Tolerate ID token time errors

Author: rayluo

docs/index.rst

@@ -148,3 +148,12 @@ New in MSAL Python 1.26
 
    .. automethod:: __init__
 
+
+Exceptions
+----------
+These are exceptions that MSAL Python may raise.
+You should not need to create them directly.
+You may want to catch them to provide a better error message to your end users.
+
+.. autoclass:: msal.IdTokenError
+

msal/__init__.py

@@ -31,7 +31,6 @@
     ConfidentialClientApplication,
     PublicClientApplication,
     )
-from .oauth2cli.oidc import Prompt
+from .oauth2cli.oidc import Prompt, IdTokenError
 from .token_cache import TokenCache, SerializableTokenCache
 from .auth_scheme import PopAuthScheme
-

tests/test_oidc.py

@@ -1,6 +1,7 @@
 from tests import unittest
 
-import oauth2cli
+import msal
+from msal import oauth2cli
 
 
 class TestIdToken(unittest.TestCase):
@@ -16,6 +17,6 @@ def test_id_token_should_tolerate_time_error(self):
             }, "id_token is decoded correctly, without raising exception")
 
     def test_id_token_should_error_out_on_client_id_error(self):
-        with self.assertRaises(oauth2cli.IdTokenError):
+        with self.assertRaises(msal.IdTokenError):
             oauth2cli.oidc.decode_id_token(self.EXPIRED_ID_TOKEN, client_id="not foo")