This has been brought up as a precondition of #42 and #107 but I'm opening a new issue because it's worth addressing on its own. Use outside compliance tests to evaluate dex's OpenID Connect implementation. Relevant links: - [rohe/oidctest](https://github.com/rohe/oictest) - [OpenID certification page](https://openid.net/certification/) - [_OpenID Connect Conformance Profiles v1.0_](https://openid.net/wordpress-content/uploads/2015/03/OpenID-Connect-Conformance-Profiles.pdf)