scopes_supported is not required by OpenID spec

[radicand]

In https://github.com/4D-Technologies/openidconnect_flutter/blob/main/openidconnect/lib/src/config/openidconfiguration.dart#L71-L72 there is an unchecked assumption scopes_supported will be present in the discovery document. I use an IDP which does not have this, and per the RFC spec, while recommended, it is not required: https://www.rfc-editor.org/rfc/rfc8414#section-2 . Could there be a conditional check for this field similar to how other fields are conditionally checked?

[jhancock4d]

Note that OAuth 2.0 is not OpenIdConnect. (it's as subset that is older than OpenIdConnect)

Do you have a reference to the OpenIdConnect relevant RFCs on this? Looks to me like it was changed to required along with claims_supported.

[radicand]

Thanks for following up - it's the same RECOMMENDED in the OpenID Connect spec: https://openid.net/specs/openid-connect-discovery-1_0.html

[jhancock4d]

See #20 . Trying to merge it all as one.