github/directus
1
1
Fork 0
mirror of https://github.com/directus/directus.git synced 2026-04-25 03:00:53 -04:00
Code Issues Packages Projects Releases Wiki Activity

Add nonce to request (#16563)

Browse Source
This commit is contained in:
José Varela
2022-11-22 15:02:38 +00:00
committed by GitHub
parent 12786728ed
commit f3e4ae0b6f
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
api/src/auth/drivers/openid.ts
View File

@@ -99,6 +99,7 @@ export class OpenIDAuthDriver extends LocalAuthDriver {
code_challenge_method: 'S256',
// Some providers require state even with PKCE
state: codeChallenge,
nonce: codeChallenge,
});
} catch (e) {
throw handleError(e);
@@ -126,10 +127,11 @@ export class OpenIDAuthDriver extends LocalAuthDriver {
try {
const client = await this.client;
const codeChallenge = generators.codeChallenge(payload.codeVerifier);
tokenSet = await client.callback(
this.redirectUrl,
{ code: payload.code, state: payload.state },
{ code_verifier: payload.codeVerifier, state: generators.codeChallenge(payload.codeVerifier) }
{ code_verifier: payload.codeVerifier, state: codeChallenge, nonce: codeChallenge }
);
userInfo = tokenSet.claims();