Support for session_state parameter in the error response parameters that is sent in authentication error response
When running the test fapi-rw-id2-ob-ensure-response-type-code-fails-with-private-key-and-mtls-holder-of-key, the test case ValidateErrorResponseFromAuthorizationEndpoint fails because additional error parameters are sent in the response. The test case points to https://openid.net/specs/openid-connect-core-1_0.html#rfc.section.3.1.2.6, which indicates only the parameters error, error_description, error_uri and state as the allowed parameters that can be sent.
However, shouldn't we expect the parameter session_state also to be sent in the error response since https://openid.net/specs/openid-connect-session-1_0.html#CreatingUpdatingSessions mentions this value as well?