OIDC 1.0 extension

[Jim Fox]

I have the github version as this morning.  It shows version 1.0

1) Your pom.xml uses versions 3.4.0 of shib and opensaml.  I think it 
should be 3.4.3 and 3.4.2

2) Possibly I misunderstand sending a complex acr request.  But if I send a json acr_values request, e.g., under log entry for "Inbound request GET"

    Parameters:
         scope:openid profile email
         acr_values:{"id_token":{"acr": {"essential": true,"value": "https://refeds.org/profile/mfa"}}}
         response_type:code

That is treated as simple text and the 4 'text' values are added to the principal context.
If non-essentual they are put into the preferred principal context and are ignored and no harm.  However, if essentual these are put into the requested principal context and obviously cause a failed login.


Is my syntax correct for the acr_values parameter?  If not, what is?


Otherwise it works well.

Thanks,

Jim