The OpenID Connect extension 2.21.0 has been released.
The token authenticator is now in its own extension. This allows installing the Token Authenticator without the OpenID Connect provider.
This version also introduces support for static registration of clients. But we also decided to move to static registration by default, which is a breaking change. In practice, it means that as soon as you upgrade the provider, it will reject all clients. To fix that you will need to either register them (recommended, from security point of view), or switch back to dynamic registration mode, in new OpenID Connect administration.