v0.4.0

Breaking:

• the authorized-group property has changed to authorized-groups, accept string, boolean or array of string.

Feature

• username-claim will get username from id_token or userinfo endpoint.