Support the "JAR".

[daisukenishino]

Requirement

JWT Secured Authorization Request (JAR)

max_age, auth_time

First, storing login time in the session enables this implementation.

reference

• JWT Secured Authorization Request (JAR) - マイクロソフト系技術情報 Wiki
  https://techinfoofmicrosofttech.osscons.jp/index.php?JWT%20Secured%20Authorization%20Request%20%28JAR%29
• Quality improvement based on implementation knowledge. (Metadata)