sunet-auth-server GNAP auth server This implementation targets RFC 9635. Notable features missing: HTTPSIG support Access token introspection Access token revocation Access token rotation Grant revocation Grant modification Correct error responses