fix response type

authlib/oauth2/rfc7592/endpoint.py

@@ -139,7 +139,7 @@ def _validate_response_types(claims, value):
                 # If omitted, the default is that the client will use only the "code"
                 # response type.
                 response_types = set(value) if value else {"code"}
-                return response_types_supported.issuperset(set(value))
+                return response_types_supported.issuperset(response_types)
 
             options['response_types'] = {'validate': _validate_response_types}