feat: generate nounce for id_token response type

[fernyettheplant]

Justification

When I tried to use this module with id_token in the response_type using the auth0 strategy this error appeared:

Upon further investigation, I read that this nonce is required in the request to Auth0 (or maybe Oauth2 as a whole) to mitigate replay attacks

References

https://openid.net/specs/openid-connect-core-1_0.html#NonceNotes
https://tools.ietf.org/html/draft-ietf-oauth-v2-threatmodel-06#section-4.6.2
https://auth0.com/docs/api-auth/tutorials/nonce

[ianfortier]

I have the same issue, anyone found a fix?

[WizardOfCodez]

Needs definitely a merge - Auth0 schema is useless without it

[akaNightmare]

Anyone, who can merge it - please merge!

[ysaakpr]

Why it is not been merged yet or if any changes required must be updated.

[ianfortier]

Anyone else still needs this? 👍

[ysaakpr]

I moved away to https://github.com/IdentityModel/oidc-client-js, because I found that the auth-module have very less active contribution happening, and the other is well maintained.

[metasean]

If I'm reading correctly, this functionality (but from a different PR) is actually included in @nuxtjs/auth v. 4.5.3

#318

The relevant code changes are here:
a515af2

But I'm still wrapping my head around all this, and the code between this PR and that one are distinct enough, that I'm not actually sure if this is fixing the same problem or not. 🤷‍♂️

[pi0]

Thanks, @jefer590 for this PR and fix. Will be released soon by v4.6.0 (#356)

[pi0]

This PR has been published in v4.6.0