Fix: enforce nonce OIDC check too
Docker CI / Docker Build & Push (push) Has been cancelled
Lint / Linting Checks (push) Has been cancelled
Release Drafter / Update Release Draft (push) Has been cancelled
Release Drafter / Auto Label PR (push) Has been cancelled
Tests / vitest (1) (push) Has been cancelled
Tests / vitest (2) (push) Has been cancelled
Tests / vitest (3) (push) Has been cancelled
Tests / vitest (4) (push) Has been cancelled

This commit is contained in:
shamoon
2026-08-07 12:18:47 -07:00
parent 525d476e14
commit 2fae37b004
2 changed files with 2 additions and 2 deletions
@@ -281,7 +281,7 @@ describe("pages/api/auth/[...nextauth]", () => {
name: "My OIDC",
type: "oauth",
idToken: true,
checks: ["pkce", "state"],
checks: ["pkce", "state", "nonce"],
issuer: "https://issuer.example",
wellKnown: "https://issuer.example/.well-known/openid-configuration",
clientId: "client-id",
+1 -1
View File
@@ -87,7 +87,7 @@ if (authEnabled) {
name: process.env.HOMEPAGE_OIDC_NAME || "Homepage OIDC",
type: "oauth",
idToken: true,
checks: ["pkce", "state"],
checks: ["pkce", "state", "nonce"],
issuer: cleanedIssuer,
wellKnown: `${cleanedIssuer}/.well-known/openid-configuration`,
clientId,