GitLab

This makes it easier to implement stateless servers

feat: add flag to IRMA server to allow callbackUrl in session requests without JWT private key installed

fix: use forks of cobra, viper, pflag so that depending packages don't require 'replace' directives in their go.mod

In production mode the defaults of several server configuration options should change to be more restrictive. When enabling production mode in a configuration file this would not happen.

feat: switch to SQL revocation database for revocation server, and to simple in-memory database for requestors

Requestors only need to be aware of the last x revocation records and none of the other record types.

Addionally:
- pass revocation configuration into RevocationStorage
- refactor irma.NewConfiguration functions to use options struct
- split RevocationStorage helper functions into separate structs
- add credentialtype to revocation record wrapper in irmago