fix: remove token_type validation from authenticator_oauth2 introspec…

[daviddelucca]

The authenticator_oauth2 introspection flow only works if the token_type is an access_token. It works great if your authentication server always return this type but it crashes if returns other types.

Related issue

#553

Proposed changes

My proposal is to remove this validation and allow other token_type's. I have checked RFC but I didn't find what types should be allowed so my suggestion is to allow any token_type.

Checklist

• I have read the contributing guidelines.
• I have read the security policy.
• I confirm that this pull request does not address a security
  vulnerability. If this pull request addresses a security. vulnerability, I
  confirm that I got green light (please contact
  [email protected]) from the maintainers to push
  the changes.
• I have added tests that prove my fix is effective or that my feature
  works.
• I have added or changed the documentation.

Further comments

There is no docs to update.

[CLAassistant]

All committers have signed the CLA.

[aeneasr]

Awesome, thank you for your contribution! This looks pretty good but I have some ideas how to improve it further :)

[aeneasr]

Thank you for all the hard work!