response_type に id_token が含まれている場合の注意点

{
    "type": "authorizationResponse",
    "resultCode": "A004302",
    "resultMessage": "[A004302] The value of 'response_type' (id_token) is not allowed when 'scope' does not contain 'openid'.",
    "action": "BAD_REQUEST",
    "client": ...
}