- 🇪🇸Spain rodrigoaguilera Barcelona
I updated the patch for 6.0.x
As said before, there must be a better way to store the nonce
I am testing this module with jumbojett/OpenID-Connect-PHP client library. It sends a nonce value in the authentication request and expects it to be found in the ID token. If nonce is not found, the authentication fails. simple_oauth as of now doesn't appear to return the nonce claim.
From OpenID Connect Basic Client Implementer's Guide 1.0 - draft 40:
If present in the Authentication Request, Authorization Servers MUST include a nonce Claim in the ID Token with the Claim Value being the nonce value sent in the Authentication Request.
Needs work
6.0
OpenID Connect
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
I updated the patch for 6.0.x
As said before, there must be a better way to store the nonce