Merge pull request #25 from timhallmann/fix_nonce_validation

lilioid · web-flow · commit 76ae51628df5 · 2024-09-30T14:28:41.000+02:00
diff --git a/src/simple_openid_connect/data.py b/src/simple_openid_connect/data.py
@@ -272,7 +272,7 @@ def validate_extern(
         )
 
         # 11. validate nonce
-        if self.nonce is not None:
+        if nonce is not None or self.nonce is not None:
             validate_that(
                 self.nonce == nonce,
                 "The ID-Token's nonce does not match its expected value",

Original file line number	Diff line number	Diff line change
`@@ -272,7 +272,7 @@ def validate_extern(`
`272`	`272`	`)`
`273`	`273`
`274`	`274`	`# 11. validate nonce`
`275`		`- if self.nonce is not None:`
	`275`	`+ if nonce is not None or self.nonce is not None:`
`276`	`276`	`validate_that(`
`277`	`277`	`self.nonce == nonce,`
`278`	`278`	`"The ID-Token's nonce does not match its expected value",`