From 89162b8a7a911f094674d0a77199ae226b71a656 Mon Sep 17 00:00:00 2001 From: Tom Evans Date: Mon, 1 Feb 2021 13:44:19 +0000 Subject: Use request.nonce when generating hybrid id token Like with the implicit grant, we need to override add_id_token to pass the nonce from the current request to GrantBase.add_id_token in order for the ID token to have the correct nonce. Add test that the nonce is in ID token from hybrid OIDC flow. Fixes: #746 --- AUTHORS | 1 + 1 file changed, 1 insertion(+) (limited to 'AUTHORS') diff --git a/AUTHORS b/AUTHORS index f52ce9a..bbffe14 100644 --- a/AUTHORS +++ b/AUTHORS @@ -29,3 +29,4 @@ Brendan McCollam Jonathan Huot Pieter Ennes Olaf Conradi +Tom Evans -- cgit v1.2.1