Update dependency oauthlib to v3.2.0

This MR contains the following updates:

Package	Type	Update	Change
oauthlib	ironbank-pypi	minor	3.1.0 -> 3.2.0

---

Release Notes

oauthlib/oauthlib

v3.2.0

Compare Source

OAuth2.0 Client:

• #​795: Add Device Authorization Flow for Web Application
• #​786: Add PKCE support for Client
• #​783: Fallback to none in case of wrong expires_at format.

OAuth2.0 Provider:

• #​790: Add support for CORS to metadata endpoint.
• #​791: Add support for CORS to token endpoint.
• #​787: Remove comma after Bearer in WWW-Authenticate

OAuth2.0 Provider - OIDC:

• #​755: Call save_token in Hybrid code flow
• #​751: OIDC add support of refreshing ID Tokens with refresh_id_token
• #​751: The RefreshTokenGrant modifiers now take the same arguments as the AuthorizationCodeGrant modifiers (token, token_handler, request).

General:

• Added Python 3.9, 3.10, 3.11
• Improve Travis & Coverage

v3.1.1

Compare Source

OAuth2.0 Provider - Bugfixes

• #​753: Fix acceptance of valid IPv6 addresses in URI validation

OAuth2.0 Client - Bugfixes

• #​730: Base OAuth2 Client now has a consistent way of managing the scope: it consistently relies on the scope provided in the constructor if any, except if overridden temporarily in a method call. Note that in particular providing a non-None scope in prepare_authorization_request or prepare_refresh_token does not override anymore self.scope forever, it is just used temporarily.
• #​726: MobileApplicationClient.prepare_request_uri and MobileApplicationClient.parse_request_uri_response, ServiceApplicationClient.prepare_request_body, and WebApplicationClient.prepare_request_uri now correctly use the default scope provided in constructor.
• #​725: LegacyApplicationClient.prepare_request_body now correctly uses the default scope provided in constructor

OAuth2.0 Provider - Bugfixes

• #​711: client_credentials grant: fix log message
• #​746: OpenID Connect Hybrid - fix nonce not passed to add_id_token
• #​756: Different prompt values are now handled according to spec (e.g. prompt=none)
• #​759: OpenID Connect - fix Authorization: Basic parsing

General

• #​716: improved skeleton validator for public vs private client
• #​720: replace mock library with standard unittest.mock
• #​727: build isort integration
• #​734: python2 code removal
• #​735, #​750: add python3.8 support
• #​749: bump minimum versions of pyjwt and cryptography

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, click this checkbox.

---

This MR has been generated by Renovate Bot.