I added access token generator generate method (without client validation).
Completely added scope entity.
I added the clientreturnurl entity.
I added the complete oauth2 client entity.
I improved shared code between generators.
I added support for client descriptor validation against persisted state.
I added correct generate access token checks (client + allowed scopes).
I integrated access token generator into tokens factory. I updated OAuth2 documentation diagram.
I correctly implemented validate for access tokens. I fixed a bug in login token expiration algorithm.