Is your feature request related to a problem? Please describe.

When Hydra receives a request with a token that is no longer valid, it logs an error with what appears to be debug output:

{"debug":"Token is expired","description":"Token expired","error":"token_expired","hint":"The token expired.","level":"error","msg":"An error occurred","time":"2020-08-28T20:14:40Z"}

At high lo

Is your feature request related to a problem? Please describe.

The public key-based request signing functionality added to sso_proxy in buzzfeed/sso#106 is undocumented. In particular, it's not immediately obvious how to a) generate an appropriate keypair or b) validate a signed request in an upstream service.

Describe the solution you'd like

New documenta

Describe the bug

I think this is a similar problem than what was already reported in ory/fosite#434, but elsewhere in the code. I believe all calls to url.QueryUnescape should be removed from the code. Go already escapes all query/form parameters automatically and unescaping again can just break things.

Example:

func GetRedirectURIFromRequestValues(value

Not seeing how I'd be able to do that. the step certificate create -csr seems to expect to create a new private key