make nonce null by default

fix nonce
2026-04-13 23:45:19 +02:00 · 2025-12-26 23:13:48 +01:00
2 changed files with 2 additions and 2 deletions
@@ -111,7 +111,7 @@ class OAuthController
            'aud' => $session->getClientId(),
        ];
        if ($session->getNonce() !== null) {
-            $commonPayload['none'] = $session->getNonce();
+            $commonPayload['nonce'] = $session->getNonce();
        }
        $idTokenPayload = array_merge($commonPayload, $this->getUserInfoInternal(
            $this->userRepository->getById($session->getUserId()),
@@ -19,7 +19,7 @@ class OAuthSession extends Model

    private array $scope = [];

-    private ?string $nonce = '';
+    private ?string $nonce = null;

    private ?string $codeChallenge = null;
Author	SHA1	Message	Date
bence	829769bd75	make nonce null by default rvr-nextgen/pipeline/head This commit looks good Details	2026-04-13 23:45:19 +02:00
bence	8a3fe76499	fix nonce rvr-nextgen/pipeline/head This commit looks good Details rvr-nextgen/pipeline/tag This commit looks good Details	2025-12-26 23:13:48 +01:00