Commit 21eadfe

mo <mo@mokhan.ca>
2018-10-29 00:11:20
do not issue session cookies from oauth api endpoints
main
1 parent 2b5ff8e
Changed files (15)
app
controllers
oauth
clients_controller.rb
metadata_controller.rb
tokens_controller.rb
doc
_includes
get-well-known-oauth-authorization-server.html
oauth-dynamic-client-registration.html
oauth-token-introspection.html
oauth-tokens-authorization-code.html
oauth-tokens-client-credentials.html
oauth-tokens-password.html
oauth-tokens-pkce.html
oauth-tokens-refresh-token.html
oauth-tokens-saml-assertion.html
scim-service-provider-config.html
spec
requests
oauth
clients_spec.rb
tokens_spec.rb
app/controllers/oauth/clients_controller.rb
@@ -5,6 +5,9 @@ module Oauth
     skip_before_action :verify_authenticity_token
     skip_before_action :authenticate!
     before_action :apply_cache_headers
+    before_action do
+      request.session_options[:skip] = true
+    end
 
     def create
       @client = Client.create!(transform(secure_params))
app/controllers/oauth/metadata_controller.rb
@@ -3,9 +3,11 @@
 module Oauth
   class MetadataController < ApplicationController
     skip_before_action :authenticate!
+    before_action do
+      request.session_options[:skip] = true
+    end
 
     def show
-      request.session_options[:skip] = true
       render formats: :json
     end
   end
app/controllers/oauth/tokens_controller.rb
@@ -3,6 +3,9 @@
 module Oauth
   class TokensController < ApplicationController
     skip_before_action :verify_authenticity_token
+    before_action do
+      request.session_options[:skip] = true
+    end
 
     def create
       response.headers['Cache-Control'] = 'no-store'
doc/_includes/get-well-known-oauth-authorization-server.html
@@ -34,7 +34,7 @@ Referrer-Policy: strict-origin-when-cross-origin
 Content-Type: application/json; charset=utf-8
 Etag: W/"7f1eee6ebfc3008c58d630548ed1707c"
 Cache-Control: max-age=0, private, must-revalidate
-X-Request-Id: bfd764ad-6661-4d3e-9155-66a817d13c51
+X-Request-Id: 08bf72b9-0883-4214-b7a6-ceb414964790
 Transfer-Encoding: chunked
 ```
doc/_includes/oauth-dynamic-client-registration.html
@@ -6,7 +6,7 @@ Example curl request:
 ```bash
 $ curl http://localhost:5000/oauth/clients \
   -X POST \
-  -d '{"redirect_uris":["https://lueilwitzkihn.us","https://thompson.biz"],"client_name":"Quiana Funk","token_endpoint_auth_method":"client_secret_basic","logo_uri":"https://rutherford.co.uk","jwks_uri":"https://armstrong.co.uk"}' \
+  -d '{"redirect_uris":["https://millerspencer.com","https://lebsack.ca"],"client_name":"Jamey Parisian","token_endpoint_auth_method":"client_secret_basic","logo_uri":"https://corkeryskiles.com","jwks_uri":"https://becker.biz"}' \
   -H "Accept: application/json" \
   -H "Content-Type: application/json" \
   -H "User-Agent: net/hippie 0.1.9" \
@@ -26,13 +26,13 @@ Request Body:
 ```json
 {
   "redirect_uris": [
-    "https://lueilwitzkihn.us",
-    "https://thompson.biz"
+    "https://millerspencer.com",
+    "https://lebsack.ca"
   ],
-  "client_name": "Quiana Funk",
+  "client_name": "Jamey Parisian",
   "token_endpoint_auth_method": "client_secret_basic",
-  "logo_uri": "https://rutherford.co.uk",
-  "jwks_uri": "https://armstrong.co.uk"
+  "logo_uri": "https://corkeryskiles.com",
+  "jwks_uri": "https://becker.biz"
 }
 ```
 
@@ -48,8 +48,7 @@ Referrer-Policy: strict-origin-when-cross-origin
 Cache-Control: no-cache, no-store
 Pragma: no-cache
 Content-Type: application/json; charset=utf-8
-Set-Cookie: _proof=98f3aadf475f8b862d5d0d725522e136; path=/; HttpOnly
-X-Request-Id: e301c873-7ac7-4d00-9f5d-ecf7fad2155c
+X-Request-Id: e127390c-abc8-4cd1-a181-98b76cf4176b
 Transfer-Encoding: chunked
 ```
 
@@ -57,13 +56,13 @@ Transfer-Encoding: chunked
 Response Body:
 ```json
 {
-  "client_id": "e47b9f52-11ea-49bb-8e90-80ecc42fc78a",
-  "client_secret": "Ybx6TQ8zYtVhhhSPNH2MttkQ",
-  "client_id_issued_at": 1540768302,
+  "client_id": "b84321b8-33ca-42cb-a455-14d9a10cac4b",
+  "client_secret": "8QPgFoE2b5LxkG9W51ShSniZ",
+  "client_id_issued_at": 1540771833,
   "client_secret_expires_at": 0,
   "redirect_uris": [
-    "https://lueilwitzkihn.us",
-    "https://thompson.biz"
+    "https://millerspencer.com",
+    "https://lebsack.ca"
   ],
   "grant_types": [
     "authorization_code",
@@ -72,10 +71,10 @@ Response Body:
     "password",
     "urn:ietf:params:oauth:grant-type:saml2-bearer"
   ],
-  "client_name": "Quiana Funk",
+  "client_name": "Jamey Parisian",
   "token_endpoint_auth_method": "client_secret_basic",
-  "logo_uri": "https://rutherford.co.uk",
-  "jwks_uri": "https://armstrong.co.uk"
+  "logo_uri": "https://corkeryskiles.com",
+  "jwks_uri": "https://becker.biz"
 }
 ```
doc/_includes/oauth-token-introspection.html
@@ -6,11 +6,11 @@ Example curl request:
 ```bash
 $ curl http://localhost:5000/oauth/tokens/introspect \
   -X POST \
-  -d '{"token":"eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzE5MDIsImlhdCI6MTU0MDc2ODMwMiwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3Q6NTAwMC9tZXRhZGF0YSIsIm5iZiI6MTU0MDc2ODMwMiwiYXVkIjoiNjUyZGI5ODctNzgyOS00ZDJkLTk5NWUtYWVhNWIwYTVjYjkwIiwianRpIjoiNDQ2ZmVmZTEtYjI2Zi00YWYyLWE1NDgtOTJhNmE1MTNiMzgzIiwic3ViIjoiZTRiNjU4Y2YtZjliMi00YTc5LTkwMGEtMjgzN2JkZDQxODFlIiwidG9rZW5fdHlwZSI6ImFjY2VzcyJ9.ao_ifLg0pLZP_a6B0QZYKZrarfXLThkgFCKnfIYCt1bzhT9gavwt_711YF9Rnk8qXeNs8m-jhkuRvgO1QatA7JVSReCP1u0QyCKiGNVbCHiAJCppr76FS4LH2WchQa-w3oAC4om_pP44UZHLnI9qeQ0-KHOirFzZhuO962HT_S4yUF1pi-ILJ0bfuX0LheBHa9izziiIgQygwtLXAT9HWMIftH81R7fHJwfoE0L74SWDuWP7gi3xb1zGNDVbnU9pIxlZGuGL_4c7CZ8_ILDMsDPC9TVx3ciKe0dprazkXcfKqR8_r1-4s_0zlQhWviX9BIsp1cxi8Ynu1S6ikXU7hw"}' \
+  -d '{"token":"eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzU0MzQsImlhdCI6MTU0MDc3MTgzNCwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3Q6NTAwMC9tZXRhZGF0YSIsIm5iZiI6MTU0MDc3MTgzNCwiYXVkIjoiMGUxYjA3ZjYtZDExYi00YjljLWExYWEtNmE4YTIzNDNkZGEzIiwianRpIjoiZGZhMDQ4OWEtOGU1NS00ZTU0LWEwZWMtODZiZGQxOWUyNjI4Iiwic3ViIjoiMTJhMDIzY2ItMjgxYy00OGZiLWEwMWUtMWQwOGQzMzAyYThkIiwidG9rZW5fdHlwZSI6ImFjY2VzcyJ9.rGx6eW_IdNeciarkKGxNMT6JNCIgAIFdSsurATaSTY3IOUKwV9tWbVGuqQHotU4uQ-LYZwGdI8An0WGRveD1x1nNTqByZoXh5HH-m7FLkwqyrMThaLNJMWPuEKmvwWZik0ZKVQWVHHCvOx3qbJpJkfzoOCteQAT7tlScTHBjovtWf9TfqHQlTnzOSUOCILlQS3nJXp1iStXj0JBXyXdRvrBxEsSr2za-G6ECA_fignEvqkzFp4V0k6cIOp-WClx-TLBW2LZa6JDauVK8b9av0Dw-ko6-EXfHSl8o8JvaXVDgcZg7CpvjVUdXeOM6n6hyp4GONALZZaTDJUINvnw31A"}' \
   -H "Accept: application/json" \
   -H "Content-Type: application/json" \
   -H "User-Agent: net/hippie 0.1.9" \
-  -H "Authorization: Basic OWFiZmIyZDMtYWUxNC00YjRiLThiMzgtYTI3Mjk1Zjk0Y2RhOnVoV05aeDdneDlaZ21Eb2ZmNWVITm5uMg==" \
+  -H "Authorization: Basic NDQxZTZjODgtNWFiOC00ZGM2LTg3MTktOTQ3YWIyZTJhNzdhOnJLeEZrNm9uYkdma0pMUVNFN0hzWU42VQ==" \
   -H "Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3"
 ```
 Request Headers:
@@ -19,7 +19,7 @@ Request Headers:
 Accept: application/json
 Content-Type: application/json
 User-Agent: net/hippie 0.1.9
-Authorization: Basic OWFiZmIyZDMtYWUxNC00YjRiLThiMzgtYTI3Mjk1Zjk0Y2RhOnVoV05aeDdneDlaZ21Eb2ZmNWVITm5uMg==
+Authorization: Basic NDQxZTZjODgtNWFiOC00ZGM2LTg3MTktOTQ3YWIyZTJhNzdhOnJLeEZrNm9uYkdma0pMUVNFN0hzWU42VQ==
 Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3
 ```
 
@@ -27,7 +27,7 @@ Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3
 Request Body:
 ```json
 {
-  "token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzE5MDIsImlhdCI6MTU0MDc2ODMwMiwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3Q6NTAwMC9tZXRhZGF0YSIsIm5iZiI6MTU0MDc2ODMwMiwiYXVkIjoiNjUyZGI5ODctNzgyOS00ZDJkLTk5NWUtYWVhNWIwYTVjYjkwIiwianRpIjoiNDQ2ZmVmZTEtYjI2Zi00YWYyLWE1NDgtOTJhNmE1MTNiMzgzIiwic3ViIjoiZTRiNjU4Y2YtZjliMi00YTc5LTkwMGEtMjgzN2JkZDQxODFlIiwidG9rZW5fdHlwZSI6ImFjY2VzcyJ9.ao_ifLg0pLZP_a6B0QZYKZrarfXLThkgFCKnfIYCt1bzhT9gavwt_711YF9Rnk8qXeNs8m-jhkuRvgO1QatA7JVSReCP1u0QyCKiGNVbCHiAJCppr76FS4LH2WchQa-w3oAC4om_pP44UZHLnI9qeQ0-KHOirFzZhuO962HT_S4yUF1pi-ILJ0bfuX0LheBHa9izziiIgQygwtLXAT9HWMIftH81R7fHJwfoE0L74SWDuWP7gi3xb1zGNDVbnU9pIxlZGuGL_4c7CZ8_ILDMsDPC9TVx3ciKe0dprazkXcfKqR8_r1-4s_0zlQhWviX9BIsp1cxi8Ynu1S6ikXU7hw"
+  "token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzU0MzQsImlhdCI6MTU0MDc3MTgzNCwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3Q6NTAwMC9tZXRhZGF0YSIsIm5iZiI6MTU0MDc3MTgzNCwiYXVkIjoiMGUxYjA3ZjYtZDExYi00YjljLWExYWEtNmE4YTIzNDNkZGEzIiwianRpIjoiZGZhMDQ4OWEtOGU1NS00ZTU0LWEwZWMtODZiZGQxOWUyNjI4Iiwic3ViIjoiMTJhMDIzY2ItMjgxYy00OGZiLWEwMWUtMWQwOGQzMzAyYThkIiwidG9rZW5fdHlwZSI6ImFjY2VzcyJ9.rGx6eW_IdNeciarkKGxNMT6JNCIgAIFdSsurATaSTY3IOUKwV9tWbVGuqQHotU4uQ-LYZwGdI8An0WGRveD1x1nNTqByZoXh5HH-m7FLkwqyrMThaLNJMWPuEKmvwWZik0ZKVQWVHHCvOx3qbJpJkfzoOCteQAT7tlScTHBjovtWf9TfqHQlTnzOSUOCILlQS3nJXp1iStXj0JBXyXdRvrBxEsSr2za-G6ECA_fignEvqkzFp4V0k6cIOp-WClx-TLBW2LZa6JDauVK8b9av0Dw-ko6-EXfHSl8o8JvaXVDgcZg7CpvjVUdXeOM6n6hyp4GONALZZaTDJUINvnw31A"
 }
 ```
 
@@ -43,8 +43,7 @@ Referrer-Policy: strict-origin-when-cross-origin
 Content-Type: application/json; charset=utf-8
 Etag: W/"78b558bd2357fbe7ad52804fb3af1b86"
 Cache-Control: max-age=0, private, must-revalidate
-Set-Cookie: _proof=fc8ca5893c6374293b9ae355143bcad8; path=/; HttpOnly
-X-Request-Id: 42549cad-67a3-4165-98d6-88a0de62dda3
+X-Request-Id: d799843f-0f1c-400a-9f3b-6ff0231490c0
 Transfer-Encoding: chunked
 ```
doc/_includes/oauth-tokens-authorization-code.html
@@ -6,11 +6,11 @@ Example curl request:
 ```bash
 $ curl http://localhost:5000/oauth/tokens \
   -X POST \
-  -d '{"grant_type":"authorization_code","code":"KG9YberKrDtVJdynpeoKENsD"}' \
+  -d '{"grant_type":"authorization_code","code":"bJZDp8pdR98JjsZLvx2Qmqre"}' \
   -H "Accept: application/json" \
   -H "Content-Type: application/json" \
   -H "User-Agent: net/hippie 0.1.9" \
-  -H "Authorization: Basic NjE1MWM4ZmEtMTg1MC00YmVmLTg5ZDktNDMzYWNlZjNmOTY3OnVrcnF2ZzJvSzVQclk1ejlXdERHdDdkZg==" \
+  -H "Authorization: Basic MzFkYmIzNzAtZWI0Mi00ZjhhLTg1ZTItYzFjMTdkZjUxMTFjOkJid2tmR2NteXRSQzdNNHNBdnhRSnA4eQ==" \
   -H "Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3"
 ```
 Request Headers:
@@ -19,7 +19,7 @@ Request Headers:
 Accept: application/json
 Content-Type: application/json
 User-Agent: net/hippie 0.1.9
-Authorization: Basic NjE1MWM4ZmEtMTg1MC00YmVmLTg5ZDktNDMzYWNlZjNmOTY3OnVrcnF2ZzJvSzVQclk1ejlXdERHdDdkZg==
+Authorization: Basic MzFkYmIzNzAtZWI0Mi00ZjhhLTg1ZTItYzFjMTdkZjUxMTFjOkJid2tmR2NteXRSQzdNNHNBdnhRSnA4eQ==
 Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3
 ```
 
@@ -28,7 +28,7 @@ Request Body:
 ```json
 {
   "grant_type": "authorization_code",
-  "code": "KG9YberKrDtVJdynpeoKENsD"
+  "code": "bJZDp8pdR98JjsZLvx2Qmqre"
 }
 ```
 
@@ -44,9 +44,8 @@ Referrer-Policy: strict-origin-when-cross-origin
 Cache-Control: private, no-store
 Pragma: no-cache
 Content-Type: application/json; charset=utf-8
-Etag: W/"3dc9d40d9f0db7efcb0e1fc469f6b7cf"
-Set-Cookie: _proof=ffdf8c70a300174348cd6f72bc997f5b; path=/; HttpOnly
-X-Request-Id: d012fb07-2466-47c2-be58-b90cc6576e9d
+Etag: W/"72d9b08e26785d20f3735783e4fdfabd"
+X-Request-Id: d80da500-e65c-402e-992e-f128e39343c6
 Transfer-Encoding: chunked
 ```
 
@@ -54,10 +53,10 @@ Transfer-Encoding: chunked
 Response Body:
 ```json
 {
-  "access_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzE5MDAsImlhdCI6MTU0MDc2ODMwMCwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NjgzMDAsImF1ZCI6IjYxNTFjOGZhLTE4NTAtNGJlZi04OWQ5LTQzM2FjZWYzZjk2NyIsImp0aSI6ImE0MTNkYjEzLWY5N2YtNGY3Yy05MjY5LTEyZjhhMjBhYjg2NSIsInN1YiI6ImU1ZWU1ODU0LWVkZDctNDA3Mi1iZjg0LTJhMTJhNzcyODM3NiIsInRva2VuX3R5cGUiOiJhY2Nlc3MifQ.IHn9SGQXCl3KC6bXK91R8769vAETMZr5-MaIiunIJsi8xloBFzmBS7_5e8sqNpHg_6w3NfQohMxQ7yuWn-0xIBD-6tR7SsexFN2CVV6SmF0XfQGRmI6oP8zwKnrgFHUnPCQ0sfOI1dLvhonyrTMRbmgDiQfRguO9SAqgMU1lypth9SIQvz5d1IRHwKT2LXFHnL3Kj7ytYK2NTR7KdW8YjAzAmybOoRSdkrq0XcCPrXucmPXSUfjrbPlGUAFgahDXW0Z8FMWjunr671OMqLnoVy8Nt7CPllfxx78ehtPxfRRtlX9E-2NYZQG_08hg4Yp6HqXwBVf5-zGxQFiF0dNKTA",
+  "access_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzU0MzIsImlhdCI6MTU0MDc3MTgzMiwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NzE4MzIsImF1ZCI6IjMxZGJiMzcwLWViNDItNGY4YS04NWUyLWMxYzE3ZGY1MTExYyIsImp0aSI6ImIxOTFjYzBkLWM3MmItNDFkNS04ZGE5LWYxY2JiNDQyNzc2ZiIsInN1YiI6IjViM2ZmMDZjLTQxYTAtNDdiYS1hYjE5LWFkYzA5NmRlZmY1ZiIsInRva2VuX3R5cGUiOiJhY2Nlc3MifQ.IMMalCiU_FgXQNFZ6FqB9ySzgm54r-ZjL5DxLrF_uTmZSOH3DRWWN4IwcPhu3SCY4HqT04mTjo0aGffpp7iFAB1eNa2uRR1cTjiPbI0fTDomzL-KfPl8MlRkvM79n9ZMF_JHEomq3s-9dkZDKHFXjeTqaBXfOr3FV9BOVLHxdx0HIHQ_YpsugSlri6ymrXs0IcMlv83hbBb6u_7ouvHVNfSnjy3seiTlmTkysTEDYgArCpRjVieMZwdiXGAD2cpH1ZlT2iAMvi-QYeNcaRjvm4xhfb15ZfcUa9_DgHPeZfxeF9ZIVhdfCQuYok6lo6xeqYCVCMcLEq6CaGf8PonNqw",
   "token_type": "Bearer",
   "expires_in": 3600,
-  "refresh_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA4NTQ3MDAsImlhdCI6MTU0MDc2ODMwMCwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NjgzMDAsImF1ZCI6IjYxNTFjOGZhLTE4NTAtNGJlZi04OWQ5LTQzM2FjZWYzZjk2NyIsImp0aSI6ImU4NjkwOWI4LTg3MmItNGRiZC05OTE5LWI0MTgxMTE4MmM1NyIsInN1YiI6ImU1ZWU1ODU0LWVkZDctNDA3Mi1iZjg0LTJhMTJhNzcyODM3NiIsInRva2VuX3R5cGUiOiJyZWZyZXNoIn0.ZtaqstL5DwJqG4T3wPNiM32HUzGyL9z1ZCfPDTSNgeKjGie3xRlxlCnFv5FpT994ZQBUzCbSp1eRC02FXCh21cjb80oevy6bvog3xAcdFY0y7yPgcfoOpv3g-rLHNwpsJfHkcIbj5BipDM34ro53A0yUoGTZOVopKGgT0y3DK2gjxFUZAwOxWTJrp_Vad599Jh-rZ8CoqspFuqXR0GSy1q4FlQfixJNI9FtqXD0RnUc42Aj1-gCXsBcGYmhWHtDzmRvxbyz6K_MXelpMu3LWrkBirkaMr0_9cdiT-WtG2zc5tKvxGUSelY-GhYKDhWVxFSZ9ioiYvXc_xsVCaLpwtw"
+  "refresh_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA4NTgyMzIsImlhdCI6MTU0MDc3MTgzMiwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NzE4MzIsImF1ZCI6IjMxZGJiMzcwLWViNDItNGY4YS04NWUyLWMxYzE3ZGY1MTExYyIsImp0aSI6IjE4NTIxMTIxLTJiMTItNGUyNS04N2VkLTI3NWI3MTcyNWUyMCIsInN1YiI6IjViM2ZmMDZjLTQxYTAtNDdiYS1hYjE5LWFkYzA5NmRlZmY1ZiIsInRva2VuX3R5cGUiOiJyZWZyZXNoIn0.gFqWpPH4XgpI4cBCbNWyaBNGhxrE2zhQUn7mir9SwrzNSl5rnq9ep5j48SwDNMdY1oh5zNCdJCsPAeGwHpvvjdQCAJYWfbz8AAvpAivxDgv7FeIjamS5ucwh6Wc6uOlbdYUT6JOhiKBCMsmceIxfnr12QcxrZqe0GkHaOlpA1C-LiEuEa4zIKlnkq-FD2f5Xsd8bCZp0lPtI8QoACPNMvbftHdpfP-tV7v14r29jCT-5baTpEy6V_JwaRwI-EQymPpQTG4BgKnTPxZuIGCqxh7IuUc3bih7LTLO4vVoa5S6P9kBNunXFDw_uyBOoRAf2JcBdRbms9qhSbsEmNjuPZQ"
 }
 ```
doc/_includes/oauth-tokens-client-credentials.html
@@ -10,7 +10,7 @@ $ curl http://localhost:5000/oauth/tokens \
   -H "Accept: application/json" \
   -H "Content-Type: application/json" \
   -H "User-Agent: net/hippie 0.1.9" \
-  -H "Authorization: Basic ZWQwYTQ3YzgtODBjOS00YmI0LWJhNWQtYzA4MzY1YTRhMTZkOmQ4ZWI2SmFDWFF5NndjQWhqVjhpVUE4dQ==" \
+  -H "Authorization: Basic YmMwMTg1N2ItODY1NC00MjFmLThhMDQtZDU1MzJmYTRhMTljOnRwTFBoM2VkZnh4aDREMnJDcXdGbWFRVw==" \
   -H "Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3"
 ```
 Request Headers:
@@ -19,7 +19,7 @@ Request Headers:
 Accept: application/json
 Content-Type: application/json
 User-Agent: net/hippie 0.1.9
-Authorization: Basic ZWQwYTQ3YzgtODBjOS00YmI0LWJhNWQtYzA4MzY1YTRhMTZkOmQ4ZWI2SmFDWFF5NndjQWhqVjhpVUE4dQ==
+Authorization: Basic YmMwMTg1N2ItODY1NC00MjFmLThhMDQtZDU1MzJmYTRhMTljOnRwTFBoM2VkZnh4aDREMnJDcXdGbWFRVw==
 Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3
 ```
 
@@ -43,9 +43,8 @@ Referrer-Policy: strict-origin-when-cross-origin
 Cache-Control: private, no-store
 Pragma: no-cache
 Content-Type: application/json; charset=utf-8
-Etag: W/"9094d059ab60a1bdd8c0ea110f2514ad"
-Set-Cookie: _proof=f132eaa0d125ae46db8a1a3812e16df6; path=/; HttpOnly
-X-Request-Id: d80a0422-d867-4d2d-a2c6-2c1601762f1f
+Etag: W/"33541a645715a2f8901de1f74434d677"
+X-Request-Id: 46b0811a-e572-4226-831d-08d8ba4b1541
 Transfer-Encoding: chunked
 ```
 
@@ -53,7 +52,7 @@ Transfer-Encoding: chunked
 Response Body:
 ```json
 {
-  "access_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzE5MDEsImlhdCI6MTU0MDc2ODMwMSwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NjgzMDEsImF1ZCI6ImVkMGE0N2M4LTgwYzktNGJiNC1iYTVkLWMwODM2NWE0YTE2ZCIsImp0aSI6ImUwYmVhOTc0LTY5YWItNDZhMC04N2RhLTkyMzdmZmQ5Yjk3NCIsInN1YiI6ImVkMGE0N2M4LTgwYzktNGJiNC1iYTVkLWMwODM2NWE0YTE2ZCIsInRva2VuX3R5cGUiOiJhY2Nlc3MifQ.MfB0JmOoi3v36DNfiNOKUUwk77HRdYR-L7KWLAaVeB5TNUOWtx-uup2cyg84FWnOuBf8S1NCSsyPVm8FoLSHLpqrtgNcUbHl2Y9kOIV_vzxndkzNc-2BU4rGnXeCLcwQu-LR6fRxVfGiIY4_6fCRhSZh8ahnZDoUkjT97BAmIRvo6MtdM5PuJbK1hDI-sfcqGzLSGrtItaGWYPLlWRl326lrco9hK-zguovlAkq_K6F-VXDMeQf6eXnw7YN6lUmPQuobaUAIKKGgYZz7pkrhEY-n8OSQaY628kKQswJU076p5ZiD6LyvlEUPqpRa-z1PIdPyElyljGE-T0bpO39WMA",
+  "access_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzU0MzMsImlhdCI6MTU0MDc3MTgzMywiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NzE4MzMsImF1ZCI6ImJjMDE4NTdiLTg2NTQtNDIxZi04YTA0LWQ1NTMyZmE0YTE5YyIsImp0aSI6ImM5ZGYxNDAzLTNhZDItNGI3OC05ODgwLWI4NmE1MTkyZTdlZCIsInN1YiI6ImJjMDE4NTdiLTg2NTQtNDIxZi04YTA0LWQ1NTMyZmE0YTE5YyIsInRva2VuX3R5cGUiOiJhY2Nlc3MifQ.IkG-A3WeB7RNTLVzVbOBB-sD1dOqpiT7DRo-ech7xWj0ABOdoGMoBW_GYtzNO5pN7xBUvZU6pnd5Fs2uAe2oImB4irPg4zS_4h3WEMw1xP4k-suRk0WSxKU_OxrmgOoqsg40d7T5eeJ3Xir3UdO_oNdT5Zr8vuwc2dVhwV1GwITFgfuCYPPv1c8PN4i6z3a_EPZmTHaXTcK1YHkO1Ir5R2Vw16e5njcAKlI_ldHjmh7U4rz161rcVhAojQ8S-3tjB1E0qcjKELdjaIDElQ0gvSkRBA87ppog_bt1_C4wnH2IYKzsqr4wl6jwxvEpGvIb42FMXsE6IEOq6RaJfW0yOA",
   "token_type": "Bearer",
   "expires_in": 3600
 }
doc/_includes/oauth-tokens-password.html
@@ -6,11 +6,11 @@ Example curl request:
 ```bash
 $ curl http://localhost:5000/oauth/tokens \
   -X POST \
-  -d '{"grant_type":"password","username":"hollis.kozey@windler.ca","password":"aCAJADuUpBUD"}' \
+  -d '{"grant_type":"password","username":"shakia@stracke.us","password":"qrMGikICW"}' \
   -H "Accept: application/json" \
   -H "Content-Type: application/json" \
   -H "User-Agent: net/hippie 0.1.9" \
-  -H "Authorization: Basic MWMyMjFmZmItMWNjNC00NmM1LTkyYjUtM2UwMmMzNWM3YTY5OldoelQ5OFBtVDJFdWk3d3E0RUNnZDNDcw==" \
+  -H "Authorization: Basic MmY3Y2QzNWQtZDc4NC00NGE0LWIxM2YtOWQ3ZWNiOGMwNzllOnd5ZnpwMWZyRkdvSmdpNXVTdVdVblMxcA==" \
   -H "Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3"
 ```
 Request Headers:
@@ -19,7 +19,7 @@ Request Headers:
 Accept: application/json
 Content-Type: application/json
 User-Agent: net/hippie 0.1.9
-Authorization: Basic MWMyMjFmZmItMWNjNC00NmM1LTkyYjUtM2UwMmMzNWM3YTY5OldoelQ5OFBtVDJFdWk3d3E0RUNnZDNDcw==
+Authorization: Basic MmY3Y2QzNWQtZDc4NC00NGE0LWIxM2YtOWQ3ZWNiOGMwNzllOnd5ZnpwMWZyRkdvSmdpNXVTdVdVblMxcA==
 Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3
 ```
 
@@ -28,8 +28,8 @@ Request Body:
 ```json
 {
   "grant_type": "password",
-  "username": "hollis.kozey@windler.ca",
-  "password": "aCAJADuUpBUD"
+  "username": "shakia@stracke.us",
+  "password": "qrMGikICW"
 }
 ```
 
@@ -45,9 +45,8 @@ Referrer-Policy: strict-origin-when-cross-origin
 Cache-Control: private, no-store
 Pragma: no-cache
 Content-Type: application/json; charset=utf-8
-Etag: W/"fc752a172f6d665616db0f8cf492b3b0"
-Set-Cookie: _proof=fa658088a6a7991bb79b6a7a1a8829e3; path=/; HttpOnly
-X-Request-Id: 5ef1419d-59f1-4014-94ff-38fbb0f02309
+Etag: W/"516f7b61c8618ad181642380766549b5"
+X-Request-Id: 63b59fed-8be8-4ac8-bee6-ba3dc6746611
 Transfer-Encoding: chunked
 ```
 
@@ -55,10 +54,10 @@ Transfer-Encoding: chunked
 Response Body:
 ```json
 {
-  "access_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzE5MDEsImlhdCI6MTU0MDc2ODMwMSwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NjgzMDEsImF1ZCI6IjFjMjIxZmZiLTFjYzQtNDZjNS05MmI1LTNlMDJjMzVjN2E2OSIsImp0aSI6IjQ0MGIzNTJmLWFlYjctNDg2Ni04ZTY2LTVjNzJhZjgwM2QzNiIsInN1YiI6Ijk0ZjViYzI4LTdkMmQtNGFjZC05YzE0LWEyZjY5MmJmNWM1NiIsInRva2VuX3R5cGUiOiJhY2Nlc3MifQ.nEkYCqNFnyI1AMdJBZhYNbIWD6qCKtTKMlMHvrVW1p6Vo_Q6IQ3KvcxfK3Mq38FnnQxyFQMxl0RtzCwu37SyajczX7kb1Nchmv6hzMD1NkH9ZciVc4KWcvQdlrQkeAwvxg4ME-Fv2mrIXLgwrSraNsOZfj4WRfJm4W1RAUHgm8rM4DEOhEXHkhRgX95TJ9cwBZyE1E3oISinwX3Gy1PehHpqU24sODfpa0uYoqYUMRrrN-Qoa9Zi3Wtaq4oRLCjfVGe0_0GuVoMp8QHcOhmr6UTKMhDfJWbARWzTGdAwbabm0T9c3sst9BKUMxGrav3HIL2tRclXNSasOEDLcRKTmA",
+  "access_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzU0MzIsImlhdCI6MTU0MDc3MTgzMiwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NzE4MzIsImF1ZCI6IjJmN2NkMzVkLWQ3ODQtNDRhNC1iMTNmLTlkN2VjYjhjMDc5ZSIsImp0aSI6IjdhMmI3YzFlLWQ5ZjktNGViYS04ZTcyLTliNDNmM2E1OWNhNSIsInN1YiI6IjFhOTdkN2I4LTUxNzgtNDYzMS04NWE0LWI2OWRlNWIyOGQ1YyIsInRva2VuX3R5cGUiOiJhY2Nlc3MifQ.RkP60SR1XLy5J5ixYvpd8X7RzhpUAvv8PoycWSgPwGbb2YEGdiJz854-Ck7GCrSsEEZskyA5gOQJQIyHerQ3WzHn4YXhaJ34tYc3_xZtF6g28XS69oZ6dLiMlQHjW6XtruAQmAHrWhHWhnniNctF3RzpymEuHPR8Kb00zDLQW7cSUibmM386ch5QrF7z5UlSLPoeQp9N0hDpsuOV4-zkpPWcy6NaSKlVHtUnYtsGOQFqjexLmYxjRJsn_EUw2ZjtTqhZyu498WB8CnIx9NbzrX_6EGbuf-v4bIGHAFXC3ORoZPwEolQTchOli482ioRb3FMG_n54zMYkYM2Eb84wcg",
   "token_type": "Bearer",
   "expires_in": 3600,
-  "refresh_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA4NTQ3MDEsImlhdCI6MTU0MDc2ODMwMSwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NjgzMDEsImF1ZCI6IjFjMjIxZmZiLTFjYzQtNDZjNS05MmI1LTNlMDJjMzVjN2E2OSIsImp0aSI6IjIxZTg0OTk1LTRmZWItNDUxNi04OWEyLWM0NWFmZDE5YjdkZiIsInN1YiI6Ijk0ZjViYzI4LTdkMmQtNGFjZC05YzE0LWEyZjY5MmJmNWM1NiIsInRva2VuX3R5cGUiOiJyZWZyZXNoIn0.G8as_HTS5fkCPg6G82n4OoRRn881GxLUDqc7Ac9GSses5Tb7hRKdSD6zYex3QVBp_QKc9hsz0CdMLL0iyvqCyFNYUJ4ci6MyEFh9jm3s6sdlwrjzt7i42r_lrjJ9pxqr1mBXfBTgfhI3eocfUwmMDHOwqZOJbDyq_FpuL5h9oPZPam8xCkmaqyLfO8YFY3DIRiFyUU6OBqGY_mQ4KQEprE2GvMqZ4I4Rvt_gV4CQKG2GL_YUiAEE_j4e5bsoxFRtjX2bW_AcpJR0b_Gzx1i5GgUAhJSe549GmEdUWNBWPrRZn0UPn1Wdmg6-USBdw1t47SDL_gsN3qCBKvczCMhZ-A"
+  "refresh_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA4NTgyMzIsImlhdCI6MTU0MDc3MTgzMiwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NzE4MzIsImF1ZCI6IjJmN2NkMzVkLWQ3ODQtNDRhNC1iMTNmLTlkN2VjYjhjMDc5ZSIsImp0aSI6ImM2YTMwZWI5LWUyMDQtNDA5Yi05M2U3LTNlMTE4NzE3YTgzMyIsInN1YiI6IjFhOTdkN2I4LTUxNzgtNDYzMS04NWE0LWI2OWRlNWIyOGQ1YyIsInRva2VuX3R5cGUiOiJyZWZyZXNoIn0.Q7xmlaWoZmghJzHxAn1WzlMs7PlAmvkFYdgbJ8EEOUM3jy5DL50KrXXEWn4nzsQCVH4My1AQMTfuqaULW1Ekg7wqG2oJWV5byupSlnmLK1xkzmXkL3eQQU-pmwY5Mut6ddGgUbj7dhimV3-2nqmQKPe81L9-DKCkfjLRgOJqv4PQkhQKz2qknq3oGjNMt0CXwLdI1I7YOJGB7LJ4T7QpAAb0rIfdwGNremsmhwYx9EaW2fT93-UUP7lkrOPeE4z_h6uQyap4me0d0dYcF47VAQGDr9u-80Wu6cZApWPIO-nnvYjxCRQUdWYHKN4rV7Vi2USC8NEfVMoHnROObKXu3A"
 }
 ```
doc/_includes/oauth-tokens-pkce.html
@@ -6,11 +6,11 @@ Example curl request:
 ```bash
 $ curl http://localhost:5000/oauth/tokens \
   -X POST \
-  -d '{"grant_type":"authorization_code","code":"HEXtkEEGMKeZiimz3hYyxYmE","code_verifier":"0ba67177a9f4db0840ff74484d0f63010c109b375058f7c40a1fe04a1ceab3aeced10abaec39d6cef55656d607d9f1f0181c809ff7f81e7324b55068191baf0de68f014a982d5697b9deff56d2d94aa4cffc29cb1fd55ec3b9d9f76a7a62dc1f184492f00f48b9137bd5fca4555588f9286678e775cb60333f2e0c4c457b5ca5"}' \
+  -d '{"grant_type":"authorization_code","code":"F7ZvTq5xDmwXUuiwCGB1Cazr","code_verifier":"0bbb49b4fc4ee55293480123d43da187a2cd9d70f47cd9f4653ac2914ce3531d81af10740996ffe4c186363ed1011348cdab65d783a2b27decd5b1525eef6faf4db15026c954cd0fcc4b5866a50606f985af81c7015dc94838087b97a9f46d2a70baabfa9087cab94fe95ea1c51ec0c113641d82bcfbd07290102e05f43866f9"}' \
   -H "Accept: application/json" \
   -H "Content-Type: application/json" \
   -H "User-Agent: net/hippie 0.1.9" \
-  -H "Authorization: Basic M2FjZTJlOTUtNGVkMS00YTQyLTlhOTItMDQ3ZjYzNmFiYzkxOjFHd0RSNTZtRDhlWWJzUDhzREhhN3licw==" \
+  -H "Authorization: Basic NDYwMjhjM2EtMWQ5Yi00NTAzLWIyNmUtZGZkZDRkMTY1NDlhOkVWSzQySnZ0dDRldVdHR3YzMlFEc1RqVw==" \
   -H "Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3"
 ```
 Request Headers:
@@ -19,7 +19,7 @@ Request Headers:
 Accept: application/json
 Content-Type: application/json
 User-Agent: net/hippie 0.1.9
-Authorization: Basic M2FjZTJlOTUtNGVkMS00YTQyLTlhOTItMDQ3ZjYzNmFiYzkxOjFHd0RSNTZtRDhlWWJzUDhzREhhN3licw==
+Authorization: Basic NDYwMjhjM2EtMWQ5Yi00NTAzLWIyNmUtZGZkZDRkMTY1NDlhOkVWSzQySnZ0dDRldVdHR3YzMlFEc1RqVw==
 Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3
 ```
 
@@ -28,8 +28,8 @@ Request Body:
 ```json
 {
   "grant_type": "authorization_code",
-  "code": "HEXtkEEGMKeZiimz3hYyxYmE",
-  "code_verifier": "0ba67177a9f4db0840ff74484d0f63010c109b375058f7c40a1fe04a1ceab3aeced10abaec39d6cef55656d607d9f1f0181c809ff7f81e7324b55068191baf0de68f014a982d5697b9deff56d2d94aa4cffc29cb1fd55ec3b9d9f76a7a62dc1f184492f00f48b9137bd5fca4555588f9286678e775cb60333f2e0c4c457b5ca5"
+  "code": "F7ZvTq5xDmwXUuiwCGB1Cazr",
+  "code_verifier": "0bbb49b4fc4ee55293480123d43da187a2cd9d70f47cd9f4653ac2914ce3531d81af10740996ffe4c186363ed1011348cdab65d783a2b27decd5b1525eef6faf4db15026c954cd0fcc4b5866a50606f985af81c7015dc94838087b97a9f46d2a70baabfa9087cab94fe95ea1c51ec0c113641d82bcfbd07290102e05f43866f9"
 }
 ```
 
@@ -45,9 +45,8 @@ Referrer-Policy: strict-origin-when-cross-origin
 Cache-Control: private, no-store
 Pragma: no-cache
 Content-Type: application/json; charset=utf-8
-Etag: W/"7fad1f5fa253eccbcae39a123d331314"
-Set-Cookie: _proof=9d40c2754b3144600736e1bb654de062; path=/; HttpOnly
-X-Request-Id: 3ee86f48-42bb-4ecd-a967-02b4c9f1685c
+Etag: W/"7230b35d05fc51e4470ddbfc91925802"
+X-Request-Id: 95368e0e-0e91-4835-ae68-d360c7589107
 Transfer-Encoding: chunked
 ```
 
@@ -55,10 +54,10 @@ Transfer-Encoding: chunked
 Response Body:
 ```json
 {
-  "access_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzE5MDIsImlhdCI6MTU0MDc2ODMwMiwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NjgzMDIsImF1ZCI6IjNhY2UyZTk1LTRlZDEtNGE0Mi05YTkyLTA0N2Y2MzZhYmM5MSIsImp0aSI6ImFkNDBkZjAzLTNiNzItNDYwNS04NmJiLTNiNTc5MTc0YWIxMyIsInN1YiI6IjFkODJiZjQyLWMzMDctNDMzOC1hM2MwLWQ2YjVhZGI0MDM2ZCIsInRva2VuX3R5cGUiOiJhY2Nlc3MifQ.TSGA5SBRqlhktMzHCm88xEVv_6gfL6QTfzTa2FqETM9b4iHoTymTudNn5xGzR-4YCJZOW8_IVx9U1Dizjc0hX3YffyQI89pdztuqHuLoW7CavEzuBQYhGKe_lpyS__tApMNtPm5_CcfC7sRYA0Jr0Sn7LKVqwKFVilIJgfxIFlKAQ4eC2dk2V9S6_G_MiUTHdQp7FUkCg5PSRLYlw9ORE3lyfLlP9_uBsZfm8gGvL70rJ3y5wNv44iKd6F6MTCIHH2dJSNXf_3R7K3GRGZCZRVr2NwYkj3uJyufPum2IFuTR8jcxX5BPcw3U_SGFPKyKzcsu47Qvr8Yl17RW7btOsQ",
+  "access_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzU0MzQsImlhdCI6MTU0MDc3MTgzNCwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NzE4MzQsImF1ZCI6IjQ2MDI4YzNhLTFkOWItNDUwMy1iMjZlLWRmZGQ0ZDE2NTQ5YSIsImp0aSI6IjUyZjBiMGI3LTlhYzYtNDUxMC04NWNkLTZlODU0MTdmMzE1NCIsInN1YiI6ImM3NmE4NmUxLTZhNGMtNDJkOC1iNjhlLWJhNDJmNjgxODgzYyIsInRva2VuX3R5cGUiOiJhY2Nlc3MifQ.XBnZYX-xA5M_waRzguIlrAEoTDFqrDTAoUDfTI9n1Q5rWSfhO91gPJA6sBYtYEKvLb13R06SP3Ufk8wJ3Yg3e3myfZLNtlrEJJHKJml98xGQpYpn3IxAjcU8UBt4xTi3P-QM_Pn4mnKjkZ8OgpLHzO2jk2-Y8dOxwm9Dgcs73RRUnJ317hjN46q-oa60ylRaWR_ZWt_4hiXcQ7VkwKZ9CVMeS1T8gebh1sRJSu0w4QIZH6qU8OAAkoelPT3eWzEGItBIGINs4QvngGawvIK4gNwI0Js7LMWv9IFLrGKRxiXBfnylpHeYXEle1tl1fZMEFBHHkkXTYHS5jrf9OTD7nQ",
   "token_type": "Bearer",
   "expires_in": 3600,
-  "refresh_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA4NTQ3MDIsImlhdCI6MTU0MDc2ODMwMiwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NjgzMDIsImF1ZCI6IjNhY2UyZTk1LTRlZDEtNGE0Mi05YTkyLTA0N2Y2MzZhYmM5MSIsImp0aSI6ImYwNmI2N2Y0LTc3MjItNGE4MS1iNWFlLWRmNjlhYjliMTM5OSIsInN1YiI6IjFkODJiZjQyLWMzMDctNDMzOC1hM2MwLWQ2YjVhZGI0MDM2ZCIsInRva2VuX3R5cGUiOiJyZWZyZXNoIn0.YFxAZHtgDhwcRX2wA6JS3ykOUQyUfIFQ1ftx6M5oBRA0TI314bqm2MxJa6jm0tcK83Egb9oIuZYFYSnDyO76edoc61NkRLGNMwTJfhigtgBFQOb1MgkFNnqQ05U3DzOKLF_Z6u7wIFBPYvkjTlL6UlJ9qUROdmnDQrmDd3dx6ENTg252X2ELD70Z9HbWtpmUtEydT_U53i-xJSmW74DpYgOSGyd5XQU22nGoVgwvcCPy5UcOIvE5HINGp8Jj-KBGNFs7duFOYUezunqXon1pFjCj5WeK_SZ5lZHcKZPE0pY-K7Hoa-8FFi6ufOKdP6TuBdV-bKcJOsqpYp7XtHuCFg"
+  "refresh_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA4NTgyMzQsImlhdCI6MTU0MDc3MTgzNCwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3QvbWV0YWRhdGEiLCJuYmYiOjE1NDA3NzE4MzQsImF1ZCI6IjQ2MDI4YzNhLTFkOWItNDUwMy1iMjZlLWRmZGQ0ZDE2NTQ5YSIsImp0aSI6ImViNDdkM2Y1LTk0ZTgtNGU3MS1hYjMzLTc2Mzc0MmU1MjUzYSIsInN1YiI6ImM3NmE4NmUxLTZhNGMtNDJkOC1iNjhlLWJhNDJmNjgxODgzYyIsInRva2VuX3R5cGUiOiJyZWZyZXNoIn0.lNEvTFEc7hs5pR6TxjDcOxyCOXMlNC6gQ6a2N1SbNbRwhSAYd0guslRsMza8GiAKqGhy3uhOm2STAeY2adfW3Z9MabE38mRABRvQMxW19asHz191iLrLeeFabfkI3wBDR7XKU0ZIMD6rU_doTsKzAWzfMuDLUtM4qkDrbn1xxVfFNL0Xg3VGy1OCfXycqQK3cII7z1-cSuj920CZcovL4NfRgugrpQEyKmFuaKUtiGC8vRQu6JsoEqhGK9c1-Ub8GdveTNxmzRRMQQBn78JjGswGdlvjde4TtwvwMZ4eGkCXcVADfyAvu6YfZEtq4YZHGyWZlx5GjGMgsZLQOT-oRw"
 }
 ```
doc/_includes/oauth-tokens-refresh-token.html
@@ -6,11 +6,11 @@ Example curl request:
 ```bash
 $ curl http://localhost:5000/oauth/tokens \
   -X POST \
-  -d '{"grant_type":"refresh_token","refresh_token":"eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzE5MDEsImlhdCI6MTU0MDc2ODMwMiwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3Q6NTAwMC9tZXRhZGF0YSIsIm5iZiI6MTU0MDc2ODMwMiwiYXVkIjoiYzhmYWY5MzgtMWQ4ZS00NjcyLWIyZWQtMDA1ZGIzYmYxYTkzIiwianRpIjoiZmJjMDdiNTctYmUwMC00YzJmLWI3MTYtOTYxMTNhNzUxZGFhIiwic3ViIjoiZmQ4NzRhMmMtOTc1Zi00NDczLTlhNjktYmJmYWFiMDk0N2ZmIiwidG9rZW5fdHlwZSI6InJlZnJlc2gifQ.gxiXz5Pm1lWH7zTf1jvCAILiOn8PUURWlkrKvewbOtG8TdSwO1S_i4NXSZePZe5etGOhhxUipb9vz8gLSp3yZzmh5hDdo9naHYmQoZQc4Vy8ae2reZ-OLCyG170butwjIvu0sTW3uQC4Do-zDGmpXk_fvd7hRvbOzup_RJa48stIcuW_l6n0ec6xQgzxlIfK5lZ6MTl9BXmyc5I-i1bAYv9m5TJPqVaxfUMdaTt_RZ290NAcx75TR-0N2lgNXDYlgbW7m6MQBxUrGp2MjHf5CPQUQjKEFXYy_OX6uMGAGBaBSr1WaPLwFaoeE3YWdURLjdiGua1Iu_GLWi8emMf0ZQ"}' \
+  -d '{"grant_type":"refresh_token","refresh_token":"eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzU0MzMsImlhdCI6MTU0MDc3MTgzMywiaXNzIjoiaHR0cDovL3Byb29mLnRlc3Q6NTAwMC9tZXRhZGF0YSIsIm5iZiI6MTU0MDc3MTgzMywiYXVkIjoiZTkyZGU4NWMtNTRmNS00ZjZlLThlMDctNTk3Yjk2NzIxZTcxIiwianRpIjoiNThkNGMyNDYtY2E2OS00NGI4LWFlZGItYWQ1OTllMGFlZThmIiwic3ViIjoiNjdhNTdkYmUtZDBiNi00NTRmLWJkNDItM2RkZGRhZjI0NGU0IiwidG9rZW5fdHlwZSI6InJlZnJlc2gifQ.fumbi37MVl7eBJynebuYc0M-y1ebboS_iRDmmOiM17QQlAfZwBwpGGEHgrs5S_8r3bEaJBhnOC37dQLDE0d0Wtr52vW848E1JuyOgi7_8zowuPck5R8CMqxo318xLlfWD7fZ5Tq8BQsOMoCbGVnBoCm-Au4PPeHonhBa7dwFQM-GobzRYGP5FqiKfqh9ofb6cRhp7WVRyc-aqbq_HgQAB9LVA5JeVLMvPvW0TN2ViUKhzbPGreiypbauhKGM5m_8AIZ57b6Afr05e0y4XDeW61xi_d3sr-K5pVYjObv3Rqf9G_xCb-zXV1G7N3PyWqaV4M7RslutJkinM2NKlUXENA"}' \
   -H "Accept: application/json" \
   -H "Content-Type: application/json" \
   -H "User-Agent: net/hippie 0.1.9" \
-  -H "Authorization: Basic YzhmYWY5MzgtMWQ4ZS00NjcyLWIyZWQtMDA1ZGIzYmYxYTkzOlJmWjNubW5jV0RZdmFDRkxjOTdpcjhWSw==" \
+  -H "Authorization: Basic ZTkyZGU4NWMtNTRmNS00ZjZlLThlMDctNTk3Yjk2NzIxZTcxOlZUNktnWDV0azlkVW1yVllhOHdLOVhnWA==" \
   -H "Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3"
 ```
 Request Headers:
@@ -19,7 +19,7 @@ Request Headers:
 Accept: application/json
 Content-Type: application/json
 User-Agent: net/hippie 0.1.9
-Authorization: Basic YzhmYWY5MzgtMWQ4ZS00NjcyLWIyZWQtMDA1ZGIzYmYxYTkzOlJmWjNubW5jV0RZdmFDRkxjOTdpcjhWSw==
+Authorization: Basic ZTkyZGU4NWMtNTRmNS00ZjZlLThlMDctNTk3Yjk2NzIxZTcxOlZUNktnWDV0azlkVW1yVllhOHdLOVhnWA==
 Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3
 ```
 
@@ -28,7 +28,7 @@ Request Body:
 ```json
 {
   "grant_type": "refresh_token",
-  "refresh_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzE5MDEsImlhdCI6MTU0MDc2ODMwMiwiaXNzIjoiaHR0cDovL3Byb29mLnRlc3Q6NTAwMC9tZXRhZGF0YSIsIm5iZiI6MTU0MDc2ODMwMiwiYXVkIjoiYzhmYWY5MzgtMWQ4ZS00NjcyLWIyZWQtMDA1ZGIzYmYxYTkzIiwianRpIjoiZmJjMDdiNTctYmUwMC00YzJmLWI3MTYtOTYxMTNhNzUxZGFhIiwic3ViIjoiZmQ4NzRhMmMtOTc1Zi00NDczLTlhNjktYmJmYWFiMDk0N2ZmIiwidG9rZW5fdHlwZSI6InJlZnJlc2gifQ.gxiXz5Pm1lWH7zTf1jvCAILiOn8PUURWlkrKvewbOtG8TdSwO1S_i4NXSZePZe5etGOhhxUipb9vz8gLSp3yZzmh5hDdo9naHYmQoZQc4Vy8ae2reZ-OLCyG170butwjIvu0sTW3uQC4Do-zDGmpXk_fvd7hRvbOzup_RJa48stIcuW_l6n0ec6xQgzxlIfK5lZ6MTl9BXmyc5I-i1bAYv9m5TJPqVaxfUMdaTt_RZ290NAcx75TR-0N2lgNXDYlgbW7m6MQBxUrGp2MjHf5CPQUQjKEFXYy_OX6uMGAGBaBSr1WaPLwFaoeE3YWdURLjdiGua1Iu_GLWi8emMf0ZQ"
+  "refresh_token": "eyJhbGciOiJSUzI1NiJ9.eyJleHAiOjE1NDA3NzU0MzMsImlhdCI6MTU0MDc3MTgzMywiaXNzIjoiaHR0cDovL3Byb29mLnRlc3Q6NTAwMC9tZXRhZGF0YSIsIm5iZiI6MTU0MDc3MTgzMywiYXVkIjoiZTkyZGU4NWMtNTRmNS00ZjZlLThlMDctNTk3Yjk2NzIxZTcxIiwianRpIjoiNThkNGMyNDYtY2E2OS00NGI4LWFlZGItYWQ1OTllMGFlZThmIiwic3ViIjoiNjdhNTdkYmUtZDBiNi00NTRmLWJkNDItM2RkZGRhZjI0NGU0IiwidG9rZW5fdHlwZSI6InJlZnJlc2gifQ.fumbi37MVl7eBJynebuYc0M-y1ebboS_iRDmmOiM17QQlAfZwBwpGGEHgrs5S_8r3bEaJBhnOC37dQLDE0d0Wtr52vW848E1JuyOgi7_8zowuPck5R8CMqxo318xLlfWD7fZ5Tq8BQsOMoCbGVnBoCm-Au4PPeHonhBa7dwFQM-GobzRYGP5FqiKfqh9ofb6cRhp7WVRyc-aqbq_HgQAB9LVA5JeVLMvPvW0TN2ViUKhzbPGreiypbauhKGM5m_8AIZ57b6Afr05e0y4XDeW61xi_d3sr-K5pVYjObv3Rqf9G_xCb-zXV1G7N3PyWqaV4M7RslutJkinM2NKlUXENA"
 }
 ```
 
@@ -44,8 +44,7 @@ Referrer-Policy: strict-origin-when-cross-origin
 Cache-Control: private, no-store
 Pragma: no-cache
 Content-Type: application/json; charset=utf-8
-Set-Cookie: _proof=732cb946d3430a4209a4dd670d7c4581; path=/; HttpOnly
-X-Request-Id: 3ad01af9-ffcd-439b-bffc-0baf7125e0bd
+X-Request-Id: ef3f64a7-4477-4fa7-b98f-ddb8973b321a
 Transfer-Encoding: chunked
 ```
doc/_includes/oauth-tokens-saml-assertion.html
@@ -6,11 +6,11 @@ Example curl request:
 ```bash
 $ curl http://localhost:5000/oauth/tokens \
   -X POST \
-  -d '{"grant_type":"urn:ietf:params:oauth:grant-type:saml2-bearer","assertion":"PEFzc2VydGlvbiB4bWxucz0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9Il83OGJiOTA0Yi01ZTNiLTQ1ZmUtYTAwMi01MzIyZjhhZmQwYTgiIElzc3VlSW5zdGFudD0iMjAxOC0xMC0yOFQyMzoxMTo0MVoiIFZlcnNpb249IjIuMCI-PElzc3Vlcj5odHRwOi8vcHJvb2YudGVzdDo1MDAwL21ldGFkYXRhPC9Jc3N1ZXI-PFNpZ25hdHVyZSB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI-PFNpZ25lZEluZm8-PENhbm9uaWNhbGl6YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz48U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxkc2lnLW1vcmUjcnNhLXNoYTI1NiIvPjxSZWZlcmVuY2UgVVJJPSIjXzc4YmI5MDRiLTVlM2ItNDVmZS1hMDAyLTUzMjJmOGFmZDBhOCI-PFRyYW5zZm9ybXM-PFRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8-PFRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvVHJhbnNmb3Jtcz48RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMjc2hhMjU2Ii8-PERpZ2VzdFZhbHVlPlBiRTRieVdzRzlpVjRTZi9UdG5LKzYrTkFCTmpGaUprSUFlamN2dUo5NXc9PC9EaWdlc3RWYWx1ZT48L1JlZmVyZW5jZT48L1NpZ25lZEluZm8-PFNpZ25hdHVyZVZhbHVlPmdsbFNiRllKdlpBeTdtbHBCMzJrRENzMFNtS0FreDF1cXdqM1NrSFI5MWpOSWdteTUzQkNyUFp6Z3BoQzQwQnFpdzZMbTF2eHBNa2ZEZ2F6QXBkTWpLM09mbkUya3VEQ1JtRDJQL3ZFK3hVOElaZlplZ1U5VnB2Y0h2MllHRkZyWnlId21FSU1TclVkNFYwNEJuOENkQjdtVjdhc3ZkKzZRRUFYNUIrY1RrOG9keHlBM3l1M0cycm9LRmsrL0NLenh0dVJVY3k3WjRUV3RhUUtUNncvclZBU1BsaHRrUkpxUnVkS1A1RFBqVEhxQ3FadFdlSGkrbVZueWpLWHhGN2hYOW1BblgyaTdpZlpjMXcxSEpWaVNPTE56R1ZPcGMvekdnUWJibGdiZDNzM2ZHSGxmeENYWm5jcTdGMFlPZ1dYQUxRL3M0TXRzRnBLWVMxV09LNFR1dz09PC9TaWduYXR1cmVWYWx1ZT48S2V5SW5mbz48WDUwOURhdGE-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-PC9TdWJqZWN0PjxDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxOC0xMC0yOFQyMzoxMTo0MVoiIE5vdE9uT3JBZnRlcj0iMjAxOC0xMC0yOVQwMjoxMTo0MVoiPjxBdWRpZW5jZVJlc3RyaWN0aW9uPjxBdWRpZW5jZT5odHRwOi8vcHJvb2YudGVzdDo1MDAwL21ldGFkYXRhPC9BdWRpZW5jZT48L0F1ZGllbmNlUmVzdHJpY3Rpb24-PC9Db25kaXRpb25zPjxBdXRoblN0YXRlbWVudCBBdXRobkluc3RhbnQ9IjIwMTgtMTAtMjhUMjM6MTE6NDFaIiBTZXNzaW9uSW5kZXg9Il83OGJiOTA0Yi01ZTNiLTQ1ZmUtYTAwMi01MzIyZjhhZmQwYTgiPjxBdXRobkNvbnRleHQ-PEF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9BdXRobkNvbnRleHRDbGFzc1JlZj48L0F1dGhuQ29udGV4dD48L0F1dGhuU3RhdGVtZW50PjxBdHRyaWJ1dGVTdGF0ZW1lbnQ-PEF0dHJpYnV0ZSBOYW1lPSJpZCI-PEF0dHJpYnV0ZVZhbHVlPjJmODAzMDc2LTNhOWItNDcxMS04NmNmLWI5YzBhNTQ2MmFmZjwvQXR0cmlidXRlVmFsdWU-PC9BdHRyaWJ1dGU-PEF0dHJpYnV0ZSBOYW1lPSJlbWFpbCI-PEF0dHJpYnV0ZVZhbHVlPnBoZWJlQGhlcnpvZ2RlY2tvdy5jb208L0F0dHJpYnV0ZVZhbHVlPjwvQXR0cmlidXRlPjxBdHRyaWJ1dGUgTmFtZT0iY3JlYXRlZF9hdCI-PEF0dHJpYnV0ZVZhbHVlPjIwMTgtMTAtMjggMjM6MTE6NDEgVVRDPC9BdHRyaWJ1dGVWYWx1ZT48L0F0dHJpYnV0ZT48L0F0dHJpYnV0ZVN0YXRlbWVudD48L0Fzc2VydGlvbj4K"}' \
+  -d '{"grant_type":"urn:ietf:params:oauth:grant-type:saml2-bearer","assertion":"PEFzc2VydGlvbiB4bWxucz0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9Il85ODQ1ZjRhNS00ODZhLTQ2ZjgtYTZjZS1hNDY5YzdmMGNhNjEiIElzc3VlSW5zdGFudD0iMjAxOC0xMC0yOVQwMDoxMDozM1oiIFZlcnNpb249IjIuMCI-PElzc3Vlcj5odHRwOi8vcHJvb2YudGVzdDo1MDAwL21ldGFkYXRhPC9Jc3N1ZXI-PFNpZ25hdHVyZSB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI-PFNpZ25lZEluZm8-PENhbm9uaWNhbGl6YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz48U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxkc2lnLW1vcmUjcnNhLXNoYTI1NiIvPjxSZWZlcmVuY2UgVVJJPSIjXzk4NDVmNGE1LTQ4NmEtNDZmOC1hNmNlLWE0NjljN2YwY2E2MSI-PFRyYW5zZm9ybXM-PFRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8-PFRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvVHJhbnNmb3Jtcz48RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMjc2hhMjU2Ii8-PERpZ2VzdFZhbHVlPjJHb3VlYXoza2V2cGtxek1pN0RCQU9YN0JhNnJrZE1KRTNlRTBRN1ZtcTQ9PC9EaWdlc3RWYWx1ZT48L1JlZmVyZW5jZT48L1NpZ25lZEluZm8-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-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-PFN1YmplY3RDb25maXJtYXRpb25EYXRhIEluUmVzcG9uc2VUbz0iX2UwOThiYTEwLTk3ODktNDNmYy05NmI0LWY2N2RmNjA3N2QwMiIgTm90T25PckFmdGVyPSIyMDE4LTEwLTI5VDAwOjE1OjMzWiIvPjwvU3ViamVjdENvbmZpcm1hdGlvbj48L1N1YmplY3Q-PENvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDE4LTEwLTI5VDAwOjEwOjMzWiIgTm90T25PckFmdGVyPSIyMDE4LTEwLTI5VDAzOjEwOjMzWiI-PEF1ZGllbmNlUmVzdHJpY3Rpb24-PEF1ZGllbmNlPmh0dHA6Ly9wcm9vZi50ZXN0OjUwMDAvbWV0YWRhdGE8L0F1ZGllbmNlPjwvQXVkaWVuY2VSZXN0cmljdGlvbj48L0NvbmRpdGlvbnM-PEF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxOC0xMC0yOVQwMDoxMDozM1oiIFNlc3Npb25JbmRleD0iXzk4NDVmNGE1LTQ4NmEtNDZmOC1hNmNlLWE0NjljN2YwY2E2MSI-PEF1dGhuQ29udGV4dD48QXV0aG5Db250ZXh0Q2xhc3NSZWY-dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6UGFzc3dvcmQ8L0F1dGhuQ29udGV4dENsYXNzUmVmPjwvQXV0aG5Db250ZXh0PjwvQXV0aG5TdGF0ZW1lbnQ-PEF0dHJpYnV0ZVN0YXRlbWVudD48QXR0cmlidXRlIE5hbWU9ImlkIj48QXR0cmlidXRlVmFsdWU-Y2Q1MDU2YzItNjMwMy00OTFiLWE2MWQtYTc2MDU1MjhhOTQ4PC9BdHRyaWJ1dGVWYWx1ZT48L0F0dHJpYnV0ZT48QXR0cmlidXRlIE5hbWU9ImVtYWlsIj48QXR0cmlidXRlVmFsdWU-ZWxhbmVfc21pdGhhbUBoYW1pbGxmcmFtaS5uYW1lPC9BdHRyaWJ1dGVWYWx1ZT48L0F0dHJpYnV0ZT48QXR0cmlidXRlIE5hbWU9ImNyZWF0ZWRfYXQiPjxBdHRyaWJ1dGVWYWx1ZT4yMDE4LTEwLTI5IDAwOjEwOjMzIFVUQzwvQXR0cmlidXRlVmFsdWU-PC9BdHRyaWJ1dGU-PC9BdHRyaWJ1dGVTdGF0ZW1lbnQ-PC9Bc3NlcnRpb24-Cg=="}' \
   -H "Accept: application/json" \
   -H "Content-Type: application/json" \
   -H "User-Agent: net/hippie 0.1.9" \
-  -H "Authorization: Basic MzQ4ZDBjYjgtMTJiMS00Y2M0LTg4M2MtYmQ1YWZjZGJmYTUxOjhDZTg3ZXBWS1hQTlV3ZGRlVlpuTWt1ag==" \
+  -H "Authorization: Basic NmM2ZWZkNzQtN2E3ZS00ODE5LWE5ZjktYjlmNzQ4NzIzYWUxOlJtdWhTSDFIaHZzVjd4YWtCam9lWWhTOQ==" \
   -H "Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3"
 ```
 Request Headers:
@@ -19,7 +19,7 @@ Request Headers:
 Accept: application/json
 Content-Type: application/json
 User-Agent: net/hippie 0.1.9
-Authorization: Basic MzQ4ZDBjYjgtMTJiMS00Y2M0LTg4M2MtYmQ1YWZjZGJmYTUxOjhDZTg3ZXBWS1hQTlV3ZGRlVlpuTWt1ag==
+Authorization: Basic NmM2ZWZkNzQtN2E3ZS00ODE5LWE5ZjktYjlmNzQ4NzIzYWUxOlJtdWhTSDFIaHZzVjd4YWtCam9lWWhTOQ==
 Accept-Encoding: gzip;q=1.0,deflate;q=0.6,identity;q=0.3
 ```
 
@@ -28,7 +28,7 @@ Request Body:
 ```json
 {
   "grant_type": "urn:ietf:params:oauth:grant-type:saml2-bearer",
-  "assertion": "PEFzc2VydGlvbiB4bWxucz0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9Il83OGJiOTA0Yi01ZTNiLTQ1ZmUtYTAwMi01MzIyZjhhZmQwYTgiIElzc3VlSW5zdGFudD0iMjAxOC0xMC0yOFQyMzoxMTo0MVoiIFZlcnNpb249IjIuMCI-PElzc3Vlcj5odHRwOi8vcHJvb2YudGVzdDo1MDAwL21ldGFkYXRhPC9Jc3N1ZXI-PFNpZ25hdHVyZSB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI-PFNpZ25lZEluZm8-PENhbm9uaWNhbGl6YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz48U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxkc2lnLW1vcmUjcnNhLXNoYTI1NiIvPjxSZWZlcmVuY2UgVVJJPSIjXzc4YmI5MDRiLTVlM2ItNDVmZS1hMDAyLTUzMjJmOGFmZDBhOCI-PFRyYW5zZm9ybXM-PFRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8-PFRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvVHJhbnNmb3Jtcz48RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMjc2hhMjU2Ii8-PERpZ2VzdFZhbHVlPlBiRTRieVdzRzlpVjRTZi9UdG5LKzYrTkFCTmpGaUprSUFlamN2dUo5NXc9PC9EaWdlc3RWYWx1ZT48L1JlZmVyZW5jZT48L1NpZ25lZEluZm8-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-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-PC9TdWJqZWN0PjxDb25kaXRpb25zIE5vdEJlZm9yZT0iMjAxOC0xMC0yOFQyMzoxMTo0MVoiIE5vdE9uT3JBZnRlcj0iMjAxOC0xMC0yOVQwMjoxMTo0MVoiPjxBdWRpZW5jZVJlc3RyaWN0aW9uPjxBdWRpZW5jZT5odHRwOi8vcHJvb2YudGVzdDo1MDAwL21ldGFkYXRhPC9BdWRpZW5jZT48L0F1ZGllbmNlUmVzdHJpY3Rpb24-PC9Db25kaXRpb25zPjxBdXRoblN0YXRlbWVudCBBdXRobkluc3RhbnQ9IjIwMTgtMTAtMjhUMjM6MTE6NDFaIiBTZXNzaW9uSW5kZXg9Il83OGJiOTA0Yi01ZTNiLTQ1ZmUtYTAwMi01MzIyZjhhZmQwYTgiPjxBdXRobkNvbnRleHQ-PEF1dGhuQ29udGV4dENsYXNzUmVmPnVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphYzpjbGFzc2VzOlBhc3N3b3JkPC9BdXRobkNvbnRleHRDbGFzc1JlZj48L0F1dGhuQ29udGV4dD48L0F1dGhuU3RhdGVtZW50PjxBdHRyaWJ1dGVTdGF0ZW1lbnQ-PEF0dHJpYnV0ZSBOYW1lPSJpZCI-PEF0dHJpYnV0ZVZhbHVlPjJmODAzMDc2LTNhOWItNDcxMS04NmNmLWI5YzBhNTQ2MmFmZjwvQXR0cmlidXRlVmFsdWU-PC9BdHRyaWJ1dGU-PEF0dHJpYnV0ZSBOYW1lPSJlbWFpbCI-PEF0dHJpYnV0ZVZhbHVlPnBoZWJlQGhlcnpvZ2RlY2tvdy5jb208L0F0dHJpYnV0ZVZhbHVlPjwvQXR0cmlidXRlPjxBdHRyaWJ1dGUgTmFtZT0iY3JlYXRlZF9hdCI-PEF0dHJpYnV0ZVZhbHVlPjIwMTgtMTAtMjggMjM6MTE6NDEgVVRDPC9BdHRyaWJ1dGVWYWx1ZT48L0F0dHJpYnV0ZT48L0F0dHJpYnV0ZVN0YXRlbWVudD48L0Fzc2VydGlvbj4K"
+  "assertion": "PEFzc2VydGlvbiB4bWxucz0idXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFzc2VydGlvbiIgSUQ9Il85ODQ1ZjRhNS00ODZhLTQ2ZjgtYTZjZS1hNDY5YzdmMGNhNjEiIElzc3VlSW5zdGFudD0iMjAxOC0xMC0yOVQwMDoxMDozM1oiIFZlcnNpb249IjIuMCI-PElzc3Vlcj5odHRwOi8vcHJvb2YudGVzdDo1MDAwL21ldGFkYXRhPC9Jc3N1ZXI-PFNpZ25hdHVyZSB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnIyI-PFNpZ25lZEluZm8-PENhbm9uaWNhbGl6YXRpb25NZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzEwL3htbC1leGMtYzE0biMiLz48U2lnbmF0dXJlTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxkc2lnLW1vcmUjcnNhLXNoYTI1NiIvPjxSZWZlcmVuY2UgVVJJPSIjXzk4NDVmNGE1LTQ4NmEtNDZmOC1hNmNlLWE0NjljN2YwY2E2MSI-PFRyYW5zZm9ybXM-PFRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvMDkveG1sZHNpZyNlbnZlbG9wZWQtc2lnbmF0dXJlIi8-PFRyYW5zZm9ybSBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMTAveG1sLWV4Yy1jMTRuIyIvPjwvVHJhbnNmb3Jtcz48RGlnZXN0TWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8wNC94bWxlbmMjc2hhMjU2Ii8-PERpZ2VzdFZhbHVlPjJHb3VlYXoza2V2cGtxek1pN0RCQU9YN0JhNnJrZE1KRTNlRTBRN1ZtcTQ9PC9EaWdlc3RWYWx1ZT48L1JlZmVyZW5jZT48L1NpZ25lZEluZm8-PFNpZ25hdHVyZVZhbHVlPk9CR2NVSEFMZlVLdXhxTmdDTnljTkxrTWI3dVBiNkpjb08xOGo0U3lRRGNFNmRhdnhodFdDK0Q3YURmV1k4SktGZUh4MTEwZmdCeHFIUlpCV3M3KzBqWCtiT1dDVk8wYmNMOVNNMkRHVGtHV3hDVDh6Q04wcVlBRTQ0QW9RRkU3bUtoaUZuTXNqM2EyTTRLYzBNZGMrbjBxb2JDL3NSUXhRZmRXOThBUm9tbW1MQkhIUHBhdzlJTzB3MkJISXc1NnQ4VVc2dCtFL3owRWJvUlBUZWtPM2JMY1FSeFFRQXF3Y2lJT3ZKM2NLSmw5NWRZSll2aExDZjBCdGpONTUxRUhvMXliM3RoM0g1S3pVcTNZWFFOa0VLSms2dUFOV01WbmZWY0c0MEFqdGJoQllNaktSZ2pqbERQZGExRkhyV0hKSzBKcUFmU1FZWHhhYmYvMCtzZjY0dz09PC9TaWduYXR1cmVWYWx1ZT48S2V5SW5mbz48WDUwOURhdGE-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-PFN1YmplY3RDb25maXJtYXRpb25EYXRhIEluUmVzcG9uc2VUbz0iX2UwOThiYTEwLTk3ODktNDNmYy05NmI0LWY2N2RmNjA3N2QwMiIgTm90T25PckFmdGVyPSIyMDE4LTEwLTI5VDAwOjE1OjMzWiIvPjwvU3ViamVjdENvbmZpcm1hdGlvbj48L1N1YmplY3Q-PENvbmRpdGlvbnMgTm90QmVmb3JlPSIyMDE4LTEwLTI5VDAwOjEwOjMzWiIgTm90T25PckFmdGVyPSIyMDE4LTEwLTI5VDAzOjEwOjMzWiI-PEF1ZGllbmNlUmVzdHJpY3Rpb24-PEF1ZGllbmNlPmh0dHA6Ly9wcm9vZi50ZXN0OjUwMDAvbWV0YWRhdGE8L0F1ZGllbmNlPjwvQXVkaWVuY2VSZXN0cmljdGlvbj48L0NvbmRpdGlvbnM-PEF1dGhuU3RhdGVtZW50IEF1dGhuSW5zdGFudD0iMjAxOC0xMC0yOVQwMDoxMDozM1oiIFNlc3Npb25JbmRleD0iXzk4NDVmNGE1LTQ4NmEtNDZmOC1hNmNlLWE0NjljN2YwY2E2MSI-PEF1dGhuQ29udGV4dD48QXV0aG5Db250ZXh0Q2xhc3NSZWY-dXJuOm9hc2lzOm5hbWVzOnRjOlNBTUw6Mi4wOmFjOmNsYXNzZXM6UGFzc3dvcmQ8L0F1dGhuQ29udGV4dENsYXNzUmVmPjwvQXV0aG5Db250ZXh0PjwvQXV0aG5TdGF0ZW1lbnQ-PEF0dHJpYnV0ZVN0YXRlbWVudD48QXR0cmlidXRlIE5hbWU9ImlkIj48QXR0cmlidXRlVmFsdWU-Y2Q1MDU2YzItNjMwMy00OTFiLWE2MWQtYTc2MDU1MjhhOTQ4PC9BdHRyaWJ1dGVWYWx1ZT48L0F0dHJpYnV0ZT48QXR0cmlidXRlIE5hbWU9ImVtYWlsIj48QXR0cmlidXRlVmFsdWU-ZWxhbmVfc21pdGhhbUBoYW1pbGxmcmFtaS5uYW1lPC9BdHRyaWJ1dGVWYWx1ZT48L0F0dHJpYnV0ZT48QXR0cmlidXRlIE5hbWU9ImNyZWF0ZWRfYXQiPjxBdHRyaWJ1dGVWYWx1ZT4yMDE4LTEwLTI5IDAwOjEwOjMzIFVUQzwvQXR0cmlidXRlVmFsdWU-PC9BdHRyaWJ1dGU-PC9BdHRyaWJ1dGVTdGF0ZW1lbnQ-PC9Bc3NlcnRpb24-Cg=="
 }
 ```
 
@@ -44,8 +44,7 @@ Referrer-Policy: strict-origin-when-cross-origin
 Cache-Control: private, no-store
 Pragma: no-cache
 Content-Type: application/json; charset=utf-8
-Set-Cookie: _proof=390dcb577667a90ea5a2933886c8ba49; path=/; HttpOnly
-X-Request-Id: c78b67f0-e316-441a-91a7-c2841350083f
+X-Request-Id: 3539c29d-1bd4-48bc-9d3a-93ab980b1313
 Transfer-Encoding: chunked
 ```
doc/_includes/scim-service-provider-config.html
@@ -32,9 +32,9 @@ X-Download-Options: noopen
 X-Permitted-Cross-Domain-Policies: none
 Referrer-Policy: strict-origin-when-cross-origin
 Content-Type: application/scim+json
-Etag: W/"28bdb10ddd3524e25b3e3bd44a5b8169"
+Etag: W/"61bf20baa70ec24e9a207c4db0b71ef7"
 Cache-Control: max-age=0, private, must-revalidate
-X-Request-Id: e6ab9b01-0f92-48a6-9fa0-c304edbf8311
+X-Request-Id: 6e8006e7-3b28-4d73-905e-5ccdb6e49ec6
 Transfer-Encoding: chunked
 ```
 
@@ -79,8 +79,8 @@ Response Body:
   ],
   "meta": {
     "resourceType": "ServiceProviderConfig",
-    "created": "2018-10-28T23:11:42Z",
-    "lastModified": "2018-10-28T23:11:42Z",
+    "created": "2018-10-29T00:10:34Z",
+    "lastModified": "2018-10-29T00:10:34Z",
     "location": "http://localhost:5000/scim/v2/ServiceProviderConfig",
     "version": 1
   }
spec/requests/oauth/clients_spec.rb
@@ -23,6 +23,7 @@ RSpec.describe "/oauth/clients" do
       end
 
       specify { expect(response).to have_http_status(:created) }
+      specify { expect(response.headers['Set-Cookie']).to be_nil }
       specify { expect(response.headers['Content-Type']).to include("application/json") }
       specify { expect(response.headers['Cache-Control']).to include("no-store") }
       specify { expect(response.headers['Pragma']).to eql("no-cache") }
spec/requests/oauth/tokens_spec.rb
@@ -311,6 +311,7 @@ RSpec.describe '/oauth/tokens' do
 
       specify { expect(response).to have_http_status(:ok) }
       specify { expect(response['Content-Type']).to include('application/json') }
+      specify { expect(response.headers['Set-Cookie']).to be_nil }
       specify { expect(json[:active]).to be(true) }
       specify { expect(json[:sub]).to eql(token.claims[:sub]) }
       specify { expect(json[:aud]).to eql(token.claims[:aud]) }