File resource is null, no bytes will be returned"

Generic condition bean for matching metadata values

Allow more granular control over PKCE

Eliminate custom filter in favor of IdP's response header support

Use Suppliers for HttpServletRequest/Response

Remove scripted functions from the flow beans

IdP logs message at WARN when attribute filter returns no values after filtering

Add internal proxies for HttpServletRequest and Response

Provide temporary method for other plugins to inject relying-party beans

Enable OP flow inheritance by other plugins

Plugin idea and implications

Documentation: functions to sign/encrypt/decrypt JWTs

Facilitate custom response header settings (e.g. CORS)

OIDC endpoints stopped working with IPv6 after Jetty upgrade

Prefix authz codes to allow dispatching to specific servers